last executing test programs: 33.50060166s ago: executing program 0 (id=1039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000030000a80390001800a00010071756575650000001c0002800600034000040000060001400000000006000240000400000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000030000a80390001800a00010071756575650000001c0002800600034000040000060001400000000006000240000400000900010073797a30000000000900020073797a32"], 0x84}}, 0x0) (async) 33.402221797s ago: executing program 0 (id=1040): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) close(0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 32.527694914s ago: executing program 0 (id=1071): timer_create(0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x35314258, 0x0, 0x0, [{0x6, 0x1}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}}) r1 = syz_open_dev$loop(&(0x7f0000002dc0), 0x3, 0x4200) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) ptrace$setregs(0xf, 0x0, 0x80, &(0x7f0000000340)="c3f8e99de16a3e5cd06302bc416905ca97065b1ffd02416c76a8e05659c95c0c49f48eecfca3aeed058bcf37b5144cf27d5e0b14caa367782c8924111a16cc569507c918fc1bd9cb6b15542baee3ab1086c4fa") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x380, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104000000000000c90000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="2000128008000100677470001400028008000100", @ANYRES32=r5], 0x48}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000001440)={0x8, @sdr={0x41414270, 0x2}}) r8 = dup(r6) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000000)=@x86={0x0, 0x0, 0x3, 0x0, 0x0, 0x81, 0x2, 0x4, 0x0, 0x3, 0x4, 0x8, 0x0, 0x5, 0x5, 0x7, 0x4, 0xfd, 0x6, '\x00', 0x6, 0x100000001}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 32.359103915s ago: executing program 0 (id=1074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0xfff) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0xfffffffc, 0x8001, 0xfffe}, 0x14) shutdown(r3, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f00000001c0), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}}, 0x0) 32.081568866s ago: executing program 0 (id=1080): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000002600)=[{&(0x7f0000000140)=""/77, 0x4d}], 0x1, 0x96f00, 0x7) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x1, 0x7, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x3, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x70000000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0xfffffffc, 0x0, 0x0, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x70}}, 0x2004c000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x5, 0x1c9081) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r0, 0xedaa7000) 29.001944556s ago: executing program 0 (id=1142): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x0, "a94c67ae02ab48229ca5fa0755813900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b0149769d94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x800, 0x0, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bd03000000000000006652bfdd45ad5762982861a90000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0x3]}}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x0}) mlockall(0x7) munlockall() 10.337415141s ago: executing program 32 (id=1142): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x0, "a94c67ae02ab48229ca5fa0755813900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b0149769d94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x800, 0x0, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bd03000000000000006652bfdd45ad5762982861a90000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0x3]}}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000040)={@my=0x0}) mlockall(0x7) munlockall() 9.882018539s ago: executing program 3 (id=1259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640", @ANYBLOB="66e5d9be"], 0x6c}}, 0x0) r1 = getuid() setreuid(0xee00, r1) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x2, 0x0, &(0x7f0000000040)) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, r1, &(0x7f0000000000)={0x7f, 0x3}) 9.781129525s ago: executing program 3 (id=1260): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, r3, 0x300, 0x70bd26, 0x25dfdc01, {}, [@HEADER={0x4}]}, 0x18}}, 0x4040040) mount$9p_virtio(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000300)={'trans=virtio,', {[{@access_client}, {@version_u}]}}) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000080)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90e, 0x1ff, '\x00', @value64=0xfffffffffffffffe}}) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x40000000) 9.78068346s ago: executing program 3 (id=1261): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x64}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000580), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x0, 0x0}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)={0xc4, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xa6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x6c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x18, 0xc, 0x60, 0x16, 0x3, 0x1, 0x18, 0x3, 0x4, 0x24, 0x5, 0x48, 0x4, 0x6c, 0x60, 0x16, 0x5, 0x14, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x8}, {0x7, 0x9}, {0x1, 0x9}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0xa}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x18, 0x48, 0x4, 0x24, 0x30, 0x12, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x3}, {0x4, 0x6}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xf5, 0x1400, 0x1, 0x3800, 0x4, 0xff87]}}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xc4}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.691077471s ago: executing program 3 (id=1263): setreuid(0x0, 0x0) r0 = syz_clone3(&(0x7f00000030c0)={0x8000000, &(0x7f0000002f00)=0xffffffffffffffff, &(0x7f0000002f40), &(0x7f0000002f80), {0x8}, &(0x7f0000002fc0)=""/38, 0x26, &(0x7f0000003000)=""/116, &(0x7f0000003080)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) getresuid(&(0x7f0000000000), &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r6]) read$FUSE(0xffffffffffffffff, &(0x7f0000003140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000005180), 0x4000, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd27, 0x4000, {0x60, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r13 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000051c0), 0x40, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000005200)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000005240), 0x0, 0x0) r17 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r17, 0x0) r18 = getpgid(r17) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setresuid(0xffffffffffffffff, r19, 0xee01) statx(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x0, 0x800, &(0x7f00000055c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = fcntl$getown(0xffffffffffffffff, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="4f534ee1c85db703202f4b67ca301bf7e28ab791bfb65c707b3da6702c64b1353a676eddef1a2fe66da88ca17ad4e481eb3c2f10e0e64e5eb80b48f6c6a36d878a90ef7aef23d4527575570c31a05150c70047448a28a3bc68224dc9cda9b50def980102289acbee7a0b1fcf0545af95f9bf692a8dd5835c184ee7eb03b95302036fc0", 0x83}, {&(0x7f00000000c0)="b247d9e7d170f5d355f637fab04021a4cdff2afe9617f3c8c248a4b2074851ad01353962528fa93c498a", 0x2a}, {&(0x7f0000000240)="9fe55bb415eca3b772c1d8ae0a3d6bc308a02fd466855d80fa23ba335ac55c4a308b0bbaa088fe9a8154f7d8aaeba77d9916f077abcdc5b6dbd2cd70ab632b629406e4a30c11a85ba414bc2110e5e19a175444943c00982aaee9c6a27a9808e7f422e36ee83fb0724dcfbcc270d01dfe6754ecce5ce8441ad22e2c257bed543a864ed9cf00329ef15d3809dd3736cfa6dbf16b5dd50ab5fa69c5612a7e632aa218ccd9daf6bef6cba5918822e45c359e13c13e7c98d694e3f8d44ec972a14cf2594ed024f773c23b26dbde14", 0xcc}, {&(0x7f0000000400)="808e3990fd84fe108ccbb3a50fdf880c9b850e703a8fce242e562fd2d788cd4afb895d1cb0b0e9ae3c87ac443bc70b107265a2143e6dda343400fd4f1a14790093f15b641afaccb599bac130b61d9b8a6caef90e3b8ecbab5aae8104c8e01590e31baaefe574869703735d9d70e7fb27d6f68953998de0", 0x77}], 0x4, &(0x7f0000000600)=[@cred={{0x9}}, @cred={{0x1c, 0x1, 0x2, {r8, r5, r7}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r16, 0xffffffffffffffff, r13, r13, r13, r9, r15]}}], 0xc8, 0x48084}}, {{&(0x7f0000002a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002a80)="62a7e5921fa6a5636074ecdf40cc768c77bcd5bf3d20c81bcf47fffe813aa7361cdf3dd77f721366e88f1732856327a741426e530a91297a755cde5a592ef11eec4468825d6dc9007cb93bba6ff9eb56cf5621b7e1c5f4effabbf7bd1d0721a9a5a45120ab", 0x65}], 0x1, &(0x7f0000000700)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r9, r10, r1, r10, r1, r2, r1]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r20}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0, r6, r7}}}, @rights={{0x2c, 0x1, 0x1, [r9, r10, r9, r14, 0xffffffffffffffff, r16, 0xffffffffffffffff]}}], 0x118, 0x854}}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000000840)="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", 0x104}, {&(0x7f0000005440)="0c2daa3629953bb722f470148173842fd82eab57a78875c43b4fcab97aba7c01b510f019167cf661", 0x28}, {&(0x7f0000005480)="548398", 0x3}, {&(0x7f00000054c0)="f9417d74f7f9582a962d9e8e2515be6d678d66c006330a3a4f0a4743c3eb2d93a4fdfc75b05c5f5634e9bdc47fa96a1ee742eb2f25e1c3de896ce0543947af1cd3c03a54d090a9427118f96a88aa10d39ff3cdf3058adac193eaa711cdf6f1507b6f1dd5f788bca7b4ee3fc8cbb20e5446ac5030ac0539874c", 0x79}], 0x4, &(0x7f00000056c0)=[@cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, 0xee00, 0xee01}}}], 0x40, 0x4080880}}], 0x3, 0x10000050) r22 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r22, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 9.070992599s ago: executing program 3 (id=1274): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_mr_vif\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/ip_mr_vif\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/240, 0xf0}], 0x1, 0x47, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1a10400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1a10400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 9.001462398s ago: executing program 3 (id=1276): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067726174617000002c00028006000e000200000006000f000500000008000700ac1414aa08000a00", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x0) 1.950684118s ago: executing program 2 (id=1414): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xc1fb, @remote, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x50}}, 0x0) 1.948868259s ago: executing program 2 (id=1415): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000000)={0x5, 0x8001, 0x0, 0x2, 0xffffffffffffffff}) chdir(&(0x7f0000000040)='./file0\x00') ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f00000000c0)={0x2, 0x7fffffffffffffff, 0x7fffffff, 0xce5, 0x0, 0xb}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x78201, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000540)={0x4f, 0xb, &(0x7f0000000140)}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000580)=0x6, 0x4) sendmmsg$inet6(r2, &(0x7f0000001e40)=[{{&(0x7f00000005c0)={0xa, 0x4e20, 0x0, @local, 0x1000}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000600)="de6915d559b0af3fc3540714610209c6cf30b0909994feefcf4e4e40274eea41d05010879546d9dc02ce2db3e7c1eeac4270cc829d3f5eb1c607272ddf0589d0184f1734338ad4df7f00a146ae12b684490cf59dceccda156bd0b254eb84ee7e3f9c74bc6f99f9c8c70e1b3037f8d5d93cadded71010885b8488a5b8e8ea7840fc7616eaf634563b3a", 0x89}], 0x1}}, {{&(0x7f0000000700)={0xa, 0x4e21, 0x9, @loopback, 0x759}, 0x1c, 0xfffffffffffffffe, 0x0, &(0x7f0000000740)=[@dstopts_2292={{0x40, 0x29, 0x4, {0x1, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @ra={0x5, 0x2, 0xb22}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @mcast1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x983}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x73, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x3}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x5e, 0x10, 0x0, 0x8, 0x0, [@private2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2e}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback]}}}], 0x140}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000880)}, {&(0x7f00000008c0)="e37a3698d71f9b38aa3da89b5fe982d1b363d511af1a4dfc748e3d555fb27fa7b301c7105915044158578fc33b741ce3970b9a96f5f77960ace69cd374e6fcb85a1138a33ed3708c75fc08c60972a4637451a52d965f32113d9014e8a6b5576573ed698d893eb7c6c8d267df8b30c507576a075942621e6c0ac0deff781fa0ced56ec0a5c77d545720a0935bf1c2e723bbdd6bdfb8b45d1a42f57e0ab4b9c60ace368552c5b689d4f273c54e2aea3416f716fd6991f011e49598cf2d59335611806f9b225a3662e8784f53f2ae1b1af863b7e2a5a36db8e8b698557ec12556459c24561be4c9abd1c9f3050e1942", 0xee}, {&(0x7f00000009c0)="b333775dc28bc77c7ad8f9c0ec760872798ab7ad86c92a5b7e93399c07c8e3f2118455bf6cfad1e135561d95ea3bdba6ef8c966797819904b0b3191ff30c3a42038ba67a6eeb5ef10796521742897ee6a1d26ac7a58713f5abd66c22c3262306445209f44f5b06d24fd90b9536258c2463fde89e63e1d0509b42daefcde2376bfdbd82dca172ea509cb2e6e02d7674190eef516638ffec39e5d64acf2b738b52c4ec00413b39c4f119", 0xa9}, {&(0x7f0000000a80)="0df31e1b90b7a78c978c6e2aca5102935972aef5467782c9dca07f0948af008d624d7626b88b3e275b8fbc67d8f082f9e63c72a69c4f54ce6718b91982b11b411662a2d5e2a0d43a57624e26804bd50268d0e3cb42a07669dac0b24d17bae3dcc45d2ff12ba67a848109", 0x6a}], 0x4, &(0x7f0000000b40)=[@rthdrdstopts={{0x38, 0x29, 0x37, {0x87, 0x3, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x10, 0x9, [0xa8a, 0x7]}}]}}}], 0x38}}, {{&(0x7f0000000b80)={0xa, 0x4e22, 0x6, @remote, 0x47}, 0x1c, &(0x7f0000001e00)=[{&(0x7f0000000bc0)="afb38d2dd30cef161e09d928df207c8134879f1976c2b1099e3ddd2a288f8706437aea38f51707d9effa74ad02eb5f565f8ef0a18d6f749538320d1798e1e2cb42e05fed5bfd100e7fb4a4e548df98acd3d6b94a30cce3cd9d8b682bd4b2c8afc0fae071ce0e716870c0be4e07bfa8c9fe3eb3f7b7eabfe69b5fd301c080a2695270283a315269a4e02d11cda045c89a7c45d869a199b512e0674117d123bf3959addda3de28391e7f40c158899771a444a48bff8fc8739e1a5195652df2aeb3261365e5ce10db5446ee95376b95669e59502688fc114a2b48268fb93ecd67bb779f56aa00ab1080c03bf04e09b9db4ca74d35e4553935bf2d7f", 0xfa}, {&(0x7f0000000cc0)="4d218f4da91a59b28b498e32a5dcb6bd5425eb7587ad4e1a4a15618fa9c086aea94a", 0x22}, {&(0x7f0000000d00)="c13b203fa6a41b22929d962260683b9a987f2230f2aec97b90db448485630612a7109499aab798c3d98786833fd4d3d8327730e47cf7b0521e6c8ad0f28e57a942db0d57efea12ef945c7b30b89afe990576a8f49a95cb6ea95db1e88ff9654019a3c599212be359e2b0a2336bf30504560867a7c682b2d07e7705a0320280528fa895142508d6cd6783520ae7b053c10947b0d14754ae36e84ef015059b6f95a71e59017768e491d35e41ce72b8fbd513f2471c86010dd12dbc93fb52cd774ad31f6f3984f0c897", 0xc8}, {&(0x7f0000000e00)="5786813d29bb98c0634de662600f2aa66b0801ccf322384d251c0101cdf63d12e3ff6ea6088df61e10bb3bbad8206038c615a6e3a4516987c623a0cfeeb12b05f0d1963bfcae51533e47feefc6be93902b3258205fca7a7045391c671cd4312c0add296f4682870579181c1cf2bea1e5f47eee88600606841ffb9a008a7afd8c07522716f7c3b89ebf618d27f01abdeb0236fb15e9d1fb8db0cd8a8f401bab49103eef8756e2a7123a2f5a5ef1707a9185feadd365f2b20578b6463657b5c7579e4c05d8399dc07478e2c2933ef93c351bbaa8aa3332d755223ab7156d84ef0d98de04da228d5e0818e712c8b89294dee437c42823104445b0c1672f1e9fcd025b95ce134fb474b9244b65570aae4b82df90df2e1acd99c1fa81cc2724b998c117104ca557f2b200c0c4375296332330c19626820ced5c07f96501294f108bf69e656ef60a2d4d7bd2f26bc65ea7f0f86dab483692a6affc64be073adf14c74d6b78d9a556441fb4a604669b3c55f77e4d9a2bd28aa035124e084bc2f9a87bf50bdff37636af215199808b44c01128a6d6de52efd732e4f744637cb0b98eb0e04b6b7295ae69f42c805e9606201c602fcf7445012f667640bdf1c81d3779f6fed059d28606dd2297826f669854c340974a2da4af1a15ab176362f5b2289b756cedb6b941b0a9dbcbf0b70526becb35d89d924445f4c552f82a43cb6baa6935c84ad73dc97f2c78ec0c327338ad96a46e345e1621a3f84989df2c2232bf8d01566990e3a037627e6b084f30030f73a9aec7b37fe14d764cb37729a9c826f575f2a27a92fc95ff34788efb72d2570ca386486cddb9c9299d86ffc3ba0341bdc8477feee972f12a6712494a21674a09ba33556d44ccc88e9145d0a70533917a68db7ebc40335f80be45cd89c224e35ae1410bb1c398c79f36e7743a4f79f6ec1719786d1a4f9d2986223f4352426f4d1edc12a48cd15f29d939659cc6b3db51486a0df8e38b84b66bef59da0ebadcd85eeb7cbfe2328d0d6142921c6ff112525047ea71439b72d3b36a78f18ae5cce58678a2e8cca213ac378c987a474541691446178c199a279bd88d2884a1bcdc25fbbac6f7aaa2bb3132f0a25269cbed75ee43bb3a3750be646cc16ca1c0612cfbc31d11113b17d30eb8a0a5c0649e88ff81418ccb8ea26fab7f649b8af1615bbad4592967a2b60cda44e539f52a9171250efe1c17802d6d3ee2c1d2641ac4b28c3fa7d85e1d033f8beb629316714621e2cbd243a2129cbf7a8f510907fa9c67b5aa2972a43e4d20bb88b7abceb311346e5080a77aa7cdc6151a08d9e001ae20e6e584c5c1a3acf64c26eae0467d3257369a8a54ec49e2157edd7f3dcb380208d3d0960438ca6e2bb9c9baf8a59c076357ce69cb703518e2ae5efac31d6130023bf927263c601bce56cbf8cef5a243737dc6d2e4157e7a0b07d8b8eb2f816861a199e4ba5c8e48009ddc957ef0a2d835d223cc13997eb17fdec8b46009eabe8f2d0c38715fe951656a7bd0246154e9fca167b0d3ca53ecc1afdaa858abe62269bed71ed3d0108268c1a4a9a867f69ccb90821e30673022e284c65018ad2dd8281693435d32382325b6c7c1eef497da52b4e3a938bcff5466bdf6f4b1c41a81b9ca909286c3835f130b2e077bb2d02092dca74da304a0d44c553316b31da10b1dd7f499ec843370f7639b19cb93e3426be82d6473ae3395d75e5e703402aec73c1269f0f799b91171a7c4ae2643ffc97c70ae4e53456c29efeaff9644bac980614599da1b8e08fdb71895d3351396571c19547194418bfd4554790a3b21381190925ad97670e6dda4e5413d55b1e25cb9aa0ca6dc9ee712ff6b8d356f8dab7eb194bda08bf5cb0bbee1205bd1d0fafd10df74f7a9b5fb5b2518d4f4c1ae4621cf83190a999f6d6698f93b73239ff1288c7e04efaaed6b381d404ecc2e4a23d2c1c64a4916db09ec54157569a381781b4d16594e7d9482f78791783463af55c3d615d1f4ba73d3d3631e5d9cb51662a2803a0c1d5e1465f20b9270c9926d142cdb6635d1b446baadae913a6c0cddaf12302cd610b16db1a0aeda256d7ee65896cfab9006c390b27320c2c0f287a548cfaa07e5ad920a36788b00f8cdb620e0667e279a20f292938de577a2aa65f7ccfeeeb2c54054c25cce12d2216fb336c1b73d029e1a3237ee81496b3f5a50b95490482b1caec5c053fc5c81647e088db4eb2f894011dfa60c13cbc82586da0c940ed680fe8810c10dadba1cdce4783300fd3809069b330ad0cab2f010a3ea64f2ba9f9556fd1f181a786e70b127a2a40852c92562be4b38366bd5fad6cdbcd02259a5e5925ee2948c89ca1cc9d6738d4007485a4fcaae66e6e76103619c95b89852653dc6a5be0e5f95823dc7b5489b38cc605858e0ee6e97ceb4af3b18318809e0bd5e856638e4699d3275e2521a3ab5d728c36f3343e991d656769c136215c1aa4ab254c9c2c3e4183017b672b7a126019a3b9a6b71166a4984ba0874808741734226743e249366dfe2198d55c80602ead5e34cb2c487335432adebed0297782da06b6711c965cdc5dfa8dc735cff8190a2b11c14487ed1c4a320308bc20857315bddd893574bd0fbfecb5f6940a48cf6536f5a191718bec5c64ff011f70f8a1d178d7b9adcbf08161f2bfa4cc52275834cf96ecd6e06f5be5dafae06d88500c1fdd6cc3f5d334b35d7632f465b674fd4ed63851e54aea04a6beb789ba66e8b50e7bd51f97faac20b0036f8234bdcda67d67f4860452c75f78fbeb1ea5539c4c54b644703cd59a6b50e037b6a62555acba608a79b4142d0bdb2a7df85d4925502ee8212edc8c5e11967ceab00c2b7d997c01ca60f3c969648368eb46b881a43a73ca659f880d70976dbf4849ae195b31cd978f72885df4015701d85993277193316acf4fd1f7527e22e571b69d45b2d47d930712aa17bd8ed87a09b6319a4cf2c98885fae1e7ef75dc59ceee6aba36ed658f5fecb25ead8b572a076c4610da27ba919b0aedc74e7d197e8bfa347b9c6c820b5a8add2ca4152825e864b0619b2bdae69a8338dc1025240c22eb7948d70304b3de7ace5694717fefce90a52f0762555ecec95df625c5a6747cff0cea76bc45aee588403507475fc11dae2873e9779fd2c7d68785fa4e36841e5548f5d8c8eebae23933c03c57cafe4d1383a85ae00b039668a30cdcc9bda7c7d5212149a9e5d3d4dc054aead431cc96b40b85b0a3ed587c2651d9c2b1986fe44fc07c1e6a3ff9586486718a5be25170db522ea75707a5fde300dee7c728b5270a0d3e84f41f686e037e7b04b7d59ca6a7d7f950678fa2dfa33ed869409053e12520440a6696832f4d0c589c77b17ce106f6ded16b1fccc34235e8cc9bbce00f53ecb64f7775ef5cb74350fc8197f83d5c23bc0e7673487c771139f8f21fa5ed2e24b88aa556fca7ef0b25e86a572704df0bfebbecb0d23d13ef8b66545e25d662aaedfe6ca95af0503ae9e2723aa5758c60059c48351