last executing test programs: 1m33.960383575s ago: executing program 3 (id=165): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x800) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x208001, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r2, &(0x7f0000004440)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './cgroup\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) sendto$inet(r1, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x800) (async) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) (async) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='efs\x00', 0x208001, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) shutdown(r1, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') (async) read$FUSE(r2, &(0x7f0000004440)={0x2020}, 0x2020) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './cgroup\x00'}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) (async) sendto$inet(r1, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) (async) 1m33.850631487s ago: executing program 3 (id=167): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r1, 0x6, 0x3, "7864252eda8f1a50e565ff39238009d723c14343528fca5e1a3fe33c7bf452c30201a21936c59ff39ff213bac617cbd0c45d2198bb235bee6f8ad6cf32be1d6996d30392a6f295663a43d256961f6c0f81f2f66dc20b6e761ca9b0dc24d68241444b2cfe96c1ca49ab60a6afc57efb62f2130e8eef60e1fc8a308a547abb070d8f36da67109a42577bcce1d1"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r3, 0x0) (async) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, r3, 0x0) ioctl$SG_BLKSECTGET(r2, 0x1267, &(0x7f0000000100)) accept4(r0, 0x0, &(0x7f0000000140), 0x0) (async) r5 = accept4(r0, 0x0, &(0x7f0000000140), 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xee01, r4}}, './file0\x00'}) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6, {r8, r9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r3, r9}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {r3, r9}}, './file0\x00'}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r12, 0x50009418, &(0x7f00000002c0)={{r5}, r14, 0x6, @unused=[0x8000, 0xffffffffffffff13, 0xc4, 0x6], @subvolid=0x7}) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000012c0)) (async) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f00000012c0)) r15 = syz_open_dev$swradio(&(0x7f0000001300), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_CROP(r15, 0xc038563b, &(0x7f0000001340)={0x1, 0x0, {0x6, 0x7, 0x8, 0x8}}) (async) ioctl$VIDIOC_SUBDEV_G_CROP(r15, 0xc038563b, &(0x7f0000001340)={0x1, 0x0, {0x6, 0x7, 0x8, 0x8}}) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000001380)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@loopback}}, &(0x7f0000001480)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r2, {r16, r11}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r2, {r16, r11}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000001500)) mount(&(0x7f0000001540)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)='debugfs\x00', 0x2011902, &(0x7f0000001600)='{-#+-]-\x00') openat$vim2m(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) (async) r19 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000001680)={{0x1, 0x1, 0x18, r19, {r15}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000001680)={{0x1, 0x1, 0x18, r19, {r15}}, './file0\x00'}) getsockname(0xffffffffffffffff, &(0x7f00000016c0)=@nfc={0x27, 0x0}, &(0x7f0000001740)=0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f0000001780)={{0x1, 0x1, 0x18, r1, {r13, r4}}, './file0\x00'}) r22 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r23 = syz_genetlink_get_family_id$nfc(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(r22, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, r23, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r21}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x810) statx(r17, &(0x7f0000001980)='./file0\x00', 0x800, 0x7ff, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000001900)='./file0\x00', &(0x7f0000001940), 0x41, &(0x7f0000001ac0)={'trans=fd,', {'rfdno', 0x3d, r20}, 0x2c, {'wfdno', 0x3d, r19}, 0x2c, {[{@access_any}, {@afid={'afid', 0x3d, 0x5}}, {@dfltgid={'dfltgid', 0x3d, r18}}, {@noxattr}], [{@subj_role={'subj_role', 0x3d, '#'}}, {@fsname={'fsname', 0x3d, '-\xff'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@uid_gt={'uid>', r16}}, {@smackfsroot={'smackfsroot', 0x3d, '{-#+-]-\x00'}}, {@uid_eq={'uid', 0x3d, r24}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000001900)='./file0\x00', &(0x7f0000001940), 0x41, &(0x7f0000001ac0)={'trans=fd,', {'rfdno', 0x3d, r20}, 0x2c, {'wfdno', 0x3d, r19}, 0x2c, {[{@access_any}, {@afid={'afid', 0x3d, 0x5}}, {@dfltgid={'dfltgid', 0x3d, r18}}, {@noxattr}], [{@subj_role={'subj_role', 0x3d, '#'}}, {@fsname={'fsname', 0x3d, '-\xff'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@uid_gt={'uid>', r16}}, {@smackfsroot={'smackfsroot', 0x3d, '{-#+-]-\x00'}}, {@uid_eq={'uid', 0x3d, r24}}]}}) 1m33.84953395s ago: executing program 3 (id=169): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb9}]}) write$ppp(r0, &(0x7f0000000300)="10e5", 0x2) 1m33.771399621s ago: executing program 3 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x204000, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x89901) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file0\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000001880)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x49c802, 0x81) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=ANY=[@ANYBLOB="280000000009030000000000000000000700000008000640000000010c00048008000140000000043164cad77ddc76b60d4957d311ec374f1a1a34d1003b665b93102cc74fb6a099e8fca5a02275dc1034db3812462149f4a73c28cda1a8160d92d6627b644d5317f684539cb9fba192576bf2887c69c54c8ce255107cfb98b94f80477032e8a6020775cdc9706af75be2ab91e63ca2792aa752a07ce912d19497703d2828"], 0x28}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002a0001000000fffffedbd22501"], 0x114}], 0x1}, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x80000, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240), &(0x7f00000002c0)=ANY=[@ANYBLOB="1410fbba177b4ec93f0a3dba798e15cd3f2f61a3cd49"], 0x16, 0x3) llistxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)=""/4096, 0x1000) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1000000, 0x0) preadv(r0, &(0x7f0000001680)=[{&(0x7f0000000500)=""/137, 0x89}, {0xfffffffffffffffc}, {&(0x7f00000016c0)=""/121, 0x79}], 0x1000000000000244, 0x62c, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={0x0, 0xffffffffffffffda, &(0x7f0000000080)={&(0x7f0000001800)=ANY=[@ANYRES16=r4, @ANYRESOCT=r1, @ANYRESDEC=r5, @ANYRES8=r4, @ANYRESOCT=r4, @ANYRES16=r1, @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4008094}, 0x4c800) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) 1m33.6710938s ago: executing program 3 (id=172): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x2084, 0x81, &(0x7f0000000400)="1a00000002000000d294c982ccda4c7d1aff1f5c0b0d6fe57c26e821a8075a9faf55508521b38b2a62ab6b40624135a97c5102dd9dbdd374a5761e47c16b941767c1bd62f7e339eec8844b5682127228400f6c1784a9cb0592b05ff10bde1179446e49d393a9c57b708a90e88bb645e2e27e56a1952e02de5386ae2ca786e7aa507538f3fe90d47154438b8c19d6664f2ae8aea3039dc337571a12d5aa2c02640c4b4dea9a49c40618b82f270051c1", 0xaf) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000002c0)={0x1, [0x90]}, &(0x7f0000000340)=0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x4, 0x3, 0xeeee8000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0xfffc, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@deltclass={0x58, 0x29, 0x4, 0x70bd28, 0x25dfdbf5, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x5}, {0xc, 0xfff1}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xc, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_RATE={0x6, 0x5, {0xf, 0x8}}, @TCA_RATE={0x6, 0x5, {0xa, 0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @tclass_kind_options=@c_cake={0x9}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008"], 0x68}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c100153e3704020180fc0b09000c00", 0x2e}], 0x1}, 0x4040054) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newtaction={0x46c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x458, 0x1, [@m_police={0x454, 0x1, 0x0, 0x0, {{0xb}, {0x428, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x2b7f, 0xee12, 0x0, 0x101, 0x10001, 0x3, 0x0, 0x3, 0x5, 0x9, 0x8, 0xd, 0x1, 0xfffffffe, 0x80000000, 0x2, 0x0, 0x1, 0x8c9f, 0x2, 0x1, 0x7, 0xfb41, 0xfffffffc, 0x0, 0x1fcd, 0xffffff01, 0x7, 0x401, 0x4, 0xffff3415, 0x2, 0x4, 0x6, 0x1, 0x9, 0xe, 0x8, 0x380, 0x1, 0x4, 0x0, 0x4, 0x6, 0x0, 0x6, 0xffffffff, 0x7, 0xb, 0x2, 0x200, 0x5, 0x2, 0x7, 0x1, 0x8, 0x3, 0x1, 0xfff, 0x1, 0x1, 0x1, 0x10000, 0x8, 0x2, 0x6, 0x485cda52, 0xb, 0x1, 0x4, 0x9, 0x5, 0x2194, 0x1, 0xbcfd, 0x3, 0x4, 0x9, 0x6, 0x4, 0x1, 0x5, 0x2, 0x6cf0c283, 0x7f, 0x3, 0x7, 0xcbd2, 0x2, 0x0, 0x4, 0xd, 0x2, 0x3, 0x7ff, 0xe, 0x0, 0x7fffffff, 0x6, 0xffffff23, 0x9, 0x5, 0x5, 0x9, 0x1000, 0x6, 0xff, 0x0, 0x1, 0x6, 0x3f21, 0x6, 0xf, 0x0, 0xb804, 0x1000, 0x4, 0x2, 0x4, 0x4, 0x1, 0x7, 0x3, 0x8, 0x800, 0x100, 0xc, 0x400, 0x9, 0xfffffffb, 0x6, 0xfffffffb, 0x81, 0xffffffff, 0x3, 0x9, 0x8, 0x3, 0x0, 0x5, 0x7fff, 0x2, 0x3800000, 0x9, 0x0, 0xe789, 0xc8, 0x140000, 0x4, 0x403, 0x5, 0x6, 0x4, 0x8, 0xb, 0xd, 0x49, 0x31, 0xe47, 0x1, 0x8, 0x40, 0x6, 0x2, 0x1, 0x0, 0x5, 0x1, 0x8001, 0x5, 0x80, 0x6, 0xc, 0x8, 0x101, 0x58a67d48, 0x1, 0x4, 0x7, 0x3, 0x6, 0x6a7, 0x8, 0x779c, 0xd, 0xaa0, 0x8, 0xa, 0x401, 0x6f1a22d9, 0x9, 0x9, 0xf8, 0x83, 0x0, 0x5, 0x5, 0x2, 0x3, 0xdd, 0x4, 0x8, 0x5, 0xf, 0x6, 0x2, 0xe, 0x9, 0x80000000, 0x0, 0x4, 0x40, 0xe26, 0x3ff, 0x5, 0xa, 0x7fffffff, 0x273462b1, 0xb60, 0x1000, 0x7, 0x3, 0xfffffeff, 0xd6, 0x7fff, 0x1, 0x1, 0x7f, 0x9, 0x7f, 0x9dc3, 0xb9, 0x8, 0xdc, 0x1690, 0x7ff, 0x3, 0x3, 0xbb2, 0x5, 0xc3, 0x4, 0x7, 0xf6e4, 0x2, 0x4, 0x82f, 0x2, 0xe, 0x9, 0x3, 0x1, 0x800, 0x0, 0x5d3b]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x36f6}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x46c}}, 0x0) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001", @ANYRESDEC=r0], 0x18, 0xe000}, 0x5}], 0x1, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000002e0001002abd70000000000008000000", @ANYRES32, @ANYBLOB="0b00e880976b6408686030000500018099"], 0x2c}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r9, 0x4068aea3, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CURSOR(r8, 0xc01c64a3, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x80000001, 0xb, 0x5fd, 0x1}) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r11, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) r12 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r10, 0x0, r12, 0x0, 0x10, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000080)={0x8000001, 0x0, 0x800000000}) 1m33.377857248s ago: executing program 3 (id=181): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$nci(r3, &(0x7f00000001c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x1, 0x2, 0x1, 0xfa, {{0x1, 0xc, 0x13, "5bb51516c2cc0334cb6f51a1aa9f540baa8cbf"}, {0x0, 0x0, 0x2, 0x0, 0x9, 0x2}}}, 0x27) fremovexattr(r3, &(0x7f0000000200)=@known='user.incfs.metadata\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000280)='net/nf_conntrack_expect\x00') mount(&(0x7f00000002c0)=@rnullb, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x1200000, &(0x7f0000000380)='net/nf_conntrack_expect\x00') ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000003c0)) r6 = accept4$netrom(r3, &(0x7f0000000400)={{0x3, @bcast}, [@remote, @null, @default, @remote, @netrom, @netrom, @remote, @null]}, &(0x7f0000000480)=0x48, 0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000004c0)={@my=0x1}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'vlan0\x00', 0x8000}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000580)={r3, 0x9fa3, 0x2, 0x8000000000000001}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x9000, &(0x7f00000005c0)={0x1, 0x9, 0x40000, {r7}}, 0x20) chroot(&(0x7f0000000600)='./file0\x00') preadv(r5, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/16, 0x10}, {&(0x7f0000000680)=""/113, 0x71}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/99, 0x63}, {&(0x7f0000000840)=""/161, 0xa1}, {&(0x7f0000000900)=""/3, 0x3}, {&(0x7f0000000940)=""/208, 0xd0}], 0x7, 0x7ff, 0xe) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r7) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r9, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c00)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x9430}, 0x1}) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f0000000c40)={0x0, 0x380000000}) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x58, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001dc0), r7) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x28, r10, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000805}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x4c, r9, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xada, 0xc}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffff70, 0x1f}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40811}, 0x84) syz_open_dev$loop(&(0x7f0000002040), 0x2, 0x8000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800004, 0x4010, r3, 0x6) 1m33.313626748s ago: executing program 32 (id=181): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$nci(r3, &(0x7f00000001c0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x1, 0x2, 0x1, 0xfa, {{0x1, 0xc, 0x13, "5bb51516c2cc0334cb6f51a1aa9f540baa8cbf"}, {0x0, 0x0, 0x2, 0x0, 0x9, 0x2}}}, 0x27) fremovexattr(r3, &(0x7f0000000200)=@known='user.incfs.metadata\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000280)='net/nf_conntrack_expect\x00') mount(&(0x7f00000002c0)=@rnullb, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ramfs\x00', 0x1200000, &(0x7f0000000380)='net/nf_conntrack_expect\x00') ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000003c0)) r6 = accept4$netrom(r3, &(0x7f0000000400)={{0x3, @bcast}, [@remote, @null, @default, @remote, @netrom, @netrom, @remote, @null]}, &(0x7f0000000480)=0x48, 0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000004c0)={@my=0x1}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'vlan0\x00', 0x8000}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000580)={r3, 0x9fa3, 0x2, 0x8000000000000001}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x9000, &(0x7f00000005c0)={0x1, 0x9, 0x40000, {r7}}, 0x20) chroot(&(0x7f0000000600)='./file0\x00') preadv(r5, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/16, 0x10}, {&(0x7f0000000680)=""/113, 0x71}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/99, 0x63}, {&(0x7f0000000840)=""/161, 0xa1}, {&(0x7f0000000900)=""/3, 0x3}, {&(0x7f0000000940)=""/208, 0xd0}], 0x7, 0x7ff, 0xe) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r7) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r9, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c00)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x9430}, 0x1}) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f0000000c40)={0x0, 0x380000000}) sendmsg$ETHTOOL_MSG_EEE_GET(r5, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x58, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001dc0), r7) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x28, r10, 0x10, 0x70bd2b, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000805}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x4c, r9, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xada, 0xc}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffff70, 0x1f}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40811}, 0x84) syz_open_dev$loop(&(0x7f0000002040), 0x2, 0x8000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800004, 0x4010, r3, 0x6) 20.030768349s ago: executing program 4 (id=1236): socket$netlink(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x4, 0xfffffff7, 0xac5, 0x0, 0x6, 0x27a, 0x73, {0x0, @in6={{0xa, 0x4e22, 0x5, @loopback, 0x800}}, 0xe6, 0xaaf, 0x7, 0xe9, 0x4}}, &(0x7f0000000080)=0xb0) 20.030053731s ago: executing program 4 (id=1237): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x7, 0x10, 0x0, 0x3, {{0xe, 0x4, 0x2, 0x5, 0x38, 0x66, 0x0, 0xff, 0x29, 0x0, @broadcast, @remote, {[@noop, @lsrr={0x83, 0x1f, 0xb9, [@dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2, @rand_addr=0x64010100, @rand_addr=0x64010101, @private=0xa010100]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x80, 0x7800, 0x80, 0x80000001, {{0x12, 0x4, 0x2, 0x6, 0x48, 0x68, 0x0, 0x7, 0x29, 0x0, @empty, @private=0xa010101, {[@timestamp_prespec={0x44, 0x34, 0x5c, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xcc}, {@private=0xa010100, 0x375}, {@multicast1, 0xfffffffc}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x80}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'bond_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x8a, 0x78000000, 0x2a, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x40, 0x40, 0xcba, 0xffff51d9}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000c80)={0x2560, r2, 0x110, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0xb}, @ETHTOOL_A_LINKMODES_OURS={0x24b4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb4, 0x4, "625ef8c2f58aed355bf030e1f5a24f8d0b3ba902d3a6b8c5fa0f050b3acbf98275c696be466e373d788ea970b0ee963b9d387847caa67a221b89e423510726c0bb5b4a32762269b4b32873623c7e9bdfb91dcfb3463ee22e4b70177e615b5c065dc0f171cebf6d1c875b8a53318e87e483cc6ce847d4b7f28c9192ea60632af1c9bb33768c22d39da6931e3680eccc6111f034c47c908b9ec4da200a2e98493b742fd83791d668787bb5019f1023cb49"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xdf, 0x4, "d7d8adabf431484c35df41ea6295db998a6968b06fd9a9680e82e83895d68ce26fe7808de7271db9d07ef4a001388624e6112e33023d245822e772e3ccd475343c97c6957b14be231174c2c2ce6d481bf7c4ce247f3f141f3ddf9e2bf01eae8636774ae7f2b261de3592c58691b909117620f8a5d43cc823b2f7121c6725bd8bf1c08b03f72fcadc35e6b6b2628b4afaa9e9cba557403d10839a6f407a75b286469fb0298cf89d69b3d494b29084aa1de1bd9db38345083fc024eb344fc5911e1fddd451e28efa47053cfe45004f52050758faf9726151b4359905"}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x45}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xfe, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "f54bf00256ade6f009704523bd99edaf19cdabbaea348fc2a764efcb3d986ec53727b2a5fffd0c021031088e153b4a2b958e3aef150458bc813174c5acb9276dc6eaa1b812e9bd061c62f085d6239e730180cbdd94e32e140847f7c4717c7e44b8d11694843cd9df7359c55fd3dc14a287a177ef6c7c19dc2e0865171911ad4306cf7d457eb798f1e4e7a0a6488efd705fcb795e22304b4c478fbdb6bc92fe3451e0f525161e3bfa459cdf45b78ac3f95b06a31bfd899e6d606f40d640a1ebd86f0e2a6dfd46a9ae714f37c8aa0ad32c12dcacd6ca800896680fa69bf50487bc48a7a529f5272e3d8803b5a195eed0d2ce33fcf89e721caac7b212d9bcbdaa97d69eef8020802a1ceae6fb271c36185404d6f369bcf88684efcaafd8059057d35ca986d38997bc06b2420e08dcf8be94b21263fb6b8fa1c8adb8013e9c113c089c1f06dfd4ff5676385c4e9846628b62e9057d8031bad7358672fb0a32701d2e3f1d3e104fa8045b8c899d9c80d5d47064974b81e67d3b95c709c92c6d374ef0e6649a14226c72599168b0270fbcfb61fd093004763ad952f89e186c047e7ffba0cd1fe21784b24da45ad6ad3b62e11c7651b2a17b4b74b30207bc381452d2a44c5f3fcf6f479a88f5a33670f58960b618b647e1b69c2589f61c9e5364c9b4690d6ce49903eeffc17c178745d8eeb255f789582e590433074e5252860a20c96bb57d2e4a64771b544e690a582546af3b3e7089781e24ecbe564df34730c901de4872f984450b75f9ac58f59edbc10c7fc88d2179912dd227ed8a5e460814d29e8a1ee23f4469a56a6a698d0576e73295e8f31d63518c5fddd04bfd0237dbd780add907d32d17aae0a6cb95b9a31f1f37fbead82845de6aacbf7b55db35ef9a0b97173c4b7ef2804cc7cf97df68b763e37e2053af187a28f48b052d5de13729c14b9ec143ee3340f6b4e823ee90a2f2807b6cabb3c54599ba959b1e4829b9a799ee8de637dd552ae70dc767901528f45a45c44eac4c8924c8905bbb5082a2cc678695fbc5984f8e0a7196c3e6e16239133587ca06c94f3a465039cd43d7d7230335edaf6e4d95ff79a42d970910cd1a247258982bd403e47cc48f3f4af9111e1e4a68dd87bfc7d25d0e8e169e5103f614bbf549c3054ea2dd0852f3eaa2637d54276eb617a0bf6a5a2aa22bf335d9e6a0d2861681b260146d1d7d424ac3207e0833d8743de37ca949c4cb7219