d58934440b6794a1f75ea005fdc1e3736bf9ec6e6e1e02931647bed9901f8964b8ed80c687399ce0df2b2ca08a5a9c633657ba39d1173786521724c19d65825bae36cd6b17baad7a15edb71d92c2e0be1de707919394bbd737e89935cb863208479853a10ecdb3c1a181700a7db51b7822fb1f72deac2f1a6ad7453229eb3dc40974a8fdc9c9b34c04ca2d35582cc795a13c36ca84cfca97baaa9b6c47e7e20fc12b74a7ceffa3709b68f1042109f029f4f5b9029fa23ad8549a28b6e4970d2452f3eaea5df2f7709beda91d6908c098a6b169ecec8d17c196c1eb871ab442decf799c6faabc4c416156f9942ec116c10ceef728d06cd7e55822c737505b90e3455ee1789670bf0b69fba080c621e438fa835bff855de9f2274364bab8bb6f4d1b9f86ae71c05ec5c1cddc4b4ac06bc74b64d3e90d9f3898cae97d1c17afaf884fcc361c962b7f7e5643e6cb2d62bf70b4333a1edf8cb7bf55f875f5b40cc00d3c8660673676fcfcbd8b77f7c15a72e02bdad557668a7c9893dabbf6b97d6655dfad2ced3e7986ab98bdea59cdc7487a12cac857aa0de67db74583893f97024e57075ad2f59d55c9dbb6b25c53ebe7779509928d4c8d25ba7e518bdb7a92844f072402a77f122d8d49f56d1005268e940489da9b36da4bc2db186c3e23e202ed92da9fef80f59356d4e8c62c2d831c75d29f3f263726d41a52d1c4e6aadfbde3f52f4d83f28c3bd8db97ed2c2fc8b986afb994f141b0ef43e12b3661672e566bff6b96fb8ea65847c40a8eec640e2a3acb0c52e5341633ce12b28dc70916ce8e988a5c894f538196fff4975d03e1455f8e537ad544b9d5d6d71d433f8fb0b395f9e8774685732dae1df5fe72b6987f2b0628f4ce85390913447b6507174bbe2aceaba05d91036b5cc3c07a465055e09cac9ae6fd047500d8c3bc7e88bf4f22f6b1df35df125887fb6a6e63164c205520365f98ed66b1758db175ec7ee385f32e10e9aba05a004fc63bef5b0991960ba64b2797e153af2c98658e2797fc43ea9808ac86a364e9274f8d094dc56bea77a32ac8a423bf4b8d4d006f550e130f93dea147470e25da97708343d5e5f09b09b2d8ae32ec262d659072034ed2c33dec0c799aa4f1e338218a308a48a06927c6fc1d68578289a667ee09b091a9a1a6ecf9b4687cfca2815894250c46bb8820d7da7d8fb32df62738dab8c72ce8b893c58abd70cb114504c53fd2789d0a6174e9ad1855e8fca46e6655f181afb62e26e69bcb8dd6658fe4ffcbe020c7afc882120a8ea195aefcc99b354541dc91f500de3068e3b77d2884f4571ba987acea7ebfd629ebfe146cc917ddf4df6417230c2d91a697c6cf6463ad3218296dadd855661f08e641122bd799e2a1f7e51586f8ebea547714d55ada5bc55550e7f45e44befc62d00431b04b66de9510928d5c6d39cfaa859b9ac114146903b2cba9f9fa8728e833d4939b4a9415c10f1f4f7774eb10d7db56b2ff53baae85e01454f852d1f0955335dacc2ffafda39dc96c826b1558d6bc58d8781dfc3bd7cfdcbe2cbe1cbf99f38eb322769caa65e9f2f19a4603cd0aca13a6b931ff1472a6f35bb0721a744451610cc13547a66a08d90438b7e0e819ae5176a3fcb62b5f806e14c55861b1a81d730b7cc2b2117d6de7d1c59611aa94eb2be5017e5f9b29dd9fe0733b5f6d83e3b8fc37fe5acb745ee9175c9e14b9bfa13283889a7734d3f2521bb0a33734ba9b654c096e76f1ae7e3184f8967f34cba943d21596335ca21b3d366a679597853b74194b5bb31e82d4d9a644813b6fdc97b016893846d14df827deaeb28e6f2e4373024b36a1c6dfef31ae2fed29981293d42f94ea11cf041d18b1e6821b36386ebcaa612ceb203cac771197e2ead99d1cf79ac3f37e8806f0623557fa0f40217ae01724066afcaa2dddf0cebf9cbd06e001b48db9e720ee3bcee38ca3f9dc7c3cb739d31ec17117c078b7989c7e930fe8434545e3bf7731b3a9422cfeb4fd517131da1d0bebc0dbf0290fbab252151a241a168dd557d81ec42870f19d718e3a4818210c3a58186255c5587439c51cdd4ff5fe00fc3d2d4311684a8c454c2c0ea89ed6f2eeef69b683a88041963f03c29001f53008395711752df9070aa00ed56157409cb1cb799e7fad33364998fe7b3cb89d9d3fb2cec80980c3250458655bdaac1ddfa1153ab0b10f4aebdc433406f513d765f868baf04c9d0904950c317e53a5ff062dcdb2c6e9329fa9d16d6fad4c44", 0x1000}], 0x4}}], 0x4, 0x4000000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001f40)={0x0, 0x5}, &(0x7f0000001f80)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001fc0)={r3, 0xa}, &(0x7f0000002000)=0x8) lseek(r2, 0xffffffffffffff00, 0x2) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000002040)) execve(&(0x7f0000002080)='./file0\x00', &(0x7f0000002280)={[&(0x7f00000020c0)='\x00', &(0x7f0000002100)='\xff\xff', &(0x7f0000002140)='\xff\xff', &(0x7f0000002180)='\xff\xff', &(0x7f00000021c0)='\x00', &(0x7f0000002200)='\xff\xff', &(0x7f0000002240)='/dev/ptmx\x00']}, &(0x7f00000024c0)={[&(0x7f00000022c0)='\x00', &(0x7f0000002300)='\x00', &(0x7f0000002340)='<]}\xb7*\xee&%#%(3\x00', &(0x7f0000002380)='/&*\'+-{&+\x00', &(0x7f00000023c0)='!', &(0x7f0000002400)='@($&&$', &(0x7f0000002440)='-!-^\'\x00', &(0x7f0000002480)='{@:.^/.@\x00']}) r4 = syz_open_dev$sndctrl(&(0x7f0000002540), 0xdc7, 0x313280) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000002580)={0x8, 0x3, 0x4, 0x3, 'syz1\x00', 0x5}) socket$can_bcm(0x1d, 0x2, 0x2) r5 = syz_open_dev$sndpcmp(&(0x7f00000025c0), 0x5, 0xa000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000002600)={0x7, "a87d166a9477cd0b5d64f6744a6ff990f44267b0d1e7b71188c2f1147d668b380c49124821bdf3b184a19af3bed45bdf5f429fb66a7fd60d3b3c4cbe69f54013", {0x2, 0xa71}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000026c0)={{0x0, 0x5, 0x101, 0xab69, 'syz1\x00', 0x9}, 0x0, [0x7, 0x40, 0xff, 0x0, 0x101, 0x9, 0xfff, 0x1, 0xe5, 0x7, 0x8, 0x8, 0x8000000000000000, 0x6, 0xf7, 0xd7d, 0x48a2, 0xfffffffffffff595, 0x0, 0x7, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0xfffffffffffffff8, 0x7fff, 0x10001, 0x8001, 0xffffffffffffff80, 0xc4f, 0x9, 0x4, 0x5, 0x6, 0x3, 0x5f, 0x6, 0x400, 0x7816918d, 0x6, 0x2, 0x8, 0x10001, 0xffffffffffffffff, 0x6, 0x7, 0x8, 0x7, 0xffffffffffffff81, 0xffffffffffffff7e, 0x5, 0x8, 0xd52, 0x7, 0x401, 0x5, 0x206, 0x9, 0xfffffffffffffb45, 0x7d1b, 0x9, 0x2, 0x0, 0x3, 0x80000001, 0xde6f, 0x3, 0x4, 0x645, 0x8, 0x6, 0x9, 0x8000, 0xb949, 0x5, 0x9, 0xfffffffffffffffa, 0x8, 0x3, 0xf07c, 0x10001, 0xffffffffffffffff, 0x9, 0x6, 0xb145, 0xc6, 0x6, 0x0, 0x2, 0x2, 0x779e, 0xfffffffffffffffc, 0x2, 0x4, 0x4, 0xbb, 0x3, 0xc, 0xfffffffffffffffe, 0x6, 0x3, 0x7f, 0xf, 0xef5a, 0x5, 0x3, 0xfffffffffffffffe, 0x60ea, 0x5, 0x16, 0x90c4, 0xfc, 0x8, 0xffffffffffffffff, 0xfffffffffffffffe, 0x40, 0x0, 0x36, 0x2, 0x8000000000000000, 0xffffffff, 0x7, 0x8000, 0x24000000, 0x6, 0x4]}) execve(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002e00)={[&(0x7f0000002c00)='\x00', &(0x7f0000002c40)='{@:.^/.@\x00', &(0x7f0000002c80)='(\x00', &(0x7f0000002cc0)='!', &(0x7f0000002d00)='/dev/ptmx\x00', &(0x7f0000002d40)='%!\x00', &(0x7f0000002d80)='!', &(0x7f0000002dc0)='\x00']}, &(0x7f0000002ec0)={[&(0x7f0000002e80)='@($&&$']}) r6 = socket$inet(0x2, 0x80006, 0x401) getsockopt$inet_int(r6, 0x0, 0xc, &(0x7f0000002f00), &(0x7f0000002f40)=0x4) mount(&(0x7f0000002f80)=@nullb, &(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)='fuseblk\x00', 0x840, &(0x7f0000003040)='].\xf5]\x00') r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000003080), 0x438280, 0x0) openat$cgroup_ro(r7, &(0x7f00000030c0)='io.stat\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000032c0)={r7, &(0x7f0000003100)="378a41cda664e0f5f69f15094e04ab991f1a4b06a8be45989fbd6f75e264dee7150e6f199a767ef3081f3eec09660c27e3220ea08307b4e51c14ac07a87abd1c64cb851061bd406dba404bc6ea34719a4de5fd3244e1538a73ebc81c89f0612e88171d742e1864d6959b8e092edb7c28d9040bb7cb9add0f99dcf995d97c04b394047a638fb972a73546cc4ddafc40854a973c1089d4d0876b805f3442ab5ab433ed0b9474a725563ef405585d324a77a21b3d3e69e89a6e30dc4ce8c23a93aa543dfe86fc754d667946baba9b0056af5039c85eac4b905dc20c", &(0x7f0000003200)=""/181}, 0x20) close_range(r6, 0xffffffffffffffff, 0x2) 1.881793591s ago: executing program 2 (id=1416): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000001280)=[0xff], &(0x7f0000001280), 0x4, 0x1, 0x1}}, 0x40) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @local}, 0x2}}, 0x2e) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @remote}, 0x2, 0x4, 0x3, 0x3}}, 0x2e) 1.881289916s ago: executing program 2 (id=1418): symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdir(&(0x7f0000000400)='./file0\x00', 0x6) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040015}, 0x20040004) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72742f3078303030303048a7e19a56ae7bab3030302c70726976706f72742c00"]) mount_setattr(r0, &(0x7f0000000080)='./file0\x00', 0x9000, &(0x7f00000000c0)={0x0, 0x74, 0x100000}, 0x20) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, r0, &(0x7f0000041000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="0fbb31f20fd6d2640fc76e471af466b9410b000066b85600000066ba000000000f30660f38140c0faa670f5b1233180f07", 0x31}], 0x1, 0x70, &(0x7f0000000280)=[@cstype3={0x5, 0x8}], 0x1) 1.740895958s ago: executing program 2 (id=1421): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) getpid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000210000089"], 0x50) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 841.785394ms ago: executing program 2 (id=1441): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000e5000000850000003900000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c000440000010c6f7a0b5ec0c0005"], 0xec}}, 0x8890) sendmmsg$inet(r4, &(0x7f000000a8c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}, {{0x0, 0x0, &(0x7f000000a7c0)=[{&(0x7f000000a500)="50ea42", 0x3}], 0x1}}], 0x2, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="fd3b6441ffd687e4a172454d8f0500ac", 0x10}], 0x1, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4044094) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0xb0, r8, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2f, 0x35}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffb}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4008880}, 0x40) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/103, 0x67}], 0x1}}], 0x1, 0x42, 0x0) r9 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r9, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="8375896b192cbcefad280f0b3c1bf120", 0x10}], 0x1}}], 0x1, 0x4080050) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r10, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r9, &(0x7f0000000340), 0x41}]) 321.09862ms ago: executing program 1 (id=1444): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x0, 0x20, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}], [], 0x6b}}) (async, rerun: 32) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) (async, rerun: 32) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x55, 0x0, 0x0, "190e3ab5a2c3ab90772ac194fa121936db44ac0176b6b21aff2d5f108ce8bc676694e73f4b62610f8ee474b33e2599c9b700768134941e109de9c2fe4083c6350fdb25db03e4a3ccddc9d88ab3a06f3e700003a1a9"}) 260.614624ms ago: executing program 1 (id=1446): socket$alg(0x26, 0x5, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c461c02f9b7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300000000000000000000080038000100040004000d00030000000080000000000000010000000700000000000000080000000000000005000000000000000204"], 0x78) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000300)='#', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) (async) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, &(0x7f0000003240)) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 32) r2 = syz_open_dev$usbfs(&(0x7f0000000600), 0x800000001ff, 0x802) (rerun: 32) ioctl$USBDEVFS_RESET(r2, 0x5514) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000740)={0x2, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x84, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x7c, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x6}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0x5, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x3}, {0x5e, 0x6, 0xb}, {0x5f, 0x5, 0x7, '\x00', 0x4}, {0xb3, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0x7}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00'}) (async, rerun: 64) sendmsg$alg(0xffffffffffffffff, 0x0, 0x4) (async, rerun: 64) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r6, 0x6d05, 0x0) (async) read$alg(r3, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x4010, r3, 0x12c23000) (async) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) (async) r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x400000000040, 0x0, 0x0, 0x400000000070, 0x4000000000a0], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000004000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) (rerun: 32) 201.633662ms ago: executing program 1 (id=1447): r0 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, 0x0, 0x0, r0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x962a, 0x800, 0x3, 0x2ac}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x2, 0xfffc, {0x0, 0x1}, {0x47, 0x2}, @period={0x5d, 0xfffc, 0x0, 0x0, 0x8, {0x10, 0xffff, 0x1, 0x1}, 0x0, 0x0}}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x12d8) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_RECVMSG={0xa, 0x13, 0x0, r4, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f0000000180)=""/152, 0x98}], 0x2, &(0x7f0000000280)=""/230, 0xe6}, 0x0, 0x10103, 0x1}) 201.075445ms ago: executing program 4 (id=1448): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) r3 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$CDROM_NEXT_WRITABLE(r3, 0x2275, &(0x7f0000003f80)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f00000001c0)=0x5d, 0x0, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in=@empty, @in=@empty, 0x4e23, 0x3000, 0x4e21, 0x1, 0xa, 0x60, 0xa0, 0x33, r5, r6}, {0x7, 0xffff, 0x2, 0x0, 0x400000400, 0x7, 0x9, 0xfb}, {0x4, 0x2, 0xfff, 0x8f5}, 0x10000, 0x6e6bb9, 0x1, 0x0, 0x2, 0x1}, {{@in6=@private2, 0x4d2, 0xff}, 0x2, @in=@remote, 0x3502, 0x2, 0x0, 0x4, 0x59, 0x5, 0xc0}}, 0xe8) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x8, r4}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) ioctl$CDROM_CLEAR_OPTIONS(r8, 0x5321, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) close_range(r0, 0xffffffffffffffff, 0x0) accept4$inet6(r7, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000007c0)=0x1c, 0x0) 199.794353ms ago: executing program 1 (id=1449): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) dup3(r1, r0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000009000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000040008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x50) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x58fd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) r7 = socket$alg(0x26, 0x5, 0x0) r8 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x29, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000181a0000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018620000020000000000000006000000182a0000", @ANYRES32=r4, @ANYBLOB="00000000050000001801000020646c2500000000002020207b1af8ff00000000bfa10f93d53d5fca217b77e48d229d00000000000007010000f8ffffffb702000008000000b703000007000000850000000600000085100000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000400)='syzkaller\x00', 0x4, 0xaa, &(0x7f00000009c0)=""/170, 0x41000, 0x1, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x0, 0xe175, 0xcf6a}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x0, 0x3, 0x5, 0xb}, {0x1, 0x4, 0xf, 0x3}], 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xd, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x7}, [@map_fd={0x18, 0x4, 0x1, 0x0, r1}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x2c, &(0x7f00000002c0)=""/44, 0x41000, 0x51, '\x00', r9, @fallback=0xe, r1, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x8, 0xa81, 0x2}, 0x10, 0x0, r10, 0xa, 0x0, &(0x7f0000000b40)=[{0x4, 0x1, 0x5, 0x5}, {0x1, 0x2, 0x4, 0xb}, {0x1, 0x1, 0xa, 0xa}, {0x1, 0x5, 0xc, 0x9}, {0x3, 0x3, 0x3, 0xa}, {0x2, 0x2, 0xe, 0x3}, {0x1, 0x2, 0x3, 0x9}, {0x5, 0x3}, {0x3, 0x4, 0x1, 0xa}, {0x5, 0x4, 0xe, 0x2}], 0x10, 0x75, @void, @value}, 0x94) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(blowfish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r11 = accept4(r7, 0x0, 0x0, 0x80800) sendto$inet6(r11, &(0x7f0000001a00)="83855a8d3e61fefd", 0x8, 0x40010, 0x0, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)=""/81, 0x51}], 0x1}, 0x0) listen(r6, 0x50) close_range(r1, 0xffffffffffffffff, 0x0) 141.18645ms ago: executing program 4 (id=1450): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80000000, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) (async) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (async) sendto(0xffffffffffffffff, &(0x7f0000000100)="371885eae14e76eb85c5abefa061bee031fdcb412599acafa363be5e4ad177d2dee37277d8b912d05e3c160c0e384b3336afe86f3566ae830630c7ad90b8fd94073abd712fa8bdd8bb13031f6eb6cd647c5401c1afe24bf6185f913f1dbab3f90d6f0984e113f9bc676733f366343f1ed2946482a8b70ebfd869bdc06eba55524357ff714f76ad734506fe2307c6f11955", 0x91, 0x40000, &(0x7f0000000300)=@isdn={0x22, 0x7, 0xc, 0x2, 0xf}, 0x80) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 140.970256ms ago: executing program 4 (id=1451): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0), 0x0, 0x4, 0x0, 0x0, r4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70020500000005000000080009000200000008000c00ac0a0000060022000500000008000b000400000014001f00fc020000000000a0a5bc509840bf79b92af74617ecaa000000000000000000"], 0x48}}, 0x0) 81.86948ms ago: executing program 4 (id=1452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8fe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, r2, 0xaa447555c0cc7d56, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xae, 0x80}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x81}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x54}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24044081}, 0x40048d0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$DRM_IOCTL_VERSION(r6, 0xc0406400, &(0x7f0000000540)={0x8, 0x10001, 0xfffff053, 0x0, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000000400)=""/203}) r7 = msgget(0x1, 0x1) msgctl$IPC_SET(r7, 0x1, &(0x7f0000000100)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x7ff}, 0x0, 0x0, 0x7, 0x8, 0x9, 0xffffffffffffffff, 0x4, 0x3c5, 0xc, 0x9}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000080)={0x1, 0x2, 0x3}) io_destroy(0x0) 81.293969ms ago: executing program 1 (id=1453): r0 = socket(0x10, 0x3, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440), 0x4200, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) listen(r3, 0x7fffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008c000}, 0x20000000) 453.897µs ago: executing program 1 (id=1454): r0 = open(&(0x7f00009e1000)='./file1\x00', 0x8160, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2041d3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x200, {0xa, 0x14}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x38}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000100)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) setxattr$system_posix_acl(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 211.883µs ago: executing program 4 (id=1455): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000010400002f000010"]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1}, 0x0, &(0x7f0000000300)}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x1) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="826c", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r1, &(0x7f0000000140)="286eabb4e0bb236c9ceb5f1902400dfd0d434ee5262f2d8e74fcd326fc51e11d70334c61ed4c312c48196619c1e57e5faab2175813f9f838cc61b077fef193f1b86e2dd5e6e11a87f9669a8ce1031d7ac0ae6e03deb9c7d29f73beca3b7ffeea3554bed2eb5dbb46c0cea83393a80a00"/126, 0x7e, 0x0, 0x0, 0x0) set_tid_address(&(0x7f00000000c0)) 0s ago: executing program 4 (id=1456): r0 = socket(0x11, 0x3, 0x0) r1 = gettid() r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000580)="c1ffe39031390d", 0x7}], 0x1}}], 0x1, 0x4044880) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r5 = getpid() r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=@RTM_GETNSID={0x4c, 0x5a, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NETNSA_PID={0x8, 0x2, r1}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8, 0x3, r6}, @NETNSA_PID={0x8, 0x2, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008041}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0xac9}], 0x1, 