384f2fdb56a043c4ccb49c9aab55a49b4afbf37ce182be61c001e51defce8331d4f3834d1efa12a8db20bb2d04c90d33f1a4c0ff03850028ae6ff06050da9e74bf6c9913c6c91ef3fec569c768b0f2555faed0319eba7dfa5bcaa1254433389f1dfe290b313a0fcdb518eaf1f1d7f4d4c76318dabedfd87018bee3b5314183ca0c7d04ca70b79972ff71a187a88903c765605edae15469e28b7b9cdfa027e708a6b9f49a55e78e2abac14901816066ab5be2716784b12808736e8bda20fbff34d45ac736d492499324e450c87aace17b67066d04809f8e4cb2040f1ef58f98ccd955b874de7f9c101bd4c7b9ac7c283514fe449b1d00d17bf8ceb562d627d56890725cbd79bd519261cf3bff97b713a3e33a2d784e502588cf42ad48f2a0f37f5d567abc0902fb508f9229d2a74d158c45a6920d6c013a5711818a259692cf831b233aa8f321e852b40e4cc1ac4ddcd54f96ec47ecce9d4c0aa9a50f92fe6a96757fe6cb1c76e3c2d9c57661a09a0e6d8eb80ac1236e868ec03565b2c189b75d8c2a4797fb128ff1eb40b36ebb5f9e6402353e4f6832fa88a64067556fcc77936957e1d9468c072f282436327abf6f10c14d53e3273c1f6c7fe5a957c9e8f17bd4503cb72bd25d749197371c35db4b81d7a0c14eccd057e2e2b2efc15f3d93c3dea01aa28b4ba6579bed4b6058c2d270a3fd59ed628deee9a51b4e6be6438639022f23b7f4b52ba57fdd4a79f11572cf79ae90a7265644105a332d498ead5664a7da4ee86d97142ad77120b69be68b96e2daaaa12ac0199c10faed5374d2414a652c4664948382ecb825eea7a3d9dc92a49a2c6e81675ecbcf5d57108d1f6714247f7243e82f926901a7435065379ab49168fbc74edbd8a4c4bee3652f24cce261110528bb351662ae7b63697bcebda8014c294b1cfc3a3e60dba1034859d35dd09b4805198725f94d0f07d0066222d64139897f94c48762f9c94a7a65b35e8d0feb59841d3609d4856ad79a2ebebdb8dfec2bfa9704437533744d685db8a657fedb6a3205664257538439984b6205f8233c7afbf6f52d31d338ccec873fcb79299898aed5f1b8a8abef1cd0cc4defe11b7496a7681cbe9e130bb76a75f14a462941e5653970ea68f5abfca7f66f29bd6b14decf88fce3c62fe790154533b365ec9b4f8920c7d03571d7b399d09d085549aac7636465ff7abb6e88c4ce79416c040157a52bd2fabf9b0a5defc8a0c24a4e52f8c0940db862abafef36f159b7f70b0b2405c94a2c6736ed908bb244b11289f31f7129f68d28e338a1fafb4a52d8cc3cf51c6c044eef4cad9d4d51242e23f4bde235d3b6d430a2f21f9ace70f897552705a6f6788660286f2bea157420ed4519ac7cf3a3c4c90aea1d9823e61b4ae22684260d27f52eb5e6e309c7fc1da88d3d2bd364ffeee897bbdaa964c2f56f500516c188fd245656096a47abf74f8dc67c7bbfebf55d388e5446e6b8bdc8c332582cc17ac69150364b27ed46c07321e7eb8fb1359152cd1be46d5be58933075e85b6691a2e537fb37a47e8d718a357624589b2170eb17650c0429add56d60b856d61bc19900a7e5705e87ad94148ba1a95a97dfc70e354f3c854eb9d1e0569259d3b6557a8388fd4cb658b1c7cef9ad2b6ac4fc5e3e63c622441055ef48f173ecf58b4f5ace3454ed1df44d3d8ddf772f9aa7684cacf1e4da4bd2a6cb83853a36601ca646620d5d7e54384d16825890051ee5481ce1c4a1e0bd55a0fe15781ff4a4268b20a0573446e549866e18e1d960c72a0234765550a56ea2b629b59ed44d642445b89f83bf89f8be00b879937a8d984aa850f601e20a084d0fa0a845f781f0198f6f4c9e2a365ef75a47675a7b05d53c4c5be3bc4c584b485a6ec1772fd521d941777e8a551557cb8bdea825644d981ad5e486027b78066cf27a391cdeffaf45fa3cfb75c656d900ee7cd38f2801b15cad8d82f1e8a0e705d6c248871fb00fae3ede6d8d9ffef6f4b5bc6dc707e036cc3623b6e677764e1aabfd0e1dc35223fcd169518581415be11a3664ad8c10633bc19f4269eb3d796aebd1544e1f8ca9ed5497e8a6b29ab9386cb2e0387a69b2695d81cc9cb84c71c34de885f30952456b89ead365338af97889fc1f3e0751ebc6c5f3f32e9abe5684fe3b8b95b598b28dea47136b102a8a43b4f91be4eab270b15fa2fb99b2e17395a51041eee5fae7f7a220c70888d4b8b99441af7c978259bf53cbbbdd4cdc0fd135bbfc057ce348460ebbbedf1aba88d7b81c395a4af28268194056080612bfee17ab359d25b5a9a0aab839eb63022c712c67730584a6abadf54000845b1ab5349cbaf906a4aacdc90906a28656ab2fcb71ddf46705d8bb12f7440b4f4bd6c4b55d48fce3bf6356c86f2b5ba22e2be4db9c362274421bed456dcc80c691857af9c677a72cf4623c24d4c24727da49b5170f006cf5f76a2479b462dd37e337d9730a5d0982824e2017e3d11ac9d97e95238b0ce2332e642741c9b85ea987779b5f57c2ed831afcdd2b118438481bb8b2a3c27c0af2c540302ada9748f8456c0d310f388e562b4adf2707c1a059180729c0bc2778e1f3f4e0301493f578e9463a69b7b9b9cf614ba8e4eff422e0242215964f4eadd576440d4a7a85010f84895d3f017dbb1d97af16d810b8d415820ed0c0a6813eb02ace005201a0ba1bf57b5f2c11c4bd6a8774b03b0d31ee3ababa021f8bf415740c79d70a24ecb2fedea1e37a3a4345243c27a1fc8a75de506493a25093f57e5121478e2cbcf52dd72a2498e745c5530163f151d7726942471d6a86697699f6cf2ea5bed9b257c42fd8c15f8bd947878cb5f718535821f06d36ea3c9f2f68241172b91a563b9ac7923027894110992aa585426108ab2b4ddfeae358a585bc6079a37e38aeca53ee13758513ae8516ca2a8f6f3d94c2c34dfb92fe9479e3ff6108bfddb42ca8d45e689589ca67a9422a823449607a1af7f928f3e2beb455c6e7b1214d126ed8d312cdae8ab713d1dad4636e28d1e7918de0213a0ecd02381d6295d00860768b0c5286f7059475e0e87024ab12c5b282d8a942f0ae24f36dc13154fce1341406c91f2b06ca9b37cb8809925754bfe5b5d3cbdda95779ab96639d9016ce9fcb4ce07de4731481ba0bc992a416daf828e4e6e090d956a5b55ec8cad7a81f9f572782fdad61d2af23146f909b79ec7eb7d054ee1acaf88cc159ddae8d55710a1fa753613c440b9f89d81c5bd374c9818981974ce5be24f31587430d6cb17287dec53be1df5555ed1f2d2cd954dbdfa31d71018bb86d2a9c12aee21cb194b3e8e1f79ffb21336c619ec6fd81f346dfe5980dc39e27e73aad55748b7558f65b8b2a32799180909f320677335a02bdfe7833f3011b2e76612e898fdcdd99a39e53ac8eea86358d373fdc4ac6738de0af2f68382b556a9e10d650ad59da64299b42ea46785192892b07ecad2790929095c6140839a9335d1c50ea76795d7fd654af2a6ac6e34056f6967b195181354f2da6a07411060fe353e5283b4a89cd62273d09c99f02d60c3882c77a0c23525c685aac8905bdb85763f22b1739d3ad1550f6a3949343bcccbe72b704aef1eab4f76d948575b3c5cfe65c238f567d8d1af2f64e7ebf6e771a470c48dada44715e135a0a4817730f39ebcf53a913fc07fa8ab9557535216489bcb6756a366ed2b8bd173103e80d321b6ffb9106eb0ef4ac61362132c555de5f608bcdee9f210a9b5754364570498c63e944c7c2e7acfd80f6ad3297d12490b38a0fa3a05a076d08e133166fcce6192421a123cbbbcf335b94dbd83c8693fae468888fa2d7dc0ead9a056dd24fa1457547ef5db384d8b1efb3049ef71af757be142022b55adcbba8a84c30b85af81d5f2408de987be7514dafa421bcd6a80d1587c9c610bb6f24d037d9cfd272e1f384312be098ab511033807c5165a830b472f2abcdb320cc3b01d536bc776060ed14365a192a923f08b944b2ba85035a36ea51a057fd11fa9468032bdb255f4047cdbffc5b01a5b1fc80fd6a718d35b4e4e1e90ed3b349bf65f4793299ba535ffc6d168e004308c3c443c2ccbe947524413daae9d3bd62be83be3deac7b87fbb140342861300fc0be27d23362962375faee240f861f4ac3c78dd24041e34239991cb4facbe95bd1bac10e1c33ab66afe198585c078114daf1613413cd99bdabe7b3591ce0d0b1820c26a28b437d763d031e4b74e56910d9796b057e6f7a002496db8ec9db00f92f48059fc44db2b4e8075549ef043951c09d8007d07dc4d1231362debd8771feb1f98c02312104824056b2e9c1dd918294df1b609a4748b1eeb9dc0d3dd22370090929fa0ffa1736aa0c7e3bab1636aabd77e365ff536cb8b134d8adf79eb9276df6ccb950cf57a38355c704077766734f80e64eb99f3873afe1c48d404261d96f6d4c6eb1cd73cfe101caadfdd82af44f378cbb1675234583af42799de693a3aefc986b47c597726e6c55b0f8b50ed556d6a05c72d7e30e536998aa194a185e0a437039689795"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0xe1, 0x5, "4c0d5c964ce1d518ea1afaac78cf6ceaa0e6317e1a384285bf3330762bd0efc5f2b5829463a5bdaa56162f8fc4bb26b602d4f17dcf6269282228e85c5ec115a96dde945e7d0ae1dd4713f897d0a789c5e2d549b690c71ca4c9e592d33b9bf3fad445c336dc0a011412bc5d4124aa9dedeb2c9ac01ed1a622ef2b1d9a8ef87c007e76a9228a1cfd28cc69d9aeea5f76583b1717f886eeced57a0bf648f480360f9ef428c830e1a10188d269148ee2cca63b27a9143eb8f71013f9310570cd61d605106015aaee748543c75fbad766b215bf88de343aff44776adf63d56e"}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x4}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x48}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%%\\\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x2560}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000318ce322bb57a225d33ed76a00", @ANYRES16=r0, @ANYBLOB="01042bbd7000000800011400000018000180140002006e657464657673696d3000000000000005000c0001000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x2d4, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x14}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "9d2b5801a6bcbcc8e95133746e"}], @NL80211_ATTR_IE={0x264, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @preq={0x82, 0x78, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0xf, 0x1, 0xcd1, @device_a, 0x8be, @value, 0x4, 0x10001, 0x8, [{{0x0, 0x0, 0x1}, @broadcast, 0x65}, {{0x1}, @broadcast}, {{0x0, 0x0, 0x1}, @device_b, 0x293}, {{}, @device_b, 0x9}, {{}, @device_a, 0x6}, {{}, @broadcast, 0x1ff}, {{0x1}, @device_a, 0x7fff}, {{}, @device_a, 0x1}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0xb4, @broadcast, 0xf0, @value=@broadcast, 0xba, 0x3, @device_b, 0x80000001}}, @random_vendor={0xdd, 0x7a, "3fa179f1487af28cf69c91503d6534f5ee75fd46cb65e9cba6b0491706ddf21b32954001b69031abf25be8fc1acc6bb5c58538c8fe388d4ed1c79e72946083b0fbc978bd708c7a53ed4caffcf659b2ab94a581567e47666ec78654cf25611a1b085a58f5a464ecff37df62c29dd8d121f9da92b78226d780fffd"}, @mesh_chsw={0x76, 0x6, {0x5, 0xb1, 0x7, 0x9}}, @random={0x73, 0xfc, "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"}, @cf={0x4, 0x6, {0xf, 0x6, 0x101, 0x1}}, @cf={0x4, 0x6, {0x95, 0x1, 0x4, 0x3}}, @random={0x97, 0x23, "66532bd0c86937f32a0e5bac374b3a426ad3b70d0ac87f6e36bcd359635b5600b3b8ba"}]}, @NL80211_ATTR_IE={0x2b, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xf0, 0x8, @device_b, 0x5, @value=@device_b, 0x100, 0x7, @device_b, 0x4}}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x44010) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r10, 0x29, 0x2d, &(0x7f0000000bc0)={0x9, {{0xa, 0x4e22, 0x6, @mcast1}}}, 0x88) 19.960718381s ago: executing program 4 (id=1238): r0 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x498, 0x5}) syncfs(r0) (async) syncfs(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fallocate(r0, 0x20, 0x8, 0x7505) syz_open_dev$video4linux(&(0x7f0000000040), 0x2ee6, 0x4000) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2ee6, 0x4000) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000080)={0xcda, "1c6e0e3faa0382c9d8e854b006a7bf970459b89588f6c1687777b098c9bd03ee", 0x0, 0x1, 0x9, 0x9, 0x10, 0x2, 0xe, 0x4}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002180)={0x20, 0x0, r3, {0x7fff, 0x4, 0x4, 0x2}}, 0x20) r5 = accept4$x25(r1, 0x0, &(0x7f00000021c0), 0x0) connect$x25(r5, &(0x7f0000002200), 0x12) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x40) bind$packet(r0, &(0x7f0000002340)={0x11, 0x10, 0x0, 0x1, 0x81, 0x6, @multicast}, 0x14) (async) bind$packet(r0, &(0x7f0000002340)={0x11, 0x10, 