0x10022, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x1fffe0000000000) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) kernel console output (not intermixed with test programs): ond1 (unregistering): Released all slaves [ 60.632075][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.634190][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.640787][ T6812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.645679][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.647521][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.654845][ T6812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.702617][ T40] audit: type=1400 audit(1742162257.546:390): avc: denied { getopt } for pid=6840 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 60.730529][ T6812] hsr_slave_0: entered promiscuous mode [ 60.732372][ T6812] hsr_slave_1: entered promiscuous mode [ 60.734240][ T6812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.736301][ T6812] Cannot create hsr debugfs directory [ 60.812852][ T6847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.257'. [ 60.815883][ T6847] netlink: 68 bytes leftover after parsing attributes in process `syz.3.257'. [ 60.818921][ T6847] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 60.961616][ T46] hsr_slave_0: left promiscuous mode [ 60.963974][ T46] hsr_slave_1: left promiscuous mode [ 60.965761][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.967969][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.970499][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.972694][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.991929][ T46] veth1_macvtap: left promiscuous mode [ 60.994237][ T46] veth0_macvtap: left promiscuous mode [ 60.995963][ T46] veth1_vlan: left promiscuous mode [ 60.998134][ T46] veth0_vlan: left promiscuous mode [ 61.378740][ T40] audit: type=1400 audit(1742162258.226:391): avc: denied { setattr } for pid=6856 comm="syz.2.259" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 61.397038][ T40] audit: type=1400 audit(1742162258.246:392): avc: denied { search } for pid=5336 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.428973][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 61.431050][ T5304] Bluetooth: Wrong link type (-22) [ 61.432712][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 61.434982][ T5304] Bluetooth: Wrong link type (-22) [ 61.436462][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 61.438286][ T5304] Bluetooth: Wrong link type (-22) [ 61.439735][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 61.441592][ T5304] Bluetooth: Wrong link type (-22) [ 61.530288][ T46] team0 (unregistering): Port device team_slave_1 removed [ 61.586047][ T46] team0 (unregistering): Port device team_slave_0 removed [ 61.953718][ T40] audit: type=1400 audit(1742162258.796:393): avc: denied { create } for pid=6870 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 61.960305][ T40] audit: type=1400 audit(1742162258.806:394): avc: denied { read } for pid=6870 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 62.058753][ T40] audit: type=1400 audit(1742162258.906:395): avc: denied { ioctl } for pid=6878 comm="syz.1.265" path="socket:[15820]" dev="sockfs" ino=15820 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.144323][ T5304] Bluetooth: hci3: command tx timeout [ 62.269283][ T6891] netlink: zone id is out of range [ 62.270745][ T6891] netlink: zone id is out of range [ 62.272165][ T6891] netlink: zone id is out of range [ 62.274041][ T6891] netlink: zone id is out of range [ 62.275464][ T6891] netlink: zone id is out of range [ 62.277135][ T6891] netlink: zone id is out of range [ 62.278663][ T6891] netlink: zone id is out of range [ 62.280196][ T6891] netlink: zone id is out of range [ 62.281736][ T6891] netlink: zone id is out of range [ 62.341987][ T6812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.352442][ T6812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.358311][ T6812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.362190][ T6812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.403131][ T6812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.412595][ T6812] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.419814][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.421895][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.429693][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.431748][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.490719][ T5304] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 62.555022][ T6812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.574089][ T6812] veth0_vlan: entered promiscuous mode [ 62.578794][ T6812] veth1_vlan: entered promiscuous mode [ 62.593104][ T6812] veth0_macvtap: entered promiscuous mode [ 62.605304][ T6812] veth1_macvtap: entered promiscuous mode [ 62.633382][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.636771][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.639993][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.643419][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.647801][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.653246][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.660150][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.665396][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.670815][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.684035][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.689081][ T6812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.691526][ T6812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.697418][ T6812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.699848][ T6812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.741673][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.746134][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.756433][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.759513][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.882002][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 62.941659][ T6926] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 62.947390][ T6927] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 63.370691][ T6972] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 63.424183][ T6001] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 63.451758][ T6985] netlink: 'syz.2.288': attribute type 2 has an invalid length. [ 63.455215][ T6985] netlink: 'syz.2.288': attribute type 1 has an invalid length. [ 63.457585][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 63.519692][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 63.587273][ T6001] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 63.590647][ T6001] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.594913][ T6001] usb 8-1: Product: syz [ 63.596945][ T6001] usb 8-1: Manufacturer: syz [ 63.598691][ T6001] usb 8-1: SerialNumber: syz [ 63.607336][ T6001] usb 8-1: config 0 descriptor?? [ 63.816691][ T833] usb 8-1: USB disconnect, device number 3 [ 63.854114][ T7021] overlay: filesystem on ./bus not supported as upperdir [ 63.856452][ T7021] overlay: filesystem on ./bus not supported as upperdir [ 63.858676][ T7021] overlay: filesystem on ./bus not supported as upperdir [ 63.860881][ T7021] overlay: filesystem on ./bus not supported as upperdir [ 63.863074][ T7021] overlay: filesystem on ./bus not supported as upperdir [ 63.866240][ T7021] overlay: filesystem on ./bus not supported as upperdir [ 63.868665][ T7021] overlay: filesystem on ./bus not supported as upperdir [ 63.871184][ T7021] overlay: filesystem on ./bus not supported as upperdir [ 63.883799][ T7021] overlay: filesystem on ./bus not supported as upperdir [ 63.886786][ T7021] overlay: filesystem on ./bus not supported as upperdir [ 63.894850][ T7021] overlay: filesystem on ./bus not supported as upperdir [ 63.898034][ T7021] overlay: filesystem on ./bus not supported as upperdir [ 64.006627][ T7032] netlink: 4420 bytes leftover after parsing attributes in process `syz.2.299'. [ 64.156012][ T7046] tmpfs: Bad value for 'mpol' [ 64.233937][ T5304] Bluetooth: hci3: command tx timeout [ 64.628361][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 64.887216][ T5304] Bluetooth: hci3: ACL packet too small [ 64.927006][ T7088] netlink: 32 bytes leftover after parsing attributes in process `syz.2.320'. [ 64.958965][ T7092] trusted_key: encrypted_key: key trusted:syz not found [ 65.106261][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 65.106276][ T40] audit: type=1400 audit(1742162261.956:417): avc: denied { ioctl } for pid=7104 comm="syz.1.325" path="socket:[15232]" dev="sockfs" ino=15232 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 65.296797][ T40] audit: type=1400 audit(1742162262.146:418): avc: denied { create } for pid=7114 comm="syz.1.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 65.303809][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'. [ 65.446269][ T7122] syz.3.331 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 65.446618][ T40] audit: type=1400 audit(1742162262.296:419): avc: denied { setattr } for pid=7121 comm="syz.3.331" path="socket:[16138]" dev="sockfs" ino=16138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.452035][ T7122] syz.3.331: attempt to access beyond end of device [ 65.452035][ T7122] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 65.459849][ T7122] EXT4-fs (nbd3): unable to read superblock [ 65.753412][ T7129] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 65.755394][ T7129] [U] J"—e:ÀÆ" [ 65.786934][ T7131] No source specified [ 66.246831][ T7136] netlink: 1192 bytes leftover after parsing attributes in process `syz.1.336'. [ 66.253113][ T7136] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 66.257853][ T7137] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 66.260819][ T7136] Cannot find add_set index 4 as target [ 66.271166][ T7137] Cannot find add_set index 4 as target [ 66.303491][ T5304] Bluetooth: hci3: command tx timeout [ 66.475940][ T40] audit: type=1400 audit(1742162263.326:420): avc: denied { nosuid_transition } for pid=7142 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 66.484302][ T40] audit: type=1400 audit(1742162263.336:421): avc: denied { transition } for pid=7142 comm="syz.3.340" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 66.485864][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 66.493025][ T40] audit: type=1400 audit(1742162263.336:422): avc: denied { entrypoint } for pid=7142 comm="syz.3.340" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3076 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.502111][ T40] audit: type=1400 audit(1742162263.336:423): avc: denied { share } for pid=7142 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 66.507798][ T40] audit: type=1400 audit(1742162263.336:424): avc: denied { noatsecure } for pid=7142 comm="syz.3.340" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 66.692224][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.337'. [ 66.696340][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'. [ 66.699789][ T7148] netlink: 'syz.2.337': attribute type 13 has an invalid length. [ 66.734950][ T40] audit: type=1400 audit(1742162263.586:425): avc: denied { setopt } for pid=7150 comm="syz.3.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.746791][ T40] audit: type=1400 audit(1742162263.596:426): avc: denied { connect } for pid=7156 comm="syz.1.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.761105][ T7161] netlink: 'syz.2.337': attribute type 21 has an invalid length. [ 66.763557][ T7161] netlink: 'syz.2.337': attribute type 5 has an invalid length. [ 66.765846][ T7161] netlink: 'syz.2.337': attribute type 6 has an invalid length. [ 66.806259][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 66.808223][ T5304] Bluetooth: Wrong link type (-22) [ 66.809699][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 66.811433][ T5304] Bluetooth: Wrong link type (-22) [ 66.812833][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 66.814901][ T5304] Bluetooth: Wrong link type (-22) [ 66.816352][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 66.818150][ T5304] Bluetooth: Wrong link type (-22) [ 67.093406][ T36] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 67.265433][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 67.268640][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 67.271203][ T36] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 67.276233][ T36] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 67.278734][ T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.280978][ T36] usb 8-1: Product: syz [ 67.282242][ T36] usb 8-1: Manufacturer: syz [ 67.283995][ T36] usb 8-1: SerialNumber: syz [ 67.288046][ T36] usb 8-1: config 0 descriptor?? [ 67.496152][ T36] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 67.681339][ T833] IPVS: starting estimator thread 0... [ 67.734814][ T57] usb 8-1: USB disconnect, device number 4 [ 67.748111][ T7197] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 67.765014][ T7204] 9pnet_virtio: no channels available for device syz [ 67.784360][ T7188] IPVS: using max 35 ests per chain, 84000 per kthread [ 67.850398][ T7204] tipc: MTU too low for tipc bearer [ 67.853083][ T7204] tipc: MTU too low for tipc bearer [ 67.907386][ T7220] netlink: 'syz.3.363': attribute type 1 has an invalid length. [ 67.909676][ T7220] netlink: 'syz.3.363': attribute type 3 has an invalid length. [ 67.911986][ T7220] NCSI netlink: No device for ifindex 0 [ 67.991464][ T7226] bridge_slave_0: left allmulticast mode [ 67.993852][ T7226] bridge_slave_0: left promiscuous mode [ 67.996063][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.002468][ T7226] bridge_slave_1: left allmulticast mode [ 68.008056][ T7226] bridge_slave_1: left promiscuous mode [ 68.010338][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.017668][ T7226] bond0: (slave bond_slave_0): Releasing backup interface [ 68.022805][ T7226] bond0: (slave bond_slave_1): Releasing backup interface [ 68.038612][ T7226] team0: Port device team_slave_0 removed [ 68.049723][ T7226] team0: Port device team_slave_1 removed [ 68.050281][ T7226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.050303][ T7226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.051381][ T7226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.051401][ T7226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.104714][ T7226] team0: Mode changed to "loadbalance" [ 68.115116][ T7226] vlan0: entered promiscuous mode [ 68.125191][ T7226] team0: Port device vlan0 added [ 68.426651][ T7252] overlayfs: lower data-only dirs require metacopy support. [ 68.530216][ T7257] xt_ecn: cannot match TCP bits for non-tcp packets [ 68.580970][ T7259] loop2: detected capacity change from 0 to 7 [ 68.585328][ T7259] Dev loop2: unable to read RDB block 7 [ 68.587369][ T7259] loop2: AHDI p1 p2 p3 [ 68.588608][ T7259] loop2: partition table partially beyond EOD, truncated [ 68.591550][ T7259] loop2: p1 start 1601398130 is beyond EOD, truncated [ 68.593780][ T7259] loop2: p2 start 1702059890 is beyond EOD, truncated [ 68.849958][ T7278] program syz.3.379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.083389][ T31] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 69.125925][ T7292] __nla_validate_parse: 11 callbacks suppressed [ 69.125935][ T7292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.382'. [ 69.265046][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.268313][ T31] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 69.271653][ T31] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 69.275581][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.280192][ T31] usb 7-1: config 0 descriptor?? [ 69.284266][ T31] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 69.286949][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 69.292918][ T31] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 69.295940][ T31] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 69.298188][ T31] usb 7-1: media controller created [ 69.300951][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 69.310783][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 69.313198][ T31] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 69.317033][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input8 [ 69.324333][ T31] dvb-usb: schedule remote query interval to 150 msecs. [ 69.326495][ T31] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 69.487328][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 69.489663][ T31] dvb-usb: error while querying for an remote control event. [ 69.494326][ T7275] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.497863][ T833] usb 7-1: USB disconnect, device number 6 [ 69.530602][ T833] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 70.028199][ T7315] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.389'. [ 70.080829][ T7319] syz.0.391: attempt to access beyond end of device [ 70.080829][ T7319] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 70.084635][ T7319] syz.0.391: attempt to access beyond end of device [ 70.084635][ T7319] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 70.088153][ T7319] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 70.090874][ T7319] syz.0.391: attempt to access beyond end of device [ 70.090874][ T7319] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 70.095212][ T7319] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 70.097820][ T7319] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 70.099951][ T7319] UDF-fs: Scanning with blocksize 512 failed [ 70.102251][ T7319] syz.0.391: attempt to access beyond end of device [ 70.102251][ T7319] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 70.106881][ T7319] syz.0.391: attempt to access beyond end of device [ 70.106881][ T7319] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 70.110438][ T7319] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 70.113117][ T7319] syz.0.391: attempt to access beyond end of device [ 70.113117][ T7319] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 70.116907][ T7319] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 70.119526][ T7319] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 70.121632][ T7319] UDF-fs: Scanning with blocksize 1024 failed [ 70.123588][ T7319] syz.0.391: attempt to access beyond end of device [ 70.123588][ T7319] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 70.127135][ T7319] syz.0.391: attempt to access beyond end of device [ 70.127135][ T7319] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 70.130660][ T7319] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 70.133282][ T7319] syz.0.391: attempt to access beyond end of device [ 70.133282][ T7319] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 70.136728][ T7319] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 70.139351][ T7319] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 70.141468][ T7319] UDF-fs: Scanning with blocksize 2048 failed [ 70.143281][ T7319] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 70.146114][ T7319] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 70.148693][ T7319] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 70.150786][ T7319] UDF-fs: Scanning with blocksize 4096 failed [ 70.152442][ T7319] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 70.156117][ T7320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 70.158959][ T7320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 70.161550][ T7320] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 