0x0, 0x1, 0x81, 0x6, @multicast}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003580)={{r1, 0xffffffffffffffff}, &(0x7f0000003500), &(0x7f0000003540)}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000035c0)={&(0x7f0000002380)="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", &(0x7f0000003380)=""/169, &(0x7f0000003440)="7163adef84396b6acee0f5f6cc9ffc6e253c15dae521e7f0dc4e339f5824a91630d16b9d1abb98dcac28523b6d306ca932b5d7b071ee0d5bca0208c7bbdc993286eeae9b07642cc7f5d91f0ecb0acf4f321dd3de95b47f2cbafbe70121cddde41d1de87cb85fa13db80c1109e35ad35dc42077128923555b", &(0x7f00000034c0)="24c40fc3f7ac5b0a22cb6f548d2efa624aaf187517fb7fbac369870338dfd37e185e6ed4f98439fa2be745f6", 0xd6d, r7}, 0x38) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000035c0)={&(0x7f0000002380)="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", &(0x7f0000003380)=""/169, &(0x7f0000003440)="7163adef84396b6acee0f5f6cc9ffc6e253c15dae521e7f0dc4e339f5824a91630d16b9d1abb98dcac28523b6d306ca932b5d7b071ee0d5bca0208c7bbdc993286eeae9b07642cc7f5d91f0ecb0acf4f321dd3de95b47f2cbafbe70121cddde41d1de87cb85fa13db80c1109e35ad35dc42077128923555b", &(0x7f00000034c0)="24c40fc3f7ac5b0a22cb6f548d2efa624aaf187517fb7fbac369870338dfd37e185e6ed4f98439fa2be745f6", 0xd6d, r7}, 0x38) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r6, &(0x7f00000036c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x404c0c0) r8 = syz_open_dev$sndctrl(&(0x7f0000003700), 0x6, 0x2900) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r8, 0x800455d1, &(0x7f0000003740)) (async) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r8, 0x800455d1, &(0x7f0000003740)) fcntl$lock(r2, 0x25, &(0x7f0000003780)={0x1, 0x4, 0x1, 0x1, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003800), r6) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003800), r6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000038c0)={'ip6gre0\x00', &(0x7f0000003840)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x1, 0x6, 0x71, @mcast2, @mcast2, 0x10, 0x1, 0x0, 0x53}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000003980)={'ip6gre0\x00', &(0x7f0000003900)={'ip6gre0\x00', 0x0, 0x52, 0x5, 0x9, 0x8, 0x22, @empty, @local, 0x7, 0x20, 0xfba2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003a40)={'syztnl0\x00', &(0x7f00000039c0)={'syztnl1\x00', 0x0, 0x0, 0x9, 0x7f, 0x33, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x8, 0x8000, 0x10001, 0x8}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000003b80)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003b40)={&(0x7f0000003a80)={0xb0, r10, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003bc0)={'#! ', './file0', [{0x20, '[[]&#%:'}, {0x20, '/dev/snd/controlC#\x00'}, {}, {0x20, '/dev/cuse\x00'}, {0x20, 'ip6gre0\x00'}, {0x20, '\xbb\xbb\xbb\xbb\xbb\xbb'}], 0xa, "6601a3fdb141263e9a5000c07e54a9327ffb54ee44a7508ef545fa3d6220fd3582a7c985f6ea16b8bb81f8ae6074f1bb0b29fb65d4830a340ef117fe64a3cdab848e6265cd091036bd5cfa4cbf95b37aa644da39ecded14d9442f0c3326377e6d188640a304e4cb2f6429011b8305a13710c3ef27ec502ec85b0ef4f078e24edc817731134b4d75423e960506a783c6c0e99234cb5f3815c"}, 0xdb) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003bc0)={'#! ', './file0', [{0x20, '[[]&#%:'}, {0x20, '/dev/snd/controlC#\x00'}, {}, {0x20, '/dev/cuse\x00'}, {0x20, 'ip6gre0\x00'}, {0x20, '\xbb\xbb\xbb\xbb\xbb\xbb'}], 0xa, "6601a3fdb141263e9a5000c07e54a9327ffb54ee44a7508ef545fa3d6220fd3582a7c985f6ea16b8bb81f8ae6074f1bb0b29fb65d4830a340ef117fe64a3cdab848e6265cd091036bd5cfa4cbf95b37aa644da39ecded14d9442f0c3326377e6d188640a304e4cb2f6429011b8305a13710c3ef27ec502ec85b0ef4f078e24edc817731134b4d75423e960506a783c6c0e99234cb5f3815c"}, 0xdb) ioctl$TIOCL_SCROLLCONSOLE(r9, 0x541c, &(0x7f0000003cc0)={0xd, 0x2911}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000003d00)={0xa0, 0xffffffffffffffda, r3, {{0x3, 0x2, 0x7fff, 0x1, 0x2799, 0x2, {0x4, 0x7, 0x2000000000000000, 0x8000, 0xfffffffffffffff7, 0x3, 0x9, 0x80000001, 0x2, 0xa000, 0xa, 0xee00, r4, 0xa, 0x9}}}}, 0xa0) (async) write$FUSE_CREATE_OPEN(r2, &(0x7f0000003d00)={0xa0, 0xffffffffffffffda, r3, {{0x3, 0x2, 0x7fff, 0x1, 0x2799, 0x2, {0x4, 0x7, 0x2000000000000000, 0x8000, 0xfffffffffffffff7, 0x3, 0x9, 0x80000001, 0x2, 0xa000, 0xa, 0xee00, r4, 0xa, 0x9}}}}, 0xa0) openat$sr(0xffffffffffffff9c, &(0x7f0000003dc0), 0x400000, 0x0) 19.958938631s ago: executing program 4 (id=1239): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x818098, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x20000, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x440, 0x2, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff2a4, 0x2000, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x1328cb8, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f0000000300)={&(0x7f0000000100)=[r5], &(0x7f00000002c0), 0x1}) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d270015000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x7fff, 0x9, 0x1, 0x7f, 0x1c, 0x200, 0x10}, 0x9c) faccessat2(r6, &(0x7f0000000240)='./file0\x00', 0x40, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000004c0)=0x10f) ioctl$TCFLSH(r7, 0x400455c8, 0x1) 19.71958282s ago: executing program 4 (id=1240): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0xb0}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x34, &(0x7f0000000a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@generic={0x8906, "ed9e681963b59679626ced9af0b1af9db4b9ba44905bd8bb232ea0f04bdbf0904bc60fb5f75f"}}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000040)={0x2, 0x4, 0x2, 0x7, 0x0, [@mcast1, @mcast2]}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x513883, 0x488) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0xa) getdents(r6, &(0x7f0000000080)=""/87, 0x57) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x18, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x40080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100fffe08000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) 19.32984571s ago: executing program 4 (id=1241): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) unshare(0x6a040000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x5, 0x200000003]}, &(0x7f0000000340)=0x78) 19.295086662s ago: executing program 33 (id=1241): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) unshare(0x6a040000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x5, 0x200000003]}, &(0x7f0000000340)=0x78) 1.619577617s ago: executing program 2 (id=1547): r0 = semget(0x2, 0x4, 0x690) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/27) (async) semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f0000000040)=""/4096) (async, rerun: 64) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000001040)=""/126) (async, rerun: 64) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f00000010c0)=""/83) (async, rerun: 64) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000001140)=""/253) (async, rerun: 64) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000001240)=""/4096) mkdir(&(0x7f0000002240)='./file0\x00', 0x180) semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000002280)=""/52) (async, rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000022c0)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f00000023c0)=0xe8) (async, rerun: 32) lstat(&(0x7f0000002400)='./file0/file0\x00', &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000024c0)={{{@in6=@private2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@private}}, &(0x7f00000025c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002600)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002640)={{0x3, r2, r3, r4, r6, 0x1d1, 0x5}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}) (async, rerun: 32) semctl$GETNCNT(0x0, 0x4, 0xe, &(0x7f00000026c0)=""/89) (rerun: 32) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, &(0x7f0000002740)) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000027c0), r5) (rerun: 32) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000028c0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x4c, r7, 0xa28, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x6}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) ioctl$KVM_KVMCLOCK_CTRL(r5, 0xaead) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000002900)=0xffff135f) r8 = openat$sr(0xffffffffffffff9c, &(0x7f0000002940), 0x800, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r8, 0x8040942d, &(0x7f0000002980)) (async) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f00000029c0)=""/164) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000002a80)) (async, rerun: 32) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002b00), r5) (rerun: 32) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x8e5dcad77b4f29c4}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x60, r9, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xe3f3}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xf4ac, 0x7253, 0x5, 0x5]}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0x200]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x80) semctl$SETVAL(0xffffffffffffffff, 0x2, 0x10, &(0x7f0000002c40)=0x8001) (async) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000002c80)=""/203) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000002d80)=[0x0, 0xffff, 0xbbc8, 0xa, 0x1, 0x9, 0x7, 0x2, 0xb15]) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000003dc0)={{0x0, 0x3, 0x2a60b2b6, 0xf7, 0x6, 0x7, 0x38000000000000, 0x4, 0xc33, 0x3, 0x10001, 0x0, 0x10001, 0x2, 0x8000}}) 1.568564811s ago: executing program 0 (id=1549): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x8e, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x881}, 0x0) 1.567340847s ago: executing program 2 (id=1550): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000006c0)={0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7acb}) 1.566346757s ago: executing program 0 (id=1551): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000611230000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0xfffffffd, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffd, 0x10f, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="851666ce20db96ab0c7d83e114e7c41762249711e34f4ce12c6afeb7e6d77bd3b97644edd8e3a3b71fcd006b6237766e151f344afb2306455034ea7a31b1a48724e372a5a8a9ca040f5831f2eb11842a4b8ec9064fa439440f374355d9af754314ce445ac9bea7fac19c3ac58a131895c378ec497ffdf9a82032d9fa225397b92d2e2193de6fe2f6b6c0bd0f80de3dc72890b6900c5bc6752639bf37ab325c16dc2f1c4d01b4c3b71ebbfd6fc9b316f76a07144538506a68ae00df22f2fa9cbb0c9fa73c1dcf3eb2eb4fe3534fcee01e9ca0c66f27b8e05e7545cbc3511b3d086f51d58f9acd52eab032468cc807543ddff977834d8740fabc6db21e011079ec7baa1ef03a3b56b976b39669fec8df", 0x0, 0x10, 0x0, 0x1, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0x980912, 0x9}) read$FUSE(r4, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSNPMODE(r8, 0x4008744b, &(0x7f0000001300)={0x283, 0x2}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@remote}}, {{@in6=@private2}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) r9 = syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) ioctl$VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000002680)={0x18000000, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002340)={&(0x7f0000002300)='fscache_acquire\x00', r4, 0x0, 0x2}, 0x18) write$FUSE_CREATE_OPEN(r4, 0x0, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000002380), 0x2, 0x0) write$nci(r10, &(0x7f00000023c0)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x2, {0x1, 0x1}}, 0x5) write$FUSE_INTERRUPT(r4, &(0x7f00000022c0)={0x10, 0xffffffffffffffda, r7}, 0x10) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="0aca8ae6958d78fd0a291e716185cdf15d156eb8abfbeb728029f2ad579b6ad193126cf4b22dde38fa6cfd4f1c40ccf8e1f03af7fba665", 0x37, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000200)={0x3, 0x0, r11, 0xeeeeeeee}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x5, 0xd}, {}, {0xa, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffd}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044828}, 0x0) 1.479495313s ago: executing program 0 (id=1552): syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581ef"], 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x10410, 0x8}}, 0x50) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="029766f968515fb8ae9b51d3ac98f249b12fdbbda438491bb33cf6bdbe77b28b8be8a01c733fc04cb2ae3204acc580e90944e28e113e", 0x36}, {&(0x7f0000000380)="61661b96d1fd419b2e234837f5af8700a14e190f7aadee1a2169c48f3f0debaab86937ffc4b0023f988a498b583b1c34449f9ff55802ecc4efc64892e0c814c9f53b382f8ba0d5eb5f090eafdd812de200a1cfc7e087e10112b7f4ae0cec37355a1402252bdd63966d79f85b2964aa1190327a0c164bb8780787b4c8a6c8a37bdf95c7945e185089e281d0e40ec28ff91b4d789acad49d8e33b9e10b18c7243617d53396d97da5922c04e159f81c1d998d266e6bdf1c2b42a6896c78", 0xbc}, {&(0x7f0000000300)="fc6e132f5b631480c60d554ff9f57f04a8d4fb41898f503dd2c07d370b3c847666012909de285fc58e356164d22a6cd70d88d0f181cf67ecccc7", 0x3a}, {&(0x7f0000000440)="2ab40dc95c26bf7fdec0e33fee8c59abc854ccc210b464eda012da3d1d0f9ea0b9a4b36accdee5aa208112729dfc5c7d2ddc2f95673d9729b8b82ccc215ec6711d322f7c36ae227572fe240e38269049597ea64f546fc09f52a87482174ad927900877474f3e50afea6889dbb30a9a002a68d86c68270f7e7cfc75217606d12fe252666f03333af5753b8dc52cb997c955697ec31dbed0f618a391a3b2caf03f274c6f8d53b35e87792bb2b5ae574511432839892057d66a08b19f7d68322fa2b1f5", 0xc2}, {&(0x7f0000000540)="1fd7d4429dc7fa6743637ffb95e8580b8a48d97ddbe22ba15bd6805f1db67358bfa529862f2d5220403b8889cdaf9330fc745054589e519653e950b04aa6e9f1d42d721ab5992d34d61ead87a83d06a83d8e94f7f16860b36c68bed09ebc52f80336c500d61572a41777efff72524ebb9f8b7e9c693242", 0x77}], 0x5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) stat(&(0x7f0000000140)='./file0\x00', 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xfb, 0x8, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xab, 0x1, 0xf}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x93, 0xa7, 0xc, 0xff, 0x2}, 0x12, &(0x7f0000000100)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x0, 0x2, 0x1}]}, 0x2, [{0xbd, &(0x7f0000000140)=@string={0xbd, 0x3, "b6744c7ca9778c7b32fb6356e548761cb71629195453fdd20940ddfb81e17b5782ae03e3cb3d96911007658383dbf3b89d9d22aabc842ef2b8f37cc9e2c53c2792daf45f026982d67ca522227337ca01c69ede3b8b798566221dd3ad2bebd019e12bf61a6d3daedf238801fab1f7e20b7c5bec3432cdfa7c57d198bedf995836872802c5f2a2077a6925420cb4b20f158cc2b51fa2de3b2e8445795229e76f6f423dacfd5a98110fde60dd171f248c2f37107164e93f003671d721"}}, {0x5a, &(0x7f0000000200)=@string={0x5a, 0x3, "57fcc413dd92b166d7beaacf259dda128328431d0e1b35a92278cdaadb4e80316527376fb0eba9e7fc9fdd144d80be517d912b1dc9fb4a47762f3e8b071e87ecde1f3a12e34c5d8098e63141670f6e30c57d89f9dfe167d5"}}]}) 1.47799407s ago: executing program 2 (id=1553): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x149a82, 0x18) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@multicast, @empty, @void, {@llc={0x4, {@snap={0xab, 0x3, "d79e", "9ee71f", 0x9100, "55e791ff73196509149bbcf5a7821f25f8807f95542e687877f9c6fda97418eb78f40c6e9c1e94912cc0090d5be15947780d95bad6d7272d3b1bff5cc6e47c151143916a90edee8cc193a6029d03736ac6abe1a0c514eb3a8be55d86aac03f9baf129460e16fe46a766d15b9368453f11aaab807"}}}}}}, 0x8b) write$cgroup_int(r0, &(0x7f0000000040)=0x1cc, 0x12) 1.418954971s ago: executing program 2 (id=1554): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=0x0, @ANYBLOB="ad8c3579fffffff2"], 0x20}}, 0x20000010) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x521000) readv(r0, &(0x7f0000000600), 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000400)={r2, 0x5, &(0x7f0000000340)=[0x1, 0x3f4d, 0x1, 0x9, 0xe986], &(0x7f0000000380)=[0x3, 0x81, 0x5, 0xb, 0x8000, 0x85], &(0x7f00000003c0)=[0x2, 0x5, 0x0, 0x7, 0x1, 0xfffc, 0x6, 0xa7]}) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001340)="cb75c73a02d0cf76f049a9e91a3630c9e6cf515b03bf70d20134d1f5bfbaa339b9b931033431640e", 0x28}], 0x1, &(0x7f0000000180)=[{0x20, 0x113, 0x8, "f467000000000000000338"}], 0x20}}], 0x1, 0x85c) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000000c0)={0x0, 0x0, 0xd}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat(r1, &(0x7f0000000440)='./file0\x00', 0x2000, 0x124) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9071, 0xffffffffffffffff, 0x0) setitimer(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.248915547s ago: executing program 2 (id=1558): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000040)=[0x2, 0x800, 0x3, 0x800, 0x6], &(0x7f0000000080)=[0x9, 0x4, 0xfffffc01], 0x16, 0x6, 0x8, &(0x7f00000000c0)=[0xd0, 0x97e, 0x5, 0x401, 0x2, 0x1], &(0x7f0000000100)=[0xffffffff, 0x76, 0x7, 0x7fffffff, 0x81, 0x8001, 0x8, 0x400, 0x2]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000200)={0x0, &(0x7f0000000180)=""/100}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x9, &(0x7f0000000240)=[{}, {}, {}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000300)={r1}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x8, 0x3) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000003c0)={0x0, 0x2}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={r3, 0x38, &(0x7f0000000440)=[@in6={0xa, 0x4e23, 0x9, @remote, 0x10000}, @in6={0xa, 0x4e24, 0xffffff81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}]}, &(0x7f00000004c0)=0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000580)) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r6, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000780)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r10, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r11, 0x800, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x4004) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r9, 0xc01064c7, &(0x7f0000000940)={0x2, 0x0, &(0x7f0000000900)=[0x0, 0x0]}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r9, 0x800442d3, &(0x7f0000000980)={0x0, 0x7f, 0x1, @random="a3074039fb5c"}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f00000009c0)) r12 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000a00), 0x4c00, 0x0) ioctl$TIOCGSOFTCAR(r12, 0x5419, &(0x7f0000000a40)) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000000a80)={0x80}) syz_usb_connect(0x5, 0x401, &(0x7f0000000b40)={{0x12, 0x1, 0x200, 0xd6, 0x6f, 0xcc, 0x10, 0x2357, 0x12e, 0x26ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3ef, 0x1, 0x8, 0xa5, 0x20, 0x4, [{{0x9, 0x4, 0xb6, 0x18, 0xf, 0xff, 0xff, 0xff, 0x7, [@generic={0x38, 0x21, "3079aaa1fe19e3fa44426c50307a4e078e8b65264186e0ba032536eee39fffcf71da6eaba911611490ab798f4800a4c41cb259c09440"}], [{{0x9, 0x5, 0x5, 0x8, 0x0, 0xdc, 0xc, 0x9}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x0, 0x6, 0xd2}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x5, 0x8, 0xf7, [@generic={0x8a, 0x22, "d6a06bf8096d1ee7d5f97205660941edba68a58cc18c9d9d1b258ba67f538ee9e1172319e08b9b5003c08700de25831f5bd403dde854104d4760258aa0ddc6687c5a35cb525b4125dee7aca68894a32cd582f203e1e8f5207f2a341b92c3a3bcd067c3f0f7176179c95da60f0ba17b68100bf2765912ce737d021a2cf1427c864095a772a8fb5eb9"}, @generic={0xf7, 0x6f3f395a30b100a, "bf3c6c6914a770560f6a1dadfbc1cc786125ebaee1ac8083a4a5c918a70130fcf9e3db42caeb017e449b37164dfdfb6d475e92cbdfe83e5fcea47096194ffff76f0ec3f5e25ed14fb5ed6171dd067cc6c5b6c1e87645f78b7340a714e1b7836fe5b2d0c0a3babd3c47e77d6c14920bdf46d6a7d2df8dec4fabbd3ba2e16e7566cf5c5722f63a9062072ee119e91d6e5033f79f40b1c77c34a28043a0635107830b9929b27cbc91b3b5ef8d6c9b99d84d1f060d9bd7a403c965f14ea05e86fd13a8165e2b5c25225d220258a57cd132e5d1da51cb3762242f860865fb63cecd48184ab1b79a1f4bd958cf97713914c47157c463497c"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0xe, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0x8, 0x10, 0x0, [@generic={0x34, 0xe, "a66eac5e7ccbb0c1effc155141a2d4372f19b9aed533fbfb409186d82a12e92bd042714f845e3bdf89af8d27d9466c62068e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9542}]}}, {{0x9, 0x5, 0x4, 0xc, 0x400, 0x6, 0x1, 0x9, [@generic={0x54, 