70.163685][ T7320] UDF-fs: Scanning with blocksize 512 failed [ 70.165622][ T7320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 70.168301][ T7320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 70.171920][ T7320] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 70.174281][ T7320] UDF-fs: Scanning with blocksize 1024 failed [ 70.176236][ T7320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 70.179361][ T7320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 70.181859][ T7320] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 70.184068][ T7320] UDF-fs: Scanning with blocksize 2048 failed [ 70.185961][ T7320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 70.188593][ T7320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 70.191205][ T7320] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 70.193146][ T7320] UDF-fs: Scanning with blocksize 4096 failed [ 70.194896][ T7320] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 70.221610][ T7325] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 70.225794][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 70.232898][ T7325] geneve2: entered promiscuous mode [ 70.237082][ T7325] geneve2: entered allmulticast mode [ 70.276393][ T7330] netlink: 'syz.2.393': attribute type 5 has an invalid length. [ 70.289058][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 70.479053][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 70.479067][ T40] audit: type=1400 audit(1742162267.326:455): avc: denied { write } for pid=7335 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 70.489114][ T40] audit: type=1400 audit(1742162267.326:456): avc: denied { mounton } for pid=7335 comm="syz.0.395" path="/40/bus/file0" dev="overlay" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 70.500287][ T7336] bio_check_eod: 15 callbacks suppressed [ 70.500299][ T7336] syz.0.395: attempt to access beyond end of device [ 70.500299][ T7336] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 70.508175][ T7336] XFS (nbd0): SB validate failed with error -5. [ 70.591111][ T7350] netlink: 188 bytes leftover after parsing attributes in process `syz.2.398'. [ 70.595228][ T7350] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 70.613107][ T40] audit: type=1400 audit(1742162267.456:457): avc: denied { ioctl } for pid=7356 comm="syz.0.400" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.645432][ T7357] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 70.649054][ T7357] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 70.696765][ T40] audit: type=1400 audit(1742162267.546:458): avc: granted { setsecparam } for pid=7363 comm="syz.0.403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 70.999019][ T7386] Bluetooth: Invalid esc byte 0x03 [ 71.106541][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.108707][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.285188][ T40] audit: type=1400 audit(1742162268.136:459): avc: denied { ioctl } for pid=7394 comm="syz.2.411" path="socket:[17869]" dev="sockfs" ino=17869 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 71.356455][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 71.358672][ T5304] Bluetooth: Wrong link type (-22) [ 71.360311][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 71.362450][ T5304] Bluetooth: Wrong link type (-22) [ 71.365137][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 71.367273][ T5304] Bluetooth: Wrong link type (-22) [ 71.368771][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 71.370480][ T5304] Bluetooth: Wrong link type (-22) [ 71.557166][ T7405] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.623408][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 71.651194][ T7411] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 71.654529][ T7411] batadv0: entered promiscuous mode [ 71.656428][ T7411] hsr1: Slave A (wlan1) is not up; please bring it up to get a fully working HSR network [ 71.741403][ T40] audit: type=1400 audit(1742162268.586:460): avc: denied { override_creds } for pid=7418 comm="syz.3.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 71.773397][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 71.776905][ T31] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.780024][ T31] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 71.783032][ T31] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.786511][ T31] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.791768][ T31] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 71.795343][ T31] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 71.798484][ T31] usb 7-1: Product: syz [ 71.799706][ T31] usb 7-1: Manufacturer: syz [ 71.800998][ T31] usb 7-1: SerialNumber: syz [ 71.804505][ T7401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 71.810175][ T31] input: appletouch as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/input/input9 [ 71.978862][ T7428] ISOFS: Unable to identify CD-ROM format. [ 72.016975][ T40] audit: type=1400 audit(1742162268.866:461): avc: denied { read write } for pid=7399 comm="syz.2.414" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 72.026898][ T40] audit: type=1400 audit(1742162268.866:462): avc: denied { open } for pid=7399 comm="syz.2.414" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 72.227411][ T7432] netlink: 'syz.1.423': attribute type 7 has an invalid length. [ 72.229518][ T7432] netlink: 204 bytes leftover after parsing attributes in process `syz.1.423'. [ 72.270167][ T7401] netlink: 56 bytes leftover after parsing attributes in process `syz.2.414'. [ 72.313436][ T5304] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 72.316068][ T5304] Bluetooth: hci3: Injecting HCI hardware error event [ 72.319234][ T5304] Bluetooth: hci3: hardware error 0x00 [ 72.349225][ T26] usb 7-1: USB disconnect, device number 7 [ 72.356756][ T26] appletouch 7-1:1.0: input: appletouch disconnected [ 72.789389][ T40] audit: type=1400 audit(1742162269.636:463): avc: denied { ioctl } for pid=7446 comm="syz.0.429" path="socket:[17398]" dev="sockfs" ino=17398 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.795622][ T7447] net_ratelimit: 320 callbacks suppressed [ 72.795635][ T7447] sit0: mtu less than device minimum [ 73.101288][ T7467] netlink: 56 bytes leftover after parsing attributes in process `syz.2.435'. [ 73.494802][ T7499] usb usb2: usbfs: interface 0 claimed by hub while 'syz.2.446' resets device [ 73.542775][ T40] audit: type=1400 audit(1742162270.386:464): avc: denied { write } for pid=7498 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.882194][ T7521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 74.383400][ T5304] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 74.528239][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 74.531609][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 74.545610][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 74.639518][ T7565] uprobe: syz.3.464:7565 failed to unregister, leaking uprobe [ 74.688968][ T7566] 9p: Unknown access argument 18446744073709551615: -34 [ 74.723660][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.465'. [ 74.982080][ T7592] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 75.065542][ T7591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.123435][ T26] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 75.286938][ T26] usb 8-1: Using ep0 maxpacket: 16 [ 75.289590][ T26] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.292630][ T26] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 75.295610][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.303573][ T26] usb 8-1: config 0 descriptor?? [ 75.307011][ T26] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input11 [ 75.311774][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 75.516536][ T7588] input: syz1 as /devices/virtual/input/input12 [ 75.607099][ T40] kauditd_printk_skb: 78 callbacks suppressed [ 75.607111][ T40] audit: type=1400 audit(1742162272.456:543): avc: denied { accept } for pid=7622 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 75.608516][ T7623] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 75.618121][ T7623] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.621701][ T7623] vhci_hcd vhci_hcd.0: Device attached [ 75.638972][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 75.642166][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 75.645653][ T7623] netlink: 'syz.1.480': attribute type 11 has an invalid length. [ 75.688655][ T7629] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.482'. [ 75.780596][ T7637] Unsupported ieee802154 address type: 0 [ 75.784011][ T7637] evm: overlay not supported [ 75.793502][ T6005] vhci_hcd: vhci_device speed not set [ 75.855815][ T6005] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 75.875687][ T7624] vhci_hcd: connection reset by peer [ 75.878873][ T13] vhci_hcd: stop threads [ 75.880261][ T13] vhci_hcd: release socket [ 75.882787][ T13] vhci_hcd: disconnect device [ 76.495501][ T7656] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 76.499539][ T7656] netlink: 'syz.1.492': attribute type 10 has an invalid length. [ 76.507172][ T7656] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 76.509468][ T7657] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.491'. [ 76.515874][ T7656] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 76.548778][ T7659] nbd: illegal input index -1996488704 [ 76.706054][ T40] audit: type=1400 audit(1742162273.556:544): avc: denied { bind } for pid=7667 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.719535][ T7671] loop2: detected capacity change from 0 to 7 [ 76.721972][ T7671] Dev loop2: unable to read RDB block 7 [ 76.724349][ T7671] loop2: AHDI p1 p2 p3 [ 76.726086][ T7671] loop2: partition table partially beyond EOD, truncated [ 76.731490][ T7671] loop2: p1 start 1601398130 is beyond EOD, truncated [ 76.734305][ T7671] loop2: p2 start 1702059890 is beyond EOD, truncated [ 76.756813][ T7676] [U] à€E`ÞØÊ_òïÈTvß=æ¼B¥ ²›UÒôQ;Ö®Y±\9ž©Pþâ [ 76.772780][ T7676] CIFS: iocharset name too long [ 76.778074][ T40] audit: type=1400 audit(1742162273.626:545): avc: denied { mount } for pid=7674 comm="syz.1.499" name="/" dev="configfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 76.785253][ T40] audit: type=1400 audit(1742162273.626:546): avc: denied { search } for pid=7674 comm="syz.1.499" name="/" dev="configfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.880777][ T7683] sp0: Synchronizing with TNC [ 76.894249][ T7685] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.501'. [ 76.977710][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 76.978454][ T7696] /dev/sg0: Can't lookup blockdev [ 76.979903][ T5304] Bluetooth: Wrong link type (-22) [ 76.979976][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 76.986054][ T5304] Bluetooth: Wrong link type (-22) [ 76.987984][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 76.990540][ T5304] Bluetooth: Wrong link type (-22) [ 77.082725][ T40] audit: type=1400 audit(1742162273.926:547): avc: denied { read } for pid=7712 comm="syz.2.511" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.089525][ T40] audit: type=1400 audit(1742162273.926:548): avc: denied { open } for pid=7712 comm="syz.2.511" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.096153][ T40] audit: type=1400 audit(1742162273.936:549): avc: denied { ioctl } for pid=7712 comm="syz.2.511" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.103417][ T40] audit: type=1400 audit(1742162273.946:550): avc: denied { read write } for pid=7712 comm="syz.2.511" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 77.110154][ T40] audit: type=1400 audit(1742162273.946:551): avc: denied { open } for pid=7712 comm="syz.2.511" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 77.269621][ T40] audit: type=1400 audit(1742162274.116:552): avc: denied { create } for pid=7725 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 77.448326][ T7741] xt_nat: multiple ranges no longer supported [ 77.641211][ T7749] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 77.927868][ T7776] netlink: 'syz.1.529': attribute type 15 has an invalid length. [ 77.930855][ T7777] netlink: 'syz.1.529': attribute type 15 has an invalid length. [ 78.096295][ T7794] dlm: non-version read from control device 0 [ 78.138639][ T7798] qnx6: unable to set blocksize [ 78.242872][ T7815] mkiss: ax0: crc mode is auto. [ 78.478518][ T7830] xt_hashlimit: Unknown mode mask 180, kernel too old? [ 78.600855][ T7855] veth1_to_batadv: entered promiscuous mode [ 78.604507][ T7855] macsec1: entered promiscuous mode [ 78.636930][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 78.638913][ T5304] Bluetooth: Wrong link type (-22) [ 78.640355][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 78.642756][ T5304] Bluetooth: Wrong link type (-22) [ 78.644949][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 78.646803][ T5304] Bluetooth: Wrong link type (-22) [ 78.648231][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 78.650036][ T5304] Bluetooth: Wrong link type (-22) [ 78.820768][ T7878] IPVS: persistence engine module ip_vs_pe_" not found [ 78.907889][ T7883] netlink: 'syz.2.567': attribute type 3 has an invalid length. [ 78.964047][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 78.967406][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 78.994093][ T5984] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 79.284798][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 79.287610][ T5304] Bluetooth: Wrong link type (-22) [ 79.289086][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 79.291491][ T5304] Bluetooth: Wrong link type (-22) [ 79.296267][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 79.298733][ T5304] Bluetooth: Wrong link type (-22) [ 79.300593][ T5304] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 79.302362][ T5304] Bluetooth: Wrong link type (-22) [ 79.547493][ T7896] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 79.743538][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 79.956880][ T7928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.960380][ T7928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.966120][ T7928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.969486][ T7928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.973116][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.977768][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.982634][ T7928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.983952][ T5938] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 79.988894][ T7928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.003535][ T36] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.163363][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 80.174004][ T36] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024 [ 80.177060][ T36] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 80.179816][ T36] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.182550][ T36] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.186345][ T36] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.188861][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.193608][ T5984] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 80.343335][ T5984] usb 7-1: Using ep0 maxpacket: 16 [ 80.346050][ T5984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.349009][ T5984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.352322][ T5984] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.356205][ T5984] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.358770][ T5984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.362545][ T5984] usb 7-1: config 0 descriptor?? [ 80.394897][ T5339] bcm5974 8-1:0.0: could not read from device [ 80.397939][ T36] usb 5-1: GET_CAPABILITIES returned 0 [ 80.399570][ T36] usbtmc 5-1:16.0: can't read capabilities [ 80.406264][ T5339] bcm5974 8-1:0.0: could not read from device [ 80.412497][ T5339] bcm5974 8-1:0.0: could not read from device [ 80.416258][ T5339] bcm5974 8-1:0.0: could not read from device [ 80.434220][ T10] usb 8-1: USB disconnect, device number 5 [ 80.569252][ T5984] usbhid 7-1:0.0: can't add hid device: -71 [ 80.571254][ T5984] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 80.575488][ T5984] usb 7-1: USB disconnect, device number 8 [ 80.751477][ T7950] input: syz0 as /devices/virtual/input/input14 [ 80.754898][ T7950] input: failed to attach handler leds to device input14, error: -6 [ 80.933501][ T6005] vhci_hcd: vhci_device speed not set [ 80.938214][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 80.938223][ T40] audit: type=1400 audit(1742162277.786:582): avc: denied { bind } for pid=7954 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 80.945916][ T40] audit: type=1400 audit(1742162277.796:583): avc: denied { write } for pid=7954 comm="syz.3.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 81.081085][ T40] audit: type=1400 audit(1742162277.926:584): avc: denied { accept } for pid=7959 comm="syz.3.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 81.108973][ T7963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.348842][ T1341] cfg80211: failed to load regulatory.db [ 81.455653][ T7981] ipt_ECN: cannot use operation on non-tcp rule [ 81.525836][ T7993] __nla_validate_parse: 14 callbacks suppressed [ 81.525847][ T7993] netlink: 48 bytes leftover after parsing attributes in process `syz.3.600'. [ 81.568318][ T7997] block device autoloading is deprecated and will be removed. [ 81.571639][ T7997] syz.3.602: attempt to access beyond end of device [ 81.571639][ T7997] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 81.576653][ T7998] syz.3.602: attempt to access beyond end of device [ 81.576653][ T7998] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 81.595650][ T7997] Cannot find del_set index 4 as target [ 81.668514][ T8006] random: crng reseeded on system resumption [ 81.672460][ T40] audit: type=1400 audit(1742162278.516:585): avc: denied { write } for pid=8005 comm="syz.2.605" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.815899][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 81.818568][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 81.822526][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 81.825355][ T8013] netlink: 49 bytes leftover after parsing attributes in process `syz.3.606'. [ 81.835245][ T8013] block nbd3: not configured, cannot reconfigure [ 81.838957][ T40] audit: type=1400 audit(1742162278.686:586): avc: denied { write } for pid=8014 comm="syz.1.607" name="fib_triestat" dev="proc" ino=4026532915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 81.877825][ T40] audit: type=1400 audit(1742162278.726:587): avc: denied { ioctl } for pid=8005 comm="syz.2.605" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.922474][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.610'. [ 81.927689][ T40] audit: type=1400 audit(1742162278.776:588): avc: denied { read } for pid=8021 comm="syz.3.610" path="socket:[21248]" dev="sockfs" ino=21248 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 82.143937][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 82.295108][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 82.299234][ T10] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 82.305257][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.308724][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.316076][ T8020] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 82.322456][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.415292][ T8025] netlink: 168 bytes leftover after parsing attributes in process `syz.2.611'. [ 82.496453][ T8030] tap0: tun_chr_ioctl cmd 1074025677 [ 82.498389][ T8030] tap0: linktype set to 769 [ 82.523074][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.529161][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.545398][ T10] usb 6-1: USB disconnect, device number 2 [ 82.597422][ T8035] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 82.724430][ T6005] usb 5-1: USB disconnect, device number 2 [ 82.743391][ T1341] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 82.783476][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 82.895452][ T1341] usb 7-1: Using ep0 maxpacket: 8 [ 82.898948][ T1341] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 56832, setting to 1024 [ 82.903057][ T1341] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 82.905386][ T8053] Bluetooth: MGMT ver 1.23 [ 82.907446][ T1341] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.913386][ T1341] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.918350][ T1341] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.921938][ T1341] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.997619][ T40] audit: type=1326 audit(1742162279.846:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8058 comm="syz.3.622" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed7038d169 code=0x0 [ 83.137433][ T1341] usb 7-1: GET_CAPABILITIES returned 0 [ 83.139029][ T1341] usbtmc 7-1:16.0: can't read capabilities [ 83.173951][ T40] audit: type=1400 audit(1742162280.026:590): avc: denied { create } for pid=8058 comm="syz.3.