0xa, "1f251c7a8cf2a0f79a78a4339fd2c1a93b2c6d2bae475a7aa5cb7488fde583d261db5860fa1d7ffcad911eaa2e829aa6e948815734c94409321b755d0c8613209f3a80dd8cc3ffc14bab940c7ab65db72a30"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x200, 0x4, 0x7}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x0, 0x9, 0x0, [@generic={0x6c, 0xb, "29e4ecd47df123cf9f4bcf853c1135c0d0757f241cbb75e1296196f8a1036b8255e6e9157d338dd260c66b2003b30b50c3459326919c2651db6c325afdab0111b312882819e38a329cf950045b9d9d45a7317513f3db7ec0125111a06af4373e3271500a1258dc49e664"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x4, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x6}]}}, {{0x9, 0x5, 0x2, 0x3, 0x7ef, 0x5, 0xe, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0xb, 0x0, 0x52, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfb, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x10}]}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0x4, 0x3, 0x4}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x5, 0x3, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf0, 0xfff8}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xd1, 0x6, 0x3}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0xe, 0x7, 0x6, [@generic={0x71, 0x21, "2b7595be7f9231e1a47e3c00f282d8b5fb0e93433ac2bd643048b9255f4dfa9b205b3c6dd61b2d638631e1d9661a5daa58f57f5af8f9a6f8fee4b8d9d809cc88dfc3836aa533abaf65a893f5cf0c6832e44fb94d73efcd99fa4113ef95b976c8e2c9875d7d49d21b19b777da4546b7"}]}}]}}]}}]}}, &(0x7f0000001140)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x110, 0x2, 0x0, 0x81, 0xff, 0x4}, 0x5, &(0x7f0000000fc0)={0x5, 0xf, 0x5}, 0x3, [{0x93, &(0x7f0000001000)=@string={0x93, 0x3, "3ed2d6a2d6fae95f6e68ebc3bbc7fe72508a3a634f1e9f8bd41f431fd47da6f5a0a0f628cbcd459b4959766653238017a79d99f899c47b8ec950b706a38f22f6efad56fc25894f11159fde452091b20fc5d54615b8756baa6e8d2d08eaf4ae53aa5be0176fb7a5d3d679c8788aa35a39d3a86cac0d0cc6878082d065feb68306a274890d8c9c7ea416417b28a92a8fea32"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x40a}}]}) ioctl$HIDIOCGRAWINFO(r9, 0x80084803, &(0x7f0000001180)=""/4) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000011c0), &(0x7f0000001200)=0x8) 837.23529ms ago: executing program 0 (id=1565): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2084}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x4}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x8}]}}}]}, 0x44}}, 0x0) 749.567048ms ago: executing program 0 (id=1568): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="2e0000006400818a04fb7fec598f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd", 0x2e}], 0x1}, 0x800) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffde0800450000380000000000019078ac1e0001ac1414aa0b009078030000004500000000000000002f0000ac14140ae0000001040065580000ffff"], 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, 0xee01, &(0x7f0000000000)={0x5, 0xf6, 0x0, 0x4}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',@\x00\x00', @ANYRES16=r3, @ANYBLOB="080028bd7000fcdbdf251b00000008000300", @ANYRES32=r4, @ANYBLOB="10002e800c0004000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040804}, 0x8000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)='K', 0x1, 0x44040011, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103102, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000001000000000012614f7368000800070000001800018014000200766574683000"/46], 0x34}}, 0x0) 748.911519ms ago: executing program 5 (id=1569): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127c, &(0x7f0000000240)={0x0, 0x1000000}) syz_open_dev$sg(&(0x7f0000000080), 0x1008000004, 0x111442) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000080008000022f9bb177b214b1004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000", @ANYRES16], 0x125) 699.779919ms ago: executing program 5 (id=1570): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0xaece, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000020006600000008000300", @ANYRES32=r7, @ANYBLOB="080026006c09000008009f00010000000800b700950000"], 0x34}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000005200010000000000000000001c000015140001"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040014) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x48000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) 699.135949ms ago: executing program 0 (id=1572): timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x80000000, 0x719627e6, 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x40, 0x60, 0x6, 0x3}}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0x2b, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) (async) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x80000000, 0x719627e6, 0x1}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, 0x40, 0x60, 0x6, 0x3}}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x4000000, 0x2000, 0xdc0, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0x2b, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) (async) 430.800157ms ago: executing program 5 (id=1574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 430.211692ms ago: executing program 5 (id=1575): r0 = syz_io_uring_setup(0x5cd7, &(0x7f0000000000)={0x0, 0x5e9d, 0x404, 0x1, 0xd4}, &(0x7f0000000080), &(0x7f0000000100)) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0xa, 0x58565559, 0x3, 0xc, [{0x6, 0x4}, {0xdc5, 0x5}, {0x0, 0x5}, {0x8, 0x10000}, {0x1000, 0xcf}, {0x5, 0x6}, {0x1, 0x80000005}, {0x8003, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000140)={&(0x7f0000001000)={[{&(0x7f00000001c0)="d22e4060456dbb471fe3de03814edfd5a090b1182de84242e9cd6fcbeeb1b0b825603becf0bc7b2f8eaa7c62700a363ea9898ebd1fb3655d2735b840f91c414af69f150bef703cab56240020dc82cd2559b4a45dba2d0a44eed2045fa51bff80", 0x60}]}, 0x1}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000240)={0xa, r2, 0x2}) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x11099}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) syz_io_uring_setup(0x5cd7, &(0x7f0000000000)={0x0, 0x5e9d, 0x404, 0x1, 0xd4}, &(0x7f0000000080), &(0x7f0000000100)) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0xa, 0x58565559, 0x3, 0xc, [{0x6, 0x4}, {0xdc5, 0x5}, {0x0, 0x5}, {0x8, 0x10000}, {0x1000, 0xcf}, {0x5, 0x6}, {0x1, 0x80000005}, {0x8003, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) (async) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000140)={&(0x7f0000001000)={[{&(0x7f00000001c0)="d22e4060456dbb471fe3de03814edfd5a090b1182de84242e9cd6fcbeeb1b0b825603becf0bc7b2f8eaa7c62700a363ea9898ebd1fb3655d2735b840f91c414af69f150bef703cab56240020dc82cd2559b4a45dba2d0a44eed2045fa51bff80", 0x60}]}, 0x1}, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000240)={0xa, r2, 0x2}) (async) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000280)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x11099}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) 360.656971ms ago: executing program 5 (id=1576): socket$l2tp(0x2, 0x2, 0x73) userfaultfd(0x801) (async) r0 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) close_range(r0, r0, 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 358.562149ms ago: executing program 1 (id=1577): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000002c0)={0xfffffffa}, 0x4) sendto$inet(r0, &(0x7f0000000100)="ab", 0xffe0, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 358.413836ms ago: executing program 5 (id=1578): r0 = syz_open_dev$media(&(0x7f0000000000), 0x5, 0x2000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) poll(&(0x7f0000000780)=[{r1, 0x8000}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e24, 0x5, @remote, 0x1}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) poll(&(0x7f0000000100)=[{r2, 0x3}], 0x1, 0x5) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @local, 0xf}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x40, 0x0, 0x4, 0x9b4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000080)=r4, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) 358.279611ms ago: executing program 1 (id=1579): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001240)={0xf, {"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", 0x1000}}, 0x1006) 240.031395ms ago: executing program 1 (id=1580): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000280)="f0b66fb9ec", 0x5}, {&(0x7f00000003c0)="12bbaa9f1ff4b91bc22e17582347457794d001a84995db40b1eed799", 0x1c}, {0x0}], 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000001100)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x4500, 0x0, 0x8}}}}}}, 0x2e) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) r6 = syz_io_uring_setup(0x288b, &(0x7f0000000080)={0x0, 0x0, 0x13181, 0x42, 0x2b2}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x140a, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r6, 0x0, 0x0}) io_uring_enter(r6, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x397000, 0x0) r9 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r10 = socket$inet(0x2, 0x4000000000000001, 0x23) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x1d, 0x0, &(0x7f0000000380)) keyctl$restrict_keyring(0xa, r9, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 80.078ms ago: executing program 1 (id=1581): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@initdev, @empty}, &(0x7f0000000180)=0x8) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x3}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) (async, rerun: 64) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0xe, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c0d4, 0x0, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) execve(0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r7 = dup3(r6, 0xffffffffffffffff, 0x80000) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x9, 0x2, 0xf}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x4000001, 0x0, 0x0, 0x1, 0x1a}}, &(0x7f0000000240)={0x0, 0x20, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 79.583649ms ago: executing program 2 (id=1582): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2b, 0x0, {{}, {}, {0x1a, 0x17, {0x0, 