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 83.392119][ T8065] tap0: tun_chr_ioctl cmd 35108 [ 83.587867][ T8038] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 83.590203][ T8038] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 83.603179][ T8038] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.605446][ T8038] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 83.809990][ T40] audit: type=1400 audit(1742162280.656:591): avc: denied { getopt } for pid=8073 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 83.813005][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.819937][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.821621][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.823537][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.825288][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.827002][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.828646][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.830288][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.831896][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.837177][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.838802][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.840380][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.841954][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.843592][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.845558][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.847253][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.848812][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.850356][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.851940][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.853607][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.855152][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.856710][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.858320][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.859847][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.861408][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.862940][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.864590][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.866161][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.867903][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.869533][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.871110][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.872694][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.875011][ T8075] libceph: resolve '40' (ret=-3): failed [ 83.921726][ T8087] netlink: 'syz.3.629': attribute type 2 has an invalid length. [ 83.925323][ T8087] netlink: 132 bytes leftover after parsing attributes in process `syz.3.629'. [ 83.928822][ T8087] netlink: 'syz.3.629': attribute type 2 has an invalid length. [ 83.931710][ T8087] netlink: 132 bytes leftover after parsing attributes in process `syz.3.629'. [ 83.934849][ T8087] netlink: 'syz.3.629': attribute type 2 has an invalid length. [ 83.937031][ T8087] netlink: 132 bytes leftover after parsing attributes in process `syz.3.629'. [ 83.939568][ T8087] netlink: 'syz.3.629': attribute type 2 has an invalid length. [ 83.939634][ T8087] netlink: 'syz.3.629': attribute type 2 has an invalid length. [ 83.939736][ T8087] netlink: 'syz.3.629': attribute type 2 has an invalid length. [ 83.939836][ T8087] netlink: 'syz.3.629': attribute type 2 has an invalid length. [ 83.949608][ T8087] netlink: 'syz.3.629': attribute type 2 has an invalid length. [ 83.951955][ T8087] netlink: 'syz.3.629': attribute type 2 has an invalid length. [ 83.954232][ T8087] netlink: 'syz.3.629': attribute type 2 has an invalid length. [ 84.015424][ T8089] hfs: can't find a HFS filesystem on dev sr0 [ 84.020110][ T8093] hfs: can't find a HFS filesystem on dev sr0 [ 84.030873][ T8089] overlayfs: cannot append lower layer [ 84.359595][ T8121] openvswitch: netlink: Message has 1275 unknown bytes. [ 84.362310][ T8121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.375299][ T8121] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 84.378457][ T8121] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 84.382469][ T8121] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 84.385521][ T8121] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 84.390441][ T8121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8121 comm=syz.3.641 [ 84.514356][ T8130] mac80211_hwsim hwsim9 : renamed from wlan1 [ 84.578761][ T8130] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 84.680462][ T8137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.866158][ T8157] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 84.870514][ T8158] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 84.932688][ T8164] syz.3.654 (8164): /proc/8163/oom_adj is deprecated, please use /proc/8163/oom_score_adj instead. [ 85.163164][ T8180] syz.1.659: attempt to access beyond end of device [ 85.163164][ T8180] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 85.168497][ T8180] (syz.1.659,8180,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 85.170647][ T8180] (syz.1.659,8180,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 85.172674][ T8180] (syz.1.659,8180,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 85.175886][ T8180] (syz.1.659,8180,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 85.518988][ T6001] usb 7-1: USB disconnect, device number 9 [ 85.521137][ T8197] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 85.526798][ T8197] qnx6: wrong signature (magic) in superblock #1. [ 85.530965][ T8197] qnx6: unable to read the first superblock [ 85.744958][ T10] Process accounting resumed [ 86.381196][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 86.381211][ T40] audit: type=1326 audit(1742162283.226:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2805d8d169 code=0x7ffc0000 [ 86.392162][ T40] audit: type=1326 audit(1742162283.226:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2805d8d169 code=0x7ffc0000 [ 86.399962][ T40] audit: type=1326 audit(1742162283.226:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.676" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f2805d8d169 code=0x7ffc0000 [ 86.408001][ T40] audit: type=1326 audit(1742162283.226:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2805d8d169 code=0x7ffc0000 [ 86.415403][ T40] audit: type=1326 audit(1742162283.226:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2805d8d169 code=0x7ffc0000 [ 86.421531][ T40] audit: type=1326 audit(1742162283.226:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.676" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2805d8d169 code=0x7ffc0000 [ 86.429745][ T40] audit: type=1326 audit(1742162283.226:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2805d8d169 code=0x7ffc0000 [ 86.438275][ T40] audit: type=1326 audit(1742162283.226:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.676" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2805d8d169 code=0x7ffc0000 [ 86.446875][ T40] audit: type=1326 audit(1742162283.226:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.1.676" exe="/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2805d8d169 code=0x7ffc0000 [ 86.873404][ T10] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 87.025199][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 87.029115][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.033879][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8716, setting to 64 [ 87.038109][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 87.044307][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.047816][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.050910][ T10] usb 8-1: Product: à “ [ 87.052551][ T10] usb 8-1: Manufacturer: â°‰ [ 87.056709][ T8241] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 87.319812][ T8257] xt_cgroup: invalid path, errno=-2 [ 87.321739][ T40] audit: type=1400 audit(1742162284.166:610): avc: denied { bind } for pid=8256 comm="syz.2.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 87.402208][ T8263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.415344][ T8268] __nla_validate_parse: 36 callbacks suppressed [ 87.415355][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 87.420604][ T8269] netlink: 72 bytes leftover after parsing attributes in process `syz.2.687'. [ 87.452380][ T8263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.501038][ T8268] gretap0: entered promiscuous mode [ 87.686893][ T833] libceph: connect (1)[c::]:6789 error -101 [ 87.689697][ T833] libceph: mon0 (1)[c::]:6789 connect error [ 87.694205][ T833] libceph: connect (1)[c::]:6789 error -101 [ 87.695940][ T833] libceph: mon0 (1)[c::]:6789 connect error [ 87.874900][ T8296] kvm: emulating exchange as write [ 87.956105][ T833] libceph: connect (1)[c::]:6789 error -101 [ 87.957922][ T833] libceph: mon0 (1)[c::]:6789 connect error [ 87.978082][ T10] cdc_ncm 8-1:1.0: bind() failure [ 87.983851][ T10] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 87.985172][ T8299] delete_channel: no stack [ 87.985869][ T10] cdc_ncm 8-1:1.1: bind() failure [ 87.989133][ T10] usb 8-1: USB disconnect, device number 6 [ 88.031018][ T8304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 88.161522][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 88.231560][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 88.235635][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.705'. [ 88.298024][ T8328] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 88.465402][ T833] libceph: connect (1)[c::]:6789 error -101 [ 88.467218][ T833] libceph: mon0 (1)[c::]:6789 connect error [ 88.495551][ T8284] ceph: No mds server is up or the cluster is laggy [ 88.540529][ T8340] usb usb8: usbfs: process 8340 (syz.2.709) did not claim interface 0 before use [ 88.587753][ T8345] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.711'. [ 88.593510][ T6005] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.744236][ T6005] usb 5-1: Using ep0 maxpacket: 16 [ 88.755340][ T6005] usb 5-1: config 8 has an invalid interface number: 130 but max is 2 [ 88.759767][ T6005] usb 5-1: config 8 has an invalid interface number: 175 but max is 2 [ 88.763129][ T6005] usb 5-1: config 8 has an invalid interface number: 234 but max is 2 [ 88.766389][ T6005] usb 5-1: config 8 has no interface number 0 [ 88.768661][ T6005] usb 5-1: config 8 has no interface number 1 [ 88.771957][ T6005] usb 5-1: config 8 has no interface number 2 [ 88.775386][ T6005] usb 5-1: too many endpoints for config 8 interface 130 altsetting 126: 90, using maximum allowed: 30 [ 88.777626][ T8366] syz.3.718: attempt to access beyond end of device [ 88.777626][ T8366] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 88.783363][ T6005] usb 5-1: config 8 interface 130 altsetting 126 has an invalid descriptor for endpoint zero, skipping [ 88.787608][ T6005] usb 5-1: config 8 interface 130 altsetting 126 endpoint 0xD has an invalid bInterval 253, changing to 7 [ 88.789305][ T8366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.718'. [ 88.791656][ T6005] usb 5-1: config 8 interface 130 altsetting 126 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 88.798798][ T6005] usb 5-1: config 8 interface 130 altsetting 126 has a duplicate endpoint with address 0xB, skipping [ 88.803050][ T6005] usb 5-1: config 8 interface 130 altsetting 126 endpoint 0x5 has invalid maxpacket 991, setting to 64 [ 88.807454][ T6005] usb 5-1: config 8 interface 130 altsetting 126 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 88.811736][ T6005] usb 5-1: config 8 interface 130 altsetting 126 has a duplicate endpoint with address 0x5, skipping [ 88.821275][ T6005] usb 5-1: config 8 interface 130 altsetting 126 has 9 endpoint descriptors, different from the interface descriptor's value: 90 [ 88.829107][ T6005] usb 5-1: config 8 interface 175 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 88.833593][ T6005] usb 5-1: config 8 interface 175 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 88.837632][ T6005] usb 5-1: config 8 interface 175 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 88.841776][ T6005] usb 5-1: config 8 interface 175 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 88.846049][ T8374] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 88.846726][ T6005] usb 5-1: config 8 interface 130 has no altsetting 0 [ 88.848952][ T8374] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 88.851021][ T6005] usb 5-1: config 8 interface 175 has no altsetting 0 [ 88.851285][ T8373] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.722'. [ 88.858591][ T6005] usb 5-1: config 8 interface 234 has no altsetting 0 [ 88.863644][ T6005] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0801, bcdDevice=ac.41 [ 88.867062][ T6005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.873465][ T6005] usb 5-1: Product: ꜆뻫먾韨셱蘔贶Ḓ止皎೨꫞酾⨴éœã³·ç•­ï²Žá–´ë·‡ê”¸á–»æŽªç—쑉絊₷悴㕋敹頲Ϟ쿛掲ছ㣵˒ášâ¡›ã™”Íჟꔷ୒鬾ྶ唤蒧곣Ⱈ鮤å¨äš¢æª‰àµšè±¬ì±‡é­®è³›ë”¦å¦çƒªç¡±ï¥£ä·Ÿè¸¬æ¸ºê„­ë¾ë”»ä‚®ï‰ºë±šëŽä”„प뺮櫢ã‚酥瘨⓾ë½é³˜é—ê”—íƒéŒ½â“촰ﺸꯦC [ 88.882326][ T6005] usb 5-1: Manufacturer: >궮짩韯æ“쳓ᄠ䮊硜⢜튶禒䒇┎없؞鷲䓈㜞ï‰ê´´áŽ¨á¶´ã¶™îŠ—딀æ‰ÐŠÔ‰á—¶í„žà·€ã­ë‹ê…¥ç Šêª¾ä‡ì¿¶ë®šã¯á³žç…¿åŠ“ã¡á¤´â›œê–‚ڻ玆䞋Ұ텘挆郳൮㉙︕뙩ퟳéä ¢ä¯ê²£æ¼ºé€¿êžŽí”£î½ä¶µæŽ´î‘µäˆã²¦í•†ä…•é­Žê–¼î¸‰ã‘†ç‰¥ï…–ｈ焉ǹ㶣ä¾í…¢ä…¢å¡ˆâ©ˆíƒ áª”ç…姆줴绻炞鬒뮜追ä¿ê »è§è»˜ì¤ªâ˜µ [ 88.891094][ T6005] usb 5-1: SerialNumber: 녻ᓅ薘횽出涪ὴ軤帨ʴ诂次ã¨ë˜é¬¯ç‡’늷㴤怾៘覑䫉文 [ 88.946995][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.949040][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.004161][ T8377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.009708][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.727'. [ 89.016997][ T8377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.053814][ T8377] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 89.094077][ T8377] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.096652][ T8377] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.099130][ T8377] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.101649][ T8377] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.105732][ T8377] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 89.138481][ T6005] usb 5-1: USB disconnect, device number 3 [ 89.169892][ T8403] syz.3.730: attempt to access beyond end of device [ 89.169892][ T8403] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 89.875113][ T8444] validate_nla: 31 callbacks suppressed [ 89.875129][ T8444] netlink: 'syz.2.742': attribute type 72 has an invalid length. [ 90.035105][ T8454] IPv6: sit1: Disabled Multicast RS [ 90.037824][ T8454] sit1: entered allmulticast mode [ 90.250939][ T8472] syz.3.750: attempt to access beyond end of device [ 90.250939][ T8472] loop3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 90.257638][ T8472] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 90.953464][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.170143][ T8491] xt_hashlimit: size too large, truncated to 1048576 [ 91.211312][ T8496] 9pnet_fd: Insufficient options for proto=fd [ 91.307656][ T8510] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 91.505707][ T8519] block nbd3: shutting down sockets [ 91.867683][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 91.867696][ T40] audit: type=1400 audit(1742162544.717:621): avc: denied { append } for pid=8531 comm="syz.3.764" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 91.940579][ T8539] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 91.943330][ T8539] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 92.305828][ T40] audit: type=1400 audit(1742162545.157:622): avc: denied { getopt } for pid=8544 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 92.367506][ T8553] syz_tun: entered allmulticast mode [ 92.375011][ T8552] syz_tun: left allmulticast mode [ 92.420952][ T8554] gre2: entered promiscuous mode [ 92.422407][ T8554] gre2: entered allmulticast mode [ 92.501492][ T40] audit: type=1400 audit(1742162545.347:623): avc: denied { mount } for pid=8562 comm="syz.2.775" name="/" dev="autofs" ino=22451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 92.573829][ T8570] __nla_validate_parse: 6 callbacks suppressed [ 92.573840][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.777'. [ 92.678525][ T8574] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 92.681203][ T8574] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 92.824770][ T40] audit: type=1400 audit(1742162545.677:624): avc: denied { setopt } for pid=8591 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.852899][ T40] audit: type=1400 audit(1742162545.677:625): avc: denied { setattr } for pid=8591 comm="syz.1.785" name="PING" dev="sockfs" ino=26065 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.861116][ T40] audit: type=1400 audit(1742162545.677:626): avc: denied { write } for pid=8591 comm="syz.1.785" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.871717][ T40] audit: type=1400 audit(1742162545.717:627): avc: denied { ioctl } for pid=8593 comm="syz.0.786" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 92.876649][ T8594] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.786'. [ 92.911251][ T8594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.786'. [ 92.912134][ T40] audit: type=1400 audit(1742162545.757:628): avc: denied { connect } for pid=8604 comm="syz.1.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.010978][ T40] audit: type=1400 audit(1742162545.857:629): avc: denied { create } for pid=8606 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 93.057531][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.791'. [ 93.192380][ T8617] overlayfs: failed to resolve './file0': -2 [ 93.197143][ T8617] netlink: 8 bytes leftover after parsing attributes in process `/dev/'. [ 93.199671][ T8617] netlink: 12 bytes leftover after parsing attributes in process `/dev/'. [ 93.202047][ T8617] netlink: '/dev/': attribute type 11 has an invalid length. [ 93.497094][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'. [ 93.517681][ T8628] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.603598][ T8628] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.667442][ T8628] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.730744][ T8628] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.804415][ T40] audit: type=1400 audit(1742162546.657:630): avc: denied { write } for pid=8629 comm="syz.3.798" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 93.850984][ T8628] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.860882][ T8628] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.868165][ T8628] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.877369][ T8628] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.813481][ T8662] netlink: 36 bytes leftover after parsing attributes in process `syz.0.808'. [ 94.858047][ T8667] VFS: unable to find oldfs superblock on device nullb0 [ 95.114227][ T8699] dccp_invalid_packet: P.Data Offset(59) too large [ 95.134374][ T6005] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 95.196934][ T8706] SELinux: ebitmap start bit (150995776) is beyond the end of the bitmap (1472) [ 95.201198][ T8706] SELinux: failed to load policy [ 95.295174][ T8715] netfs: Couldn't get user pages (rc=-14) [ 95.303636][ T6005] usb 8-1: Using ep0 maxpacket: 32 [ 95.307552][ T6005] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.311717][ T6005] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.316065][ T6005] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 95.319633][ T6005] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.326636][ T6005] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 95.329911][ T6005] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 95.333649][ T6005] usb 8-1: Product: syz [ 95.335243][ T6005] usb 8-1: Manufacturer: syz [ 95.337051][ T6005] usb 8-1: SerialNumber: syz [ 95.345947][ T6005] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input15 [ 95.611914][ T5943] usb 8-1: USB disconnect, device number 7 [ 95.622265][ T5943] appletouch 8-1:1.0: input: appletouch disconnected [ 95.796817][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'. [ 95.800312][ T8740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.837'. [ 95.806946][ T8740] fuse: Invalid rootmode [ 95.994184][ T6001] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 96.118629][ T8781] fuse: Unknown parameter 'user_md' [ 96.123595][ T8782] fuse: Unknown parameter 'user_md' [ 96.153655][ T8781] kvm: kvm [8780]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffe10207 [ 96.156294][ T8786] delete_channel: no stack [ 96.157419][ T8782] kvm: kvm [8780]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xffe10207 [ 96.159055][ T8787] overlayfs: failed to resolve './file1': -2 [ 96.434355][ T8807] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.465067][ T8807] kvm: pic: non byte read [ 96.468156][ T8807] kvm: pic: level sensitive irq not supported [ 96.469076][ T8807] kvm: pic: non byte read [ 96.476912][ T8807] kvm: pic: level sensitive irq not supported [ 96.477299][ T8807] kvm: pic: non byte read [ 96.482722][ T8807] kvm: pic: level sensitive irq not supported [ 96.483094][ T8807] kvm: pic: non byte read [ 96.491933][ T8807] kvm: pic: level sensitive irq not supported [ 96.492333][ T8807] kvm: pic: non byte read [ 96.503752][ T8807] kvm: pic: level sensitive irq not supported [ 96.504907][ T8807] kvm: pic: non byte read [ 96.511491][ T8807] kvm: pic: level sensitive irq not supported [ 96.511751][ T8807] kvm: pic: non byte read [ 96.518565][ T8807] kvm: pic: level sensitive irq not supported [ 96.519125][ T8807] kvm: pic: non byte read [ 96.524771][ T8807] kvm: pic: level sensitive irq not supported [ 96.525616][ T8807] kvm: pic: non byte read [ 96.531502][ T8807] kvm: pic: level sensitive irq not supported [ 96.531874][ T8807] kvm: pic: non byte read [ 97.228217][ T8828] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 97.231443][ T8828] overlayfs: missing 'lowerdir' [ 97.377468][ T8849] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.386708][ T8842] syz.3.870 uses old SIOCAX25GETINFO [ 97.703746][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 97.703757][ T40] audit: type=1400 audit(1742162550.557:646): avc: denied { connect } for pid=8876 comm="syz.0.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.813905][ T40] audit: type=1400 audit(1742162550.667:647): avc: denied { unmount } for pid=6812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 97.846395][ T8882] usb usb2: usbfs: interface 0 claimed by hub while 'syz.0.879' resets device [ 97.904718][ T40] audit: type=1400 audit(1742162550.757:648): avc: denied { lock } for pid=8883 comm="syz.0.880" path="socket:[30770]" dev="sockfs" ino=30770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 97.906393][ T8884] __nla_validate_parse: 7 callbacks suppressed [ 97.906403][ T8884] netlink: 576 bytes leftover after parsing attributes in process `syz.0.880'. [ 98.034813][ T6003] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 98.076369][ T40] audit: type=1400 audit(1742162550.927:649): avc: denied { getopt } for pid=8892 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 98.083692][ T40] audit: type=1400 audit(1742162550.927:650): avc: denied { setattr } for pid=8892 comm="syz.2.883" name="NETLINK" dev="sockfs" ino=28948 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.183389][ T6003] usb 6-1: Using ep0 maxpacket: 8 [ 98.191574][ T6003] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.197058][ T6003] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.200973][ T6003] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.208751][ T6003] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.214436][ T6003] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.217179][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.422670][ T6003] usb 6-1: GET_CAPABILITIES returned 0 [ 98.427205][ T6003] usbtmc 6-1:16.0: can't read capabilities [ 98.444293][ T6003] usb 6-1: USB disconnect, device number 3 [ 98.502719][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 98.506074][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.895'. [ 98.555861][ T40] audit: type=1400 audit(1742162551.407:651): avc: denied { setattr } for pid=8933 comm="syz.1.897" name="L2TP/IPv6" dev="sockfs" ino=30121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.615063][ T8941] tmpfs: Bad value for 'mpol' [ 98.617182][ T40] audit: type=1400 audit(1742162551.467:652): avc: denied { mounton } for pid=8940 comm="syz.1.899" path="/217/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 98.719963][ T8952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.902'. [ 98.753046][ T40] audit: type=1400 audit(1742162551.597:653): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 98.760776][ T40] audit: type=1400 audit(1742162551.607:654): avc: denied { read } for pid=8954 comm="syz.3.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 98.763390][ T5983] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 98.814034][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.904'. [ 98.815328][ T40] audit: type=1800 audit(1742162551.657:655): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.905" name="bus" dev="tmpfs" ino=1615 res=0 errno=0 [ 98.924997][ T8969] netlink: 44 bytes leftover after parsing attributes in process `syz.3.908'. [ 98.934514][ T5983] usb 5-1: Invalid ep0 maxpacket: 64 [ 99.032948][ T8978] bond0: (slave wlan1): Releasing backup interface [ 99.048590][ T8978] team0: Mode changed to "loadbalance" [ 99.051475][ T8978] vlan0: entered promiscuous mode [ 99.058255][ T8978] team0: Port device vlan0 added [ 99.073475][ T833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.075815][ T5983] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 99.091543][ T8985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=8985 comm=syz.2.914 [ 99.140218][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.918'. [ 99.143433][ T8996] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 99.203408][ T833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.243682][ T5983] usb 5-1: Invalid ep0 maxpacket: 64 [ 99.245401][ T5983] usb usb5-port1: attempt power cycle [ 99.567838][ T9034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9034 comm=syz.2.928 [ 99.571669][ T9034] netlink: 'syz.2.928': attribute type 1 has an invalid length. [ 99.581909][ T9034] bond1: entered promiscuous mode [ 99.584225][ T9034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.592340][ T9034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.593430][ T5983] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 99.595019][ T9034] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 99.600539][ T9034] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 99.605559][ T9034] bond1: (slave ip6gre2): making interface the new active one [ 99.608104][ T9034] ip6gre2: entered promiscuous mode [ 99.610264][ T9034] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 99.614045][ T5983] usb 5-1: Invalid ep0 maxpacket: 64 [ 99.754044][ T5983] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 99.773764][ T5983] usb 5-1: Invalid ep0 maxpacket: 64 [ 99.775437][ T5983] usb usb5-port1: unable to enumerate USB device [ 100.082296][ T9066] netlink: 48 bytes leftover after parsing attributes in process `syz.3.937'. [ 100.090922][ T9066] openvswitch: netlink: IP tunnel dst address not specified [ 100.097165][ T9064] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 100.153065][ T9073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.939'. [ 100.215109][ T9085] netlink: 'syz.1.941': attribute type 4 has an invalid length. [ 100.252134][ T9088] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 100.320574][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 101.065587][ T9113] veth0_to_batadv: entered promiscuous mode [ 101.067289][ T9113] veth0_to_batadv: entered allmulticast mode [ 101.478007][ T9143] Invalid ELF header magic: != ELF [ 101.552091][ T9151] 9pnet: Limiting 'msize' to 512000 as this is the maximum supported by transport virtio [ 101.589171][ T9151] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 101.699431][ T9161] input: syz1 as /devices/virtual/input/input18 [ 101.773505][ T9168] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 101.885682][ T9173] bond0: (slave team0): Releasing backup interface [ 101.904434][ T9173] team0 (unregistering): Port device team_slave_0 removed [ 101.908618][ T9173] team0 (unregistering): Port device team_slave_1 removed [ 101.953084][ T9184] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.066176][ T9192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9192 comm=syz.1.972 [ 102.073766][ T9196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9196 comm=syz.1.972 [ 102.095691][ T9194] 9pnet_fd: p9_fd_create_unix (9194): problem connecting socket: ./file2: -2 [ 102.446303][ T9214] IPVS: set_ctl: invalid protocol: 58 10.1.1.2:20002 [ 103.015849][ T9226] __nla_validate_parse: 11 callbacks suppressed [ 103.015865][ T9226] netlink: 32 bytes leftover after parsing attributes in process `syz.1.983'. [ 103.373391][ T1341] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 103.543392][ T1341] usb 6-1: Using ep0 maxpacket: 16 [ 103.605794][ T1341] usb 6-1: unable to get BOS descriptor or descriptor too short [ 103.609385][ T1341] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 103.613455][ T1341] usb 6-1: can't read configurations, error -71 [ 103.768077][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 103.768088][ T40] audit: type=1400 audit(1742162556.617:674): avc: denied { getopt } for pid=9293 comm="syz.0.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 104.050129][ T9298] syz.0.1002 (9298) used greatest stack depth: 20352 bytes left [ 104.242365][ T40] audit: type=1400 audit(1742162557.087:675): avc: denied { accept } for pid=9305 comm="syz.1.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 104.289293][ T40] audit: type=1400 audit(1742162557.137:676): avc: denied { create } for pid=9313 comm="syz.2.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 104.295004][ T40] audit: type=1400 audit(1742162557.137:677): avc: denied { write } for pid=9313 comm="syz.2.1007" path="socket:[31299]" dev="sockfs" ino=31299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 104.505659][ T9320] can0: slcan on ttyS3. [ 104.543957][ T9320] can0 (unregistered): slcan off ttyS3. [ 104.686059][ T40] audit: type=1400 audit(1742162557.537:678): avc: denied { write } for pid=9321 comm="syz.0.1011" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 104.866177][ T40] audit: type=1400 audit(1742162557.717:679): avc: denied { ioctl } for pid=9324 comm="syz.0.1012" path="/dev/ptyq5" dev="devtmpfs" ino=132 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 104.915340][ T40] audit: type=1400 audit(1742162557.767:680): avc: denied { create } for pid=9328 comm="syz.3.1014" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.939500][ T40] audit: type=1400 audit(1742162557.787:681): avc: denied { unlink } for pid=5947 comm="syz-executor" name="file0" dev="tmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.014449][ T9337] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1017'. [ 105.018088][ T9337] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1017'. [ 105.027123][ T9337] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1017'. [ 105.176659][ T9350] bridge0: port 1(veth0_to_bridge) entered blocking state [ 105.179640][ T9350] bridge0: port 1(veth0_to_bridge) entered disabled state [ 105.182465][ T9350] veth0_to_bridge: entered allmulticast mode [ 105.187181][ T9350] veth0_to_bridge: entered promiscuous mode [ 105.190116][ T9350] bridge0: port 1(veth0_to_bridge) entered blocking state [ 105.192746][ T9350] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 105.351213][ T40] audit: type=1400 audit(1742162558.197:682): avc: denied { compute_member } for pid=9355 comm="syz.1.1024" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 105.384436][ T9362] efs: device does not support 512 byte blocks [ 105.387163][ T9362] device does not support 512 byte blocks [ 105.387163][ T9362] [ 105.483384][ T1341] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 105.578309][ T40] audit: type=1400 audit(1742162558.427:683): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 105.607932][ T9379] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 105.653496][ T1341] usb 5-1: Using ep0 maxpacket: 8 [ 105.659494][ T1341] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 32 [ 105.663035][ T1341] usb 5-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 105.667215][ T1341] usb 5-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 12 [ 105.671106][ T1341] usb 5-1: config 1 interface 0 has no altsetting 0 [ 105.674575][ T1341] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.677321][ T1341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.679539][ T1341] usb 5-1: Product: â [ 105.680929][ T1341] usb 5-1: Manufacturer: 盛ã©ì‚‹æ¢ºâœï»±â˜™äœ‰ìš‡äžªä³ªë·¾ï‚˜é«³ï‰¹á‚‚㲘㫄⋔ä¾ë“‚ç¾ë¼¦ï–«ïž²à¶éº‘痮茌í‘爹㞰ࠑ艸ä¤æ¯°ìŽªåŒ¾Ë­ë²Šï½žè€ë·²íŸ´ç½¤á€˜ã ‰æ»¿î žê§•î‚¬î¼ƒæŸ´â­²Ïµã…žã‚‚↑䇺嶱୰âœë’’éŠì‚€í™…劅緃译駓ã·ì¸¿ê¥•ä³šä£«ì‰¡æ¦à¡šï¾¿çŽ¸éŠŸáŸ•ê¹·âœ¨ä…¢ [ 105.688864][ T1341] usb 5-1: SerialNumber: Û… [ 105.692359][ T9352] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.696360][ T9352] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.871405][ T9394] netlink: 'syz.2.1034': attribute type 4 has an invalid length. [ 105.905382][ T1341] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 105.909591][ T1341] usb 5-1: USB disconnect, device number 8 [ 106.303446][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.475768][ T9408] netlink: 'syz.0.1039': attribute type 10 has an invalid length. [ 106.576252][ T9424] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1043'. [ 106.755961][ T9450] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 106.759189][ T9450] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1052'. [ 106.761767][ T9450] netlink: 'syz.2.1052': attribute type 7 has an invalid length. [ 106.764072][ T9450] netlink: 'syz.2.1052': attribute type 8 has an invalid length. [ 106.766273][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'. [ 106.775426][ T9450] netlink: 'syz.2.1052': attribute type 142 has an invalid length. [ 106.870019][ T9468] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1057'. [ 106.874149][ T9468] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1057'. [ 107.029712][ T9480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.074060][ T9489] netlink: 'syz.3.1064': attribute type 1 has an invalid length. [ 107.087217][ T9489] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.104081][ T9489] bond1: (slave ip6erspan0): making interface the new active one [ 107.107450][ T9489] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 107.110030][ T9491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1065'. [ 107.228482][ T9488] SELinux: policydb string length 65288 does not match expected length 8 [ 107.231328][ T9488] SELinux: failed to load policy [ 107.431768][ T9514] vlan2: entered allmulticast mode [ 107.435646][ T9514] hsr0: entered allmulticast mode [ 107.437485][ T9514] hsr_slave_0: entered allmulticast mode [ 107.439036][ T9514] hsr_slave_1: entered allmulticast mode [ 107.442031][ T9514] hsr0: left allmulticast mode [ 107.443849][ T9514] hsr_slave_0: left allmulticast mode [ 107.445362][ T9514] hsr_slave_1: left allmulticast mode [ 107.515720][ T9514] vlan2: entered allmulticast mode [ 107.517189][ T9514] hsr0: entered allmulticast mode [ 107.518596][ T9514] hsr_slave_0: entered allmulticast mode [ 107.520201][ T9514] hsr_slave_1: entered allmulticast mode [ 107.522926][ T9514] hsr0: left allmulticast mode [ 107.524755][ T9514] hsr_slave_0: left allmulticast mode [ 107.526302][ T9514] hsr_slave_1: left allmulticast mode [ 107.560603][ T9519] veth0_to_bond: entered promiscuous mode [ 107.617139][ T9519] veth0_to_bond (unregistering): left promiscuous mode [ 107.621120][ T9521] netlink: 'syz.0.1074': attribute type 39 has an invalid length. [ 107.660987][ T9519] bond0: (slave bond_slave_0): Releasing backup interface [ 107.766771][ T9528] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 107.915758][ T9539] overlayfs: failed to clone upperpath [ 107.993008][ T9535] fuse: Unknown parameter 'fÇKõ¹iR' [ 108.063094][ T9552] xt_HMARK: spi-set and port-set can't be combined [ 108.086920][ T9557] netlink: 'syz.1.1087': attribute type 2 has an invalid length. [ 108.089590][ T9557] __nla_validate_parse: 8 callbacks suppressed [ 108.089602][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 108.124402][ T1341] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 108.128495][ T9559] netlink: 'syz.2.1088': attribute type 1 has an invalid length. [ 108.130803][ T9559] netlink: 'syz.2.1088': attribute type 2 has an invalid length. [ 108.160204][ T9563] syz.1.1090: attempt to access beyond end of device [ 108.160204][ T9563] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 108.166996][ T9563] FAT-fs (nbd1): unable to read boot sector [ 108.213032][ T9574] sock: sock_set_timeout: `syz.2.1093' (pid 9574) tries to set negative timeout [ 108.253432][ T1341] usb 5-1: device descriptor read/64, error -71 [ 108.410787][ T9602] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 108.493359][ T1341] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 108.536877][ T9614] xt_time: unknown flags 0xc [ 108.571442][ T9623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.582784][ T9623] erspan0: default FDB implementation only supports local addresses [ 108.598274][ T9625] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 108.603101][ T9625] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 108.629353][ T1341] usb 5-1: device descriptor read/64, error -71 [ 108.664403][ T9632] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 108.681069][ T9642] nfs4: Unknown parameter 'PL' [ 108.682986][ T9642] 9pnet_virtio: no channels available for device syz [ 108.718412][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'. [ 108.735575][ T1341] usb usb5-port1: attempt power cycle [ 108.841253][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 108.841268][ T40] audit: type=1400 audit(1742162561.687:703): avc: denied { remove_name } for pid=5947 comm="syz-executor" name="blkio.bfq.io_queued" dev="tmpfs" ino=1428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.852767][ T40] audit: type=1400 audit(1742162561.687:704): avc: denied { unlink } for pid=5947 comm="syz-executor" name="blkio.bfq.io_queued" dev="tmpfs" ino=1428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 108.860888][ T40] audit: type=1400 audit(1742162561.687:705): avc: denied { rmdir } for pid=5947 comm="syz-executor" name="bus" dev="tmpfs" ino=1427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 108.868374][ T40] audit: type=1400 audit(1742162561.697:706): avc: denied { rmdir } for pid=5947 comm="syz-executor" name="file2" dev="tmpfs" ino=1426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.878622][ T9655] tipc: Started in network mode [ 108.880053][ T9655] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 108.882148][ T9655] tipc: Enabled bearer , priority 10 [ 108.963552][ T6005] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 109.083418][ T1341] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 109.104142][ T1341] usb 5-1: device descriptor read/8, error -71 [ 109.115084][ T6005] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 109.118822][ T6005] usb 6-1: config 0 interface 0 has no altsetting 0 [ 109.124628][ T6005] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 109.129918][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 109.133351][ T6005] usb 6-1: Product: syz [ 109.135031][ T6005] usb 6-1: Manufacturer: syz [ 109.136788][ T6005] usb 6-1: SerialNumber: syz [ 109.143997][ T6005] usb 6-1: config 0 descriptor?? [ 109.148045][ T6005] usb 6-1: selecting invalid altsetting 0 [ 109.215017][ T9665] 9pnet_fd: Insufficient options for proto=fd [ 109.354996][ T1341] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 109.373456][ T9648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.374450][ T1341] usb 5-1: device descriptor read/8, error -71 [ 109.375980][ T9648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.381435][ T36] usb 6-1: USB disconnect, device number 6 [ 109.484420][ T1341] usb usb5-port1: unable to enumerate USB device [ 109.632448][ T9687] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 109.766021][ T9690] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 109.771281][ T9690] vivid-002: disconnect [ 109.994686][ T36] tipc: Node number set to 10398378 [ 110.597935][ T9689] vivid-002: reconnect [ 110.629724][ T9703] tmpfs: Bad value for 'mpol' [ 111.000032][ T9732] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 111.338273][ T9736] trusted_key: encrypted_key: insufficient parameters specified [ 111.401802][ T9741] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1147'. [ 111.480945][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 111.500865][ T40] audit: type=1800 audit(1742162564.347:707): pid=9739 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1137" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 111.571668][ T9749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 111.645964][ T9755] pimreg3: entered allmulticast mode [ 111.760109][ T9767] dlm: no locking on control device [ 111.786919][ T9767] fuse: Unknown parameter '0xffffffffffffffff0x000000000000000a' [ 111.790456][ T9767] 9pnet_fd: Insufficient options for proto=fd [ 111.793348][ T40] audit: type=1326 audit(1742162564.637:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9763 comm="syz.2.1156" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2ecf8d169 code=0x0 [ 111.926696][ T9782] program syz.1.1159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.930277][ T9782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1159'. [ 111.948765][ T40] audit: type=1400 audit(1742162564.797:709): avc: denied { nlmsg_write } for pid=9781 comm="syz.1.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 112.015458][ T9787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1160'. [ 112.383410][ T36] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 112.513426][ T36] usb 8-1: device descriptor read/64, error -71 [ 112.650911][ T9798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9798 comm=syz.2.1164 [ 112.659283][ T9798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1164'. [ 112.686609][ T9798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.702858][ T9798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.708658][ T9798] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 112.712456][ T9798] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 112.765202][ T36] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 112.893364][ T36] usb 8-1: device descriptor read/64, error -71 [ 112.997882][ T9813] ip6gretap0: entered allmulticast mode [ 113.000186][ T9813] ip6gretap0: left allmulticast mode [ 113.013551][ T36] usb usb8-port1: attempt power cycle [ 113.353416][ T36] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 113.373928][ T36] usb 8-1: device descriptor read/8, error -71 [ 113.623374][ T36] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 113.643870][ T36] usb 8-1: device descriptor read/8, error -71 [ 113.763648][ T36] usb usb8-port1: unable to enumerate USB device [ 113.899458][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 114.011833][ T9839] team0: Port device vlan0 removed [ 114.044412][ T40] audit: type=1400 audit(1742162566.897:710): avc: denied { map } for pid=9837 comm="syz.2.1180" path="socket:[35195]" dev="sockfs" ino=35195 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 114.766900][ T9843] block nbd1: shutting down sockets [ 114.890292][ T9848] validate_nla: 4 callbacks suppressed [ 114.890308][ T9848] netlink: 'syz.2.1183': attribute type 1 has an invalid length. [ 114.895025][ T9848] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.1183'. [ 115.016322][ T9852] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 115.115596][ T9862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.180161][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 115.240965][ T40] audit: type=1400 audit(1742162568.087:711): avc: denied { append } for pid=9872 comm="syz.3.1192" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 115.247669][ T40] audit: type=1400 audit(1742162568.097:712): avc: denied { name_bind } for pid=9872 comm="syz.3.1192" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 115.255961][ T40] audit: type=1400 audit(1742162568.097:713): avc: denied { name_connect } for pid=9872 comm="syz.3.1192" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 115.369667][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 116.120334][ T9901] 9pnet_fd: Insufficient options for proto=fd [ 116.233668][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'. [ 116.244812][ T9915] tipc: Trying to set illegal importance in message [ 116.372513][ T9925] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 116.377060][ T9925] Error validating options; rc = [-22] [ 116.410785][ T9932] IPv6: addrconf: prefix option has invalid lifetime [ 116.478930][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1212'. [ 116.549899][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1216'. [ 116.552384][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1216'. [ 116.653115][ T9969] geneve2: entered promiscuous mode [ 116.656882][ T9969] geneve2: entered allmulticast mode [ 116.799742][ T40] audit: type=1400 audit(1742162569.647:714): avc: denied { setopt } for pid=9992 comm="syz.3.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 116.800530][ T9994] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1231'. [ 116.908418][ T40] audit: type=1400 audit(1742162569.757:715): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 126.095779][ T40] audit: type=1400 audit(1742162578.947:716): avc: denied { execute } for pid=10032 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 126.103919][ T40] audit: type=1400 audit(1742162578.957:717): avc: denied { execute_no_trans } for pid=10032 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 126.334344][ T101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.420634][ T101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.518535][ T101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.608161][ T101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.718018][ T101] veth0_to_bridge: left allmulticast mode [ 126.720046][ T101] veth0_to_bridge: left promiscuous mode [ 126.722244][ T101] bridge0: port 1(veth0_to_bridge) entered disabled state [ 127.017544][ T101] bond0 (unregistering): Released all slaves [ 127.277026][ T101] hsr_slave_0: left promiscuous mode [ 127.278887][ T101] hsr_slave_1: left promiscuous mode [ 127.295087][ T101] veth1_to_batadv: left promiscuous mode [ 127.296767][ T101] veth1_macvtap: left promiscuous mode [ 127.298328][ T101] veth0_macvtap: left promiscuous mode [ 127.299896][ T101] veth1_vlan: left promiscuous mode [ 127.301503][ T101] veth0_vlan: left promiscuous mode [ 127.475879][ T101] team0 (unregistering): Port device vlan0 removed [ 129.793650][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.798575][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.800976][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.803145][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.805791][ T5952] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.817193][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.827667][ T5304] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.831174][ T5304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.834770][ T5304] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.839859][ T5304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.842965][ T5304] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.845932][ T5304] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.939907][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 129.971354][T10058] chnl_net:caif_netlink_parms(): no params data found [ 129.989176][ T40] audit: type=1400 audit(1742162582.837:718): avc: denied { create } for pid=10090 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 130.114011][T10058] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.117124][T10058] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.120193][T10058] bridge_slave_0: entered allmulticast mode [ 130.125384][T10091] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 130.128570][T10058] bridge_slave_0: entered promiscuous mode [ 130.132481][T10058] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.135681][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.136743][ T40] audit: type=1400 audit(1742162582.987:719): avc: denied { setattr } for pid=10100 comm="syz.3.1260" path="/dev/radio5" dev="devtmpfs" ino=1007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 130.138658][T10058] bridge_slave_1: entered allmulticast mode [ 130.145971][T10091] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.156689][T10058] bridge_slave_1: entered promiscuous mode [ 130.191768][T10058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.198583][T10058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.222245][T10058] team0: Port device team_slave_0 added [ 130.225780][T10058] team0: Port device team_slave_1 added [ 130.246002][T10058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.248012][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.255317][T10058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.259092][T10058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.261090][T10058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.270185][T10058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.304777][T10058] hsr_slave_0: entered promiscuous mode [ 130.307058][T10058] hsr_slave_1: entered promiscuous mode [ 130.344259][T10113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32789 sclass=netlink_route_socket pid=10113 comm=syz.1.1265 [ 130.356097][T10113] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 130.374377][T10114] bridge_slave_0: left allmulticast mode [ 130.376070][T10114] bridge_slave_0: left promiscuous mode [ 130.377797][T10114] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.393811][T10114] bridge_slave_1: left promiscuous mode [ 130.396084][T10114] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.402986][T10114] bond0: (slave bond_slave_0): Releasing backup interface [ 130.407279][T10114] bond0: (slave bond_slave_1): Releasing backup interface [ 130.419323][T10114] team0: Port device team_slave_0 removed [ 130.422745][T10114] team0: Port device team_slave_1 removed [ 130.424800][T10114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.427385][T10114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.430687][T10114] bond1: (slave ip6erspan0): Releasing active interface [ 130.493759][T10058] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.497025][T10058] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.500777][T10058] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.504068][T10058] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.535681][T10058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.541719][T10058] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.551663][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.554193][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.559182][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.561745][ T8402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.655964][T10058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.766512][T10058] veth0_vlan: entered promiscuous mode [ 130.770404][T10058] veth1_vlan: entered promiscuous mode [ 130.784028][T10058] veth0_macvtap: entered promiscuous mode [ 130.788403][T10058] veth1_macvtap: entered promiscuous mode [ 130.796906][T10058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.798098][ T40] audit: type=1804 audit(1742162583.647:720): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1273" name="file0" dev="tmpfs" ino=2366 res=1 errno=0 [ 130.801285][T10148] tmpfs: Unknown parameter 'Irpquota_block_hardlimit' [ 130.802341][T10058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.802359][T10058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.803012][T10058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.804968][T10058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.804997][T10058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.805021][T10058] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.805042][T10058] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.834402][ T40] audit: type=1804 audit(1742162583.677:721): pid=10148 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1273" name="file0" dev="tmpfs" ino=2366 res=1 errno=0 [ 130.843976][ T40] audit: type=1804 audit(1742162583.687:722): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1273" name="file0" dev="tmpfs" ino=2366 res=1 errno=0 [ 130.849865][ T40] audit: type=1804 audit(1742162583.687:723): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1273" name="file0" dev="tmpfs" ino=2366 res=1 errno=0 [ 130.879609][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.881853][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.886722][ T40] audit: type=1400 audit(1742162583.737:724): avc: denied { mounton } for pid=10152 comm="syz.3.1274" path="/310/file1/file0" dev="autofs" ino=36553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 130.910525][ T40] audit: type=1400 audit(1742162583.757:725): avc: denied { unmount } for pid=5947 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 130.911434][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.920556][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.040818][T10171] program syz.4.1280 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.109141][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'. [ 131.156093][T10184] netlink: 'syz.2.1285': attribute type 21 has an invalid length. [ 131.159095][T10184] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1285'. [ 131.162473][T10184] netlink: 'syz.2.1285': attribute type 5 has an invalid length. [ 131.165898][T10184] netlink: 'syz.2.1285': attribute type 6 has an invalid length. [ 131.168752][T10184] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1285'. [ 131.178527][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 131.178536][ T40] audit: type=1400 audit(1742162584.027:727): avc: denied { nlmsg_read } for pid=10183 comm="syz.2.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 131.187101][T10184] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1285'. [ 131.371622][T10202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1292'. [ 131.477367][ T40] audit: type=1400 audit(1742162584.327:728): avc: denied { ioctl } for pid=10219 comm="syz.4.1297" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x4dfb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 131.488581][ T40] audit: type=1326 audit(1742162584.327:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.4.1297" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe53b38d169 code=0x0 [ 131.497364][ T40] audit: type=1400 audit(1742162584.337:730): avc: denied { audit_write } for pid=10221 comm="syz.2.1298" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 131.761612][ T5952] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 131.763839][ T5952] Bluetooth: Wrong link type (-22) [ 131.766670][ T5952] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 131.768313][ T5952] Bluetooth: Wrong link type (-22) [ 131.769633][ T5952] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 131.771246][ T5952] Bluetooth: Wrong link type (-22) [ 131.848459][T10244] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1304'. [ 131.903631][ T5952] Bluetooth: hci3: command tx timeout [ 132.092399][T10261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10261 comm=syz.2.1310 [ 132.329223][T10275] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 132.547881][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.549683][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.636796][ T40] audit: type=1400 audit(1742162585.487:731): avc: denied { map } for pid=10281 comm="syz.4.1318" path="socket:[38106]" dev="sockfs" ino=38106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.642955][ T40] audit: type=1400 audit(1742162585.487:732): avc: denied { read accept } for pid=10281 comm="syz.4.1318" path="socket:[38106]" dev="sockfs" ino=38106 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.671330][T10287] netlink: 'syz.4.1319': attribute type 9 has an invalid length. [ 132.673670][T10287] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1319'. [ 132.915297][T10296] TCP: TCP_TX_DELAY enabled [ 133.086283][ T40] audit: type=1400 audit(1742162585.937:733): avc: denied { watch } for pid=10310 comm="syz.1.1327" path="/proc/1013" dev="proc" ino=38934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 133.140277][T10309] xt_hashlimit: size too large, truncated to 1048576 [ 133.235854][T10322] tmpfs: Unknown parameter 'm' [ 133.307018][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 133.353976][T10319] could not allocate digest TFM handle cryptd(blake2b-160) [ 133.383515][T10341] bond0: (slave ip6_vti0): Error: Device can not be enslaved while up [ 133.651334][T10348] syz.1.1336: attempt to access beyond end of device [ 133.651334][T10348] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 133.655158][T10348] EXT4-fs (nbd1): unable to read superblock [ 133.738404][ T40] audit: type=1400 audit(1742162586.587:734): avc: denied { shutdown } for pid=10350 comm="syz.1.