0xfffffffd, @l2={'eth', 0x3a, 'gre0\x00'}}}}}, 0x34}}, 0x8044) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r3, 0x4147, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 704.473µs ago: executing program 1 (id=1583): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x800004) set_mempolicy(0x8000, &(0x7f0000000080)=0x6, 0x401) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, r1, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xf}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 1 (id=1584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x452b40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x2a, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r5, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r9, &(0x7f0000000000), 0xe) listen(r9, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r11, 0x26, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@bridge_setlink={0x4c4, 0x13, 0x100, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r5, 0x1000, 0x1000}, [@IFLA_WEIGHT={0x8, 0xf, 0x400}, @IFLA_VF_PORTS={0x1cc, 0x18, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "91a53e35bccf3da2a01b41df67dc6b93"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b321e364ddf7ed0c252c36062892a1a0"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0a9c0605db11fa06e2cc53ac7a618362"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3371462ed3199fd3e0d07421bac0d38d"}, @IFLA_PORT_PROFILE={0x8, 0x2, '%&%\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "449c2e549b14cf77b8c21131c1c2be19"}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '\n!\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "aaec93d614809bc3001d94d221a79bd8"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b841830d399b84432aa558437f0730df"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a744bad82d6ff2da401abce1fdc13664"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b7d9297976ebb4a496a7f40ba9882794"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9da45fbd899006d855599a6eeced00ed"}, @IFLA_PORT_PROFILE={0xf, 0x2, '/,)].}}X\',\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d886404310d67c5cfa13678a6d780709"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f73089e2d45ca35adb8a291c16a234f7"}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_1\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f0e352e26707ef2de03bd3781a26e6cc"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a2905cc133e028407b8ce0feff86b077"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "62b7fb0a80c6da815344f74636f8103c"}]}]}, @IFLA_VF_PORTS={0x258, 0x18, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "645c8641cb8f8cb6d015ef4ecd1f7fb1"}, @IFLA_PORT_PROFILE={0x6, 0x2, '*\x00'}, @IFLA_PORT_PROFILE={0xb, 0x2, 'ip6tnl\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6cd0f1831d1da02efee9735f3fe5fdc0"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "12f1e28b106e3bb484fa9d4b5490b2fb"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "113d80db3d4cf0240e816e1bbb8e08f2"}, @IFLA_PORT_PROFILE={0xf, 0x2, 'syzkaller0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "83e9b629f70755ebad7f3f6b7cd6e109"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "65040ca33b94db0d6e13e595aac6c5ba"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "42c4e4533c5ca15e6235c3554a0499c0"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x73}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8e6b99f4b664a33ceb62d86398245d8b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4941e9235fd878b0c7243e95a5eea425"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "6f9e6a0b8e338228fee5374bd21b84bc"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c6da82ccf3efa3c274e0d9306a825e54"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "08d331f046135132f41f31c4d91fa812"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_PROFILE={0x10, 0x2, 'CONNSECMARK\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ac6cc83e3965b32332f3a1bc26aa539d"}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x1a, 0x2, '#*_\',\xe4{}[\'!\x1e$\xf5&^.+-.&\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "630bedb4a1721657c948bcd16526cb9f"}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b34b4458f7c44c480a6ced8b3d299a02"}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "142ca65d87c6f0f1ae02d46a7b393b05"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, 'macvlan0\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '^\b\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_PROFILE={0xe, 0x2, 'IDLETIMER\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffedd}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r11}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_bond\x00'}, {0x14, 0x35, 'ip6erspan0\x00'}, {0x14, 0x35, 'veth1_vlan\x00'}, {0x14, 0x35, 'team_slave_1\x00'}, {0x14, 0x35, 'team_slave_0\x00'}]}]}, 0x4c4}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0x4, 0x4, 0x3d0, 0xffffffff, 0x1c0, 0x0, 0x1c0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @remote, [], [], 'bridge_slave_1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00', {0x6}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="502000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 0s ago: executing program 2 (id=1585): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x20000801) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x60046000) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) kernel console output (not intermixed with test programs): eleased netlink socket, switching to perfect channel medium [ 84.679626][ T5947] block nbd2: Receive control failed (result -32) [ 84.680953][ T67] block nbd2: Dead connection, failed to find a fallback [ 84.685184][ T67] block nbd2: shutting down sockets [ 84.687116][ T67] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.690316][ T67] Buffer I/O error on dev nbd2, logical block 0, async page read [ 84.693782][ T6180] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.696843][ T6180] Buffer I/O error on dev nbd2, logical block 0, async page read [ 84.699525][ T6180] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.704192][ T6180] Buffer I/O error on dev nbd2, logical block 0, async page read [ 84.706836][ T6180] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.709736][ T6180] Buffer I/O error on dev nbd2, logical block 0, async page read [ 84.712626][ T6180] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.715586][ T6180] Buffer I/O error on dev nbd2, logical block 0, async page read [ 84.718281][ T6180] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.721301][ T6180] Buffer I/O error on dev nbd2, logical block 0, async page read [ 84.724139][ T6180] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.727066][ T6180] Buffer I/O error on dev nbd2, logical block 0, async page read [ 84.730626][ T6180] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.735135][ T6180] Buffer I/O error on dev nbd2, logical block 0, async page read [ 84.739686][ T6180] ldm_validate_partition_table(): Disk read failed. [ 84.744911][ T6180] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.748853][ T6180] Buffer I/O error on dev nbd2, logical block 0, async page read [ 84.752992][ T6180] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.756721][ T6180] Buffer I/O error on dev nbd2, logical block 0, async page read [ 84.760590][ T6180] Dev nbd2: unable to read RDB block 0 [ 84.763856][ T6180] nbd2: unable to read partition table [ 84.769889][ T7720] ldm_validate_partition_table(): Disk read failed. [ 84.774648][ T7720] Dev nbd2: unable to read RDB block 0 [ 84.777557][ T7720] nbd2: unable to read partition table [ 84.784284][ T6180] ldm_validate_partition_table(): Disk read failed. [ 84.787586][ T6180] Dev nbd2: unable to read RDB block 0 [ 84.790335][ T6180] nbd2: unable to read partition table [ 84.829963][ T7735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.447'. [ 84.848423][ T7737] xt_cluster: node mask cannot exceed total number of nodes [ 84.851304][ T7739] 9pnet_fd: p9_fd_create_unix (7739): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 84.888336][ T7745] netlink: 'syz.0.450': attribute type 9 has an invalid length. [ 84.927526][ T7745] netlink: 'syz.0.450': attribute type 7 has an invalid length. [ 84.930211][ T7745] netlink: 'syz.0.450': attribute type 8 has an invalid length. [ 84.938402][ T7745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'. [ 84.944327][ T7745] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 85.148454][ T7763] binder: BINDER_SET_CONTEXT_MGR already set [ 85.151378][ T7763] binder: 7762:7763 ioctl 4018620d 200000000040 returned -16 [ 85.155214][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 85.355699][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 85.605586][ T10] hid (null): invalid report_size 1423382088 [ 85.616201][ T10] hid-generic 0005:0003:0275.0002: unexpected long global item [ 85.619620][ T10] hid-generic 0005:0003:0275.0002: probe with driver hid-generic failed with error -22 [ 85.748668][ T7812] serio: Serial port ptm0 [ 86.014431][ T7825] nvme_fabrics: missing parameter 'transport=%s' [ 86.017290][ T7825] nvme_fabrics: missing parameter 'nqn=%s' [ 86.240477][ T7846] team0: entered allmulticast mode [ 86.242571][ T7846] team_slave_0: entered allmulticast mode [ 86.244944][ T7846] team_slave_1: entered allmulticast mode [ 86.297643][ T5947] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 86.404147][ T7859] support for the xor transformation has been removed. [ 86.435702][ T7860] netlink: 'syz.1.486': attribute type 5 has an invalid length. [ 88.432055][ T5947] Bluetooth: hci1: command 0x0406 tx timeout [ 88.432404][ T7849] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 89.297619][ T7849] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 89.306325][ T7849] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.309239][ T7849] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.315628][ T7849] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.323613][ T7849] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.368223][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 89.368240][ T40] audit: type=1400 audit(2000000030.213:482): avc: denied { append } for pid=7874 comm="syz.4.490" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 89.396393][ T7878] netlink: 14 bytes leftover after parsing attributes in process `syz.0.491'. [ 89.419333][ T7882] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.492' sets config #1 [ 89.424321][ T40] audit: type=1400 audit(2000000030.273:483): avc: denied { associate } for pid=7879 comm="syz.1.492" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.434051][ T7882] netfs: Couldn't get user pages (rc=-14) [ 89.434221][ T40] audit: type=1400 audit(2000000030.273:484): avc: denied { map } for pid=7879 comm="syz.1.492" path="/106/file0/bus" dev="9p" ino=36701625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.449794][ T40] audit: type=1400 audit(2000000030.273:485): avc: denied { execmem } for pid=7879 comm="syz.1.