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.892222][T10356] orangefs_mount: mount request failed with -4 [ 133.934845][T10360] bond0: entered promiscuous mode [ 133.936847][T10360] bond_slave_1: entered promiscuous mode [ 133.939093][T10360] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 133.983546][ T5952] Bluetooth: hci3: command tx timeout [ 134.326125][ T40] audit: type=1400 audit(1742162587.177:735): avc: denied { setopt } for pid=10367 comm="syz.1.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 134.397103][T10385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1347'. [ 134.449743][T10388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10388 comm=syz.2.1348 [ 134.508457][T10395] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 134.511163][T10395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.515073][T10394] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 134.517808][T10394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.504599][T10417] __nla_validate_parse: 1 callbacks suppressed [ 135.504616][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 135.511316][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1357'. [ 135.511335][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'. [ 135.511356][T10418] netlink: 'syz.2.1357': attribute type 18 has an invalid length. [ 135.520813][T10417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'. [ 135.524164][T10417] netlink: 'syz.2.1357': attribute type 18 has an invalid length. [ 135.563059][T10422] netlink: 'syz.2.1358': attribute type 2 has an invalid length. [ 135.565877][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1358'. [ 135.672215][T10428] xt_time: unknown flags 0xc [ 135.704695][T10430] overlayfs: failed to clone upperpath [ 135.711728][T10430] Invalid option length (1047906) for dns_resolver key [ 135.758145][ T40] audit: type=1400 audit(1742162588.607:736): avc: denied { write } for pid=10431 comm="syz.2.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.894386][T10436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=10436 comm=syz.2.1364 [ 136.053947][T10445] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1368'. [ 136.057520][T10445] openvswitch: netlink: EtherType 0 is less than min 600 [ 136.073829][ T5952] Bluetooth: hci3: command tx timeout [ 136.129747][T10451] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 136.132086][T10451] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 136.140583][T10451] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 136.142915][T10452] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 136.147936][T10451] bond1: entered promiscuous mode [ 136.149545][T10451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.161053][T10451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.164721][T10451] bond1: (slave bond2): making interface the new active one [ 136.166737][T10451] bond2: entered promiscuous mode [ 136.168491][T10451] bond1: (slave bond2): Enslaving as an active interface with an up link [ 136.459895][T10482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1380'. [ 136.464388][ T40] audit: type=1400 audit(1742162589.317:737): avc: denied { ioctl } for pid=10481 comm="syz.1.1380" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 136.520106][T10490] jfs: Unknown parameter 'usrquotaeo#' [ 136.576395][T10497] (syz.4.1385,10497,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 136.579610][T10497] (syz.4.1385,10497,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 136.705564][T10517] raw_sendmsg: syz.2.1394 forgot to set AF_INET. Fix it! [ 136.718370][ T40] audit: type=1400 audit(1742162589.567:738): avc: denied { read write } for pid=10520 comm="syz.4.1396" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 136.725506][ T40] audit: type=1400 audit(1742162589.567:739): avc: denied { open } for pid=10520 comm="syz.4.1396" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 136.731718][ T40] audit: type=1400 audit(1742162589.567:740): avc: denied { ioctl } for pid=10520 comm="syz.4.1396" path="/dev/uhid" dev="devtmpfs" ino=1296 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 136.758526][T10519] netlink: 12940 bytes leftover after parsing attributes in process `syz.1.1395'. [ 136.768717][ T40] audit: type=1400 audit(1742162589.617:741): avc: denied { create } for pid=10529 comm="syz.4.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 136.791251][ T40] audit: type=1400 audit(1742162589.637:742): avc: denied { mounton } for pid=10533 comm="syz.2.1400" path="/498/file0" dev="tmpfs" ino=2705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 137.084363][T10544] netlink: 'syz.1.1403': attribute type 6 has an invalid length. [ 137.251074][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 137.253913][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 137.439812][T10562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.443007][T10562] IPv6: NLM_F_CREATE should be set when creating new route [ 137.445133][T10562] IPv6: NLM_F_CREATE should be set when creating new route [ 137.665327][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.816860][ T40] audit: type=1400 audit(1742162590.667:743): avc: denied { connect } for pid=10576 comm="syz.4.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 137.826926][T10577] sp0: Synchronizing with TNC [ 137.925710][T10580] netlink: ct family unspecified [ 137.927236][T10580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.116482][T10601] netlink: 'syz.4.1419': attribute type 1 has an invalid length. [ 138.126490][T10601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.139638][T10601] bond1: (slave veth3): Enslaving as an active interface with a down link [ 138.153392][ T5952] Bluetooth: hci3: command tx timeout [ 138.578874][T10632] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 138.769476][T10647] xt_hashlimit: size too large, truncated to 1048576 [ 138.828081][T10649] syz.1.1432: attempt to access beyond end of device [ 138.828081][T10649] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 138.833357][T10649] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 138.889319][T10652] FAT-fs (nullb0): bogus number of reserved sectors [ 138.891337][T10652] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 138.929378][ T40] audit: type=1400 audit(1742162591.777:744): avc: denied { ioctl } for pid=10655 comm="syz.1.1435" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 138.952942][T10659] xt_hashlimit: overflow, rate too high: 0 [ 138.982636][ T40] audit: type=1400 audit(1742162591.827:745): avc: denied { accept } for pid=10661 comm="syz.4.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 139.124823][ T40] audit: type=1400 audit(1742162591.977:746): avc: denied { ioctl } for pid=10680 comm="syz.4.1443" path="socket:[38643]" dev="sockfs" ino=38643 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.133978][T10681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.731344][T10698] xt_l2tp: v2 doesn't support IP mode [ 139.873030][T10717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10717 comm=syz.1.1453 [ 139.919755][T10722] program syz.4.1455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.957441][T10721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.019092][T10728] usb usb9: usbfs: process 10728 (syz.1.1457) did not claim interface 47 before use [ 140.033923][T10729] [ 140.034869][T10729] ====================================================== [ 140.037390][T10729] WARNING: possible circular locking dependency detected [ 140.039278][T10729] 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 Not tainted [ 140.042128][T10729] ------------------------------------------------------ [ 140.045241][T10729] syz.4.1456/10729 is trying to acquire lock: [ 140.046947][T10729] ffff88805e5c2418 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xd8/0x12b0 [ 140.049551][T10729] [ 140.049551][T10729] but task is already holding lock: [ 140.051694][T10729] ffff888020e8b068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 140.054001][T10729] [ 140.054001][T10729] which lock already depends on the new lock. [ 140.054001][T10729] [ 140.056842][T10729] [ 140.056842][T10729] the existing dependency chain (in reverse order) is: [ 140.059589][T10729] [ 140.059589][T10729] -> #4 (&pipe->mutex){+.+.}-{4:4}: [ 140.062140][T10729] __mutex_lock+0x19b/0xb10 [ 140.063576][T10729] pipe_lock+0x64/0x80 [ 140.065240][T10729] iter_file_splice_write+0x1eb/0x10b0 [ 140.067308][T10729] do_splice+0x146a/0x1f70 [ 140.069071][T10729] __do_splice+0x327/0x360 [ 140.070557][T10729] __x64_sys_splice+0x187/0x250 [ 140.072203][T10729] do_syscall_64+0xcd/0x250 [ 140.073707][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.075535][T10729] [ 140.075535][T10729] -> #3 (sb_writers#6){.+.+}-{0:0}: [ 140.077758][T10729] mnt_want_write+0x6f/0x450 [ 140.079304][T10729] ovl_create_object+0x12e/0x300 [ 140.080992][T10729] lookup_open.isra.0+0x11d2/0x1580 [ 140.082678][T10729] path_openat+0x904/0x2d80 [ 140.084088][T10729] do_filp_open+0x20c/0x470 [ 140.085574][T10729] do_sys_openat2+0x17a/0x1e0 [ 140.087333][T10729] __x64_sys_openat+0x175/0x210 [ 140.089069][T10729] do_syscall_64+0xcd/0x250 [ 140.090528][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.092350][T10729] [ 140.092350][T10729] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 140.094966][T10729] down_read+0x9a/0x330 [ 140.096311][T10729] walk_component+0x342/0x5b0 [ 140.097819][T10729] path_lookupat+0x17f/0x770 [ 140.099370][T10729] filename_lookup+0x221/0x5f0 [ 140.100924][T10729] kern_path+0x35/0x50 [ 140.102275][T10729] lookup_bdev+0xd9/0x280 [ 140.103727][T10729] resume_store+0x1d8/0x460 [ 140.105339][T10729] kobj_attr_store+0x55/0x80 [ 140.107190][T10729] sysfs_kf_write+0x117/0x170 [ 140.109025][T10729] kernfs_fop_write_iter+0x33d/0x500 [ 140.111036][T10729] iter_file_splice_write+0x90f/0x10b0 [ 140.112911][T10729] direct_splice_actor+0x18f/0x6c0 [ 140.114522][T10729] splice_direct_to_actor+0x346/0xa40 [ 140.116243][T10729] do_splice_direct+0x178/0x250 [ 140.117934][T10729] do_sendfile+0xafb/0xe40 [ 140.119432][T10729] __x64_sys_sendfile64+0x1da/0x220 [ 140.121510][T10729] do_syscall_64+0xcd/0x250 [ 140.123365][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.125738][T10729] [ 140.125738][T10729] -> #1 (&of->mutex){+.+.}-{4:4}: [ 140.128395][T10729] __mutex_lock+0x19b/0xb10 [ 140.130285][T10729] kernfs_seq_start+0x4d/0x240 [ 140.131913][T10729] seq_read_iter+0x2ab/0x12b0 [ 140.133461][T10729] kernfs_fop_read_iter+0x414/0x580 [ 140.135075][T10729] vfs_read+0x886/0xbf0 [ 140.136488][T10729] ksys_read+0x12b/0x250 [ 140.137894][T10729] do_syscall_64+0xcd/0x250 [ 140.139313][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.141181][T10729] [ 140.141181][T10729] -> #0 (&p->lock){+.+.}-{4:4}: [ 140.143211][T10729] __lock_acquire+0x249e/0x3c40 [ 140.144722][T10729] lock_acquire.part.0+0x11b/0x380 [ 140.146362][T10729] __mutex_lock+0x19b/0xb10 [ 140.147858][T10729] seq_read_iter+0xd8/0x12b0 [ 140.149344][T10729] proc_reg_read_iter+0x21d/0x310 [ 140.150967][T10729] copy_splice_read+0x61d/0xb80 [ 140.152500][T10729] do_splice_read+0x282/0x370 [ 140.153983][T10729] splice_file_to_pipe+0x109/0x120 [ 140.155633][T10729] do_sendfile+0x3fd/0xe40 [ 140.157118][T10729] __x64_sys_sendfile64+0x1da/0x220 [ 140.158941][T10729] do_syscall_64+0xcd/0x250 [ 140.160433][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.162325][T10729] [ 140.162325][T10729] other info that might help us debug this: [ 140.162325][T10729] [ 140.165191][T10729] Chain exists of: [ 140.165191][T10729] &p->lock --> sb_writers#6 --> &pipe->mutex [ 140.165191][T10729] [ 140.168563][T10729] Possible unsafe locking scenario: [ 140.168563][T10729] [ 140.170607][T10729] CPU0 CPU1 [ 140.172134][T10729] ---- ---- [ 140.173676][T10729] lock(&pipe->mutex); [ 140.174880][T10729] lock(sb_writers#6); [ 140.176846][T10729] lock(&pipe->mutex); [ 140.178812][T10729] lock(&p->lock); [ 140.179917][T10729] [ 140.179917][T10729] *** DEADLOCK *** [ 140.179917][T10729] [ 140.182289][T10729] 1 lock held by syz.4.1456/10729: [ 140.183776][T10729] #0: ffff888020e8b068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 140.186272][T10729] [ 140.186272][T10729] stack backtrace: [ 140.187975][T10729] CPU: 1 UID: 0 PID: 10729 Comm: syz.4.1456 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 140.187988][T10729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.187995][T10729] Call Trace: [ 140.187999][T10729] [ 140.188004][T10729] dump_stack_lvl+0x116/0x1f0 [ 140.188020][T10729] print_circular_bug+0x490/0x760 [ 140.188037][T10729] check_noncircular+0x31a/0x400 [ 140.188050][T10729] ? __pfx_check_noncircular+0x10/0x10 [ 140.188066][T10729] ? lockdep_lock+0xc6/0x200 [ 140.188078][T10729] ? __pfx_lockdep_lock+0x10/0x10 [ 140.188090][T10729] __lock_acquire+0x249e/0x3c40 [ 140.188106][T10729] ? __pfx___lock_acquire+0x10/0x10 [ 140.188121][T10729] ? rcu_is_watching+0x12/0xc0 [ 140.188133][T10729] lock_acquire.part.0+0x11b/0x380 [ 140.188147][T10729] ? seq_read_iter+0xd8/0x12b0 [ 140.188162][T10729] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 140.188176][T10729] ? rcu_is_watching+0x12/0xc0 [ 140.188186][T10729] ? trace_lock_acquire+0x14e/0x1f0 [ 140.188198][T10729] ? kasan_save_stack+0x33/0x60 [ 140.188207][T10729] ? seq_read_iter+0xd8/0x12b0 [ 140.188222][T10729] ? lock_acquire+0x2f/0xb0 [ 140.188236][T10729] ? seq_read_iter+0xd8/0x12b0 [ 140.188250][T10729] __mutex_lock+0x19b/0xb10 [ 140.188263][T10729] ? seq_read_iter+0xd8/0x12b0 [ 140.188279][T10729] ? seq_read_iter+0xd8/0x12b0 [ 140.188293][T10729] ? __pfx___mutex_lock+0x10/0x10 [ 140.188308][T10729] ? alloc_pages_bulk_noprof+0xa46/0x1390 [ 140.188321][T10729] ? seq_read_iter+0xd8/0x12b0 [ 140.188334][T10729] seq_read_iter+0xd8/0x12b0 [ 140.188350][T10729] ? __kmalloc_noprof+0x23b/0x510 [ 140.188360][T10729] proc_reg_read_iter+0x21d/0x310 [ 140.188371][T10729] copy_splice_read+0x61d/0xb80 [ 140.188388][T10729] ? __pfx_copy_splice_read+0x10/0x10 [ 140.188402][T10729] ? __pfx___mutex_lock+0x10/0x10 [ 140.188415][T10729] ? __fget_files+0x1fc/0x3a0 [ 140.188426][T10729] ? lock_acquire+0x2f/0xb0 [ 140.188439][T10729] ? __fget_files+0x40/0x3a0 [ 140.188448][T10729] ? __pfx_copy_splice_read+0x10/0x10 [ 140.188462][T10729] do_splice_read+0x282/0x370 [ 140.188476][T10729] splice_file_to_pipe+0x109/0x120 [ 140.188493][T10729] do_sendfile+0x3fd/0xe40 [ 140.188509][T10729] ? __pfx_do_sendfile+0x10/0x10 [ 140.188526][T10729] ? __x64_sys_futex+0x1e1/0x4c0 [ 140.188540][T10729] ? __x64_sys_futex+0x1ea/0x4c0 [ 140.188553][T10729] __x64_sys_sendfile64+0x1da/0x220 [ 140.188566][T10729] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 140.188579][T10729] do_syscall_64+0xcd/0x250 [ 140.188593][T10729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.188608][T10729] RIP: 0033:0x7fe53b38d169 [ 140.188616][T10729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.188626][T10729] RSP: 002b:00007fe53c1ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 140.188636][T10729] RAX: ffffffffffffffda RBX: 00007fe53b5a6080 RCX: 00007fe53b38d169 [ 140.188643][T10729] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000009 [ 140.188649][T10729] RBP: 00007fe53b40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 140.188655][T10729] R10: 01fffe0000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.188661][T10729] R13: 0000000000000000 R14: 00007fe53b5a6080 R15: 00007ffdc820aa68 [ 140.188671][T10729] [ 140.623496][ T5952] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 21:16:17 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffffff9ab29328 RCX=ffffffff84ca241f RDX=0000000000000000 RSI=ffffffff8bd36ae0 RDI=ffffffff9ab2932c RBP=1ffff920007d3f28 RSP=ffffc90003e9f938 R8 =0000000000000000 R9 =fffffbfff20c4d02 R10=ffffffff90626817 R11=0000000000000000 R12=ffffffff9ab29320 R13=00000000000032f8 R14=0000000000000000 R15=ffff8880326701c0 RIP=ffffffff81972df2 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555578fae500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c42b030 CR3=00000000299a4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000b127 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc37dc9190 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2ed00f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2ed00f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2ed00f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2ed00f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2ed00f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2ed00f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000050 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8540ab15 RDI=ffffffff9ab847c0 RBP=ffffffff9ab84780 RSP=ffffc90003acf0e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000030 R14=ffffffff9ab84780 R15=0000000000000000 RIP=ffffffff8540ab3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe53c1ef6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe53c1eef98 CR3=0000000057fce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000b127 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b57c488 00007fe53b57c480 00007fe53b57c478 00007fe53b57c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53c0dd100 00007fe53b57c440 00007fe53b57c458 00007fe53b57c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b57c498 00007fe53b57c490 00007fe53b57c488 00007fe53b57c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88806a746880 RCX=ffffffff81ade3da RDX=ffff888024f8c880 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000003 RSP=ffffc90003e3f758 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffed100d4e8d11 R13=0000000000000001 R14=ffff88806a83fe80 R15=ffff88806a746888 RIP=ffffffff81b9ed68 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe53c1efd58 CR3=0000000057fce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b57c488 00007fe53b57c480 00007fe53b57c478 00007fe53b57c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53c0dd100 00007fe53b57c440 00007fe53b57c458 00007fe53b57c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b57c498 00007fe53b57c490 00007fe53b57c488 00007fe53b57c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000011df3c RBX=0000000000000003 RCX=ffffffff8b578469 RDX=ffffed100d526f86 RSI=ffffffff8bd36ae0 RDI=ffffffff819084a9 RBP=ffffed1003ad3910 RSP=ffffc900001b7e08 R8 =0000000000000000 R9 =ffffed100d526f85 R10=ffff88806a937c2b R11=0000000000005b5e R12=0000000000000003 R13=ffff88801d69c880 R14=ffffffff90626810 R15=0000000000000000 RIP=ffffffff8b57984f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3db473 CR3=000000003259c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdc820adf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe53b40f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000b0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000