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 89.459567][ T40] audit: type=1400 audit(2000000030.273:486): avc: denied { execute } for pid=7879 comm="syz.1.492" path="/106/file0/bus" dev="9p" ino=36701625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.469117][ T40] audit: type=1400 audit(2000000030.283:487): avc: denied { write } for pid=7883 comm="syz.4.494" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 89.525669][ T7891] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 89.545132][ T40] audit: type=1400 audit(2000000030.393:488): avc: denied { create } for pid=7892 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.553016][ T40] audit: type=1400 audit(2000000030.393:489): avc: denied { connect } for pid=7892 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 89.620018][ T7898] 9pnet_rdma: rdma_create_trans (7898): problem binding to privport: 13 [ 89.744773][ T7915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.789971][ T7921] netlink: 'syz.4.505': attribute type 1 has an invalid length. [ 89.819386][ T40] audit: type=1400 audit(2000000030.653:490): avc: denied { setopt } for pid=7923 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.823417][ T7921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.846288][ T40] audit: type=1400 audit(2000000030.693:491): avc: denied { create } for pid=7919 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 89.857511][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'. [ 89.862003][ T7935] ceph: Path missing in source [ 89.867134][ T7934] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.870245][ T7934] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.873470][ T7934] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.876467][ T7934] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.887717][ T7934] fuse: Bad value for 'user_id' [ 89.889313][ T7934] fuse: Bad value for 'user_id' [ 90.132211][ T54] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 90.243560][ T7978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.514'. [ 90.293448][ T54] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.296934][ T54] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 90.299787][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.304532][ T54] usb 9-1: config 0 descriptor?? [ 90.381917][ T6021] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 90.509099][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.512054][ T5947] Bluetooth: hci1: command 0x0406 tx timeout [ 90.514377][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.517651][ T54] usb 9-1: USB disconnect, device number 6 [ 90.542994][ T6021] usb 6-1: Using ep0 maxpacket: 8 [ 90.548564][ T6021] usb 6-1: config 1 interface 0 altsetting 248 bulk endpoint 0x3 has invalid maxpacket 16 [ 90.553128][ T6021] usb 6-1: config 1 interface 0 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.558477][ T6021] usb 6-1: config 1 interface 0 has no altsetting 0 [ 90.568979][ T6021] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.579795][ T6021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.585113][ T6021] usb 6-1: Product: 㮲䩷↜洚ਪ [ 90.587484][ T6021] usb 6-1: Manufacturer:  [ 90.589381][ T6021] usb 6-1: SerialNumber: syz [ 90.597163][ T7968] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 90.630479][ T8002] vim2m vim2m.0: vidioc_s_fmt queue busy [ 90.774916][ T8009] @: renamed from bond_slave_0 (while UP) [ 90.813753][ T8012] tmpfs: Unknown parameter 'usrquotaNL' [ 90.952890][ T6021] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 90.962827][ T6021] usb 6-1: USB disconnect, device number 9 [ 91.003941][ T8032] netlink: 'syz.2.528': attribute type 1 has an invalid length. [ 91.006469][ T8032] netlink: 172 bytes leftover after parsing attributes in process `syz.2.528'. [ 91.312051][ T5947] Bluetooth: hci3: command 0x041b tx timeout [ 91.445233][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.448021][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.451098][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.454198][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.457292][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.460710][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.464571][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.468300][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.472302][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.476083][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.479339][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.485994][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.489426][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.492414][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.495175][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.497787][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.500322][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.503304][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.507054][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.510478][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.520561][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.524212][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.526919][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.529762][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.533397][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.536074][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.538849][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.541787][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.545189][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.547801][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.550438][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.554022][ T8073] overlay: filesystem on ./bus not supported as upperdir [ 91.660012][ T8092] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8208 sclass=netlink_xfrm_socket pid=8092 comm=syz.0.544 [ 91.660492][ T8093] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8208 sclass=netlink_xfrm_socket pid=8093 comm=syz.0.544 [ 91.693135][ T8095] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8095 comm=syz.0.545 [ 91.966118][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 91.985283][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'. [ 92.040780][ T8118] netlink: 'syz.0.550': attribute type 5 has an invalid length. [ 92.153613][ T8127] netlink: 76 bytes leftover after parsing attributes in process `syz.4.554'. [ 92.200748][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.555'. [ 92.384062][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.426168][ T8135] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 92.454493][ T8142] netlink: 164 bytes leftover after parsing attributes in process `syz.4.558'. [ 92.457770][ T8142] netlink: 164 bytes leftover after parsing attributes in process `syz.4.558'. [ 93.054497][ T8171] pim6reg1: entered promiscuous mode [ 93.056196][ T8171] pim6reg1: entered allmulticast mode [ 93.392597][ T5947] Bluetooth: hci3: command 0x041b tx timeout [ 93.485754][ T8192] xt_hashlimit: size too large, truncated to 1048576 [ 93.492399][ T8192] syz.4.572: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 93.497962][ T8192] CPU: 0 UID: 0 PID: 8192 Comm: syz.4.572 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 93.497978][ T8192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 93.497985][ T8192] Call Trace: [ 93.497989][ T8192] [ 93.497994][ T8192] dump_stack_lvl+0x16c/0x1f0 [ 93.498025][ T8192] warn_alloc+0x248/0x3a0 [ 93.498041][ T8192] ? __pfx_warn_alloc+0x10/0x10 [ 93.498083][ T8192] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 93.498106][ T8192] ? __vmalloc_node_noprof+0xad/0xf0 [ 93.498120][ T8192] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 93.498137][ T8192] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 93.498152][ T8192] ? rcu_is_watching+0x12/0xc0 [ 93.498168][ T8192] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 93.498180][ T8192] ? __alloc_pages_noprof+0xb/0x1b0 [ 93.498194][ T8192] ? ___kmalloc_large_node+0x84/0x1e0 [ 93.498209][ T8192] __kvmalloc_node_noprof+0x30a/0x620 [ 93.498222][ T8192] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 93.498237][ T8192] ? net_generic+0xea/0x2a0 [ 93.498248][ T8192] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 93.498265][ T8192] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 93.498279][ T8192] hashlimit_mt_check_common+0x8bb/0x1460 [ 93.498298][ T8192] hashlimit_mt_check+0x71/0x90 [ 93.498311][ T8192] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 93.498325][ T8192] xt_check_match+0x283/0xa50 [ 93.498338][ T8192] ? __schedule+0x1fe2/0x5de0 [ 93.498354][ T8192] ? __pfx_xt_check_match+0x10/0x10 [ 93.498369][ T8192] ? xt_find_target+0x1f2/0x290 [ 93.498383][ T8192] ? xt_find_match+0x1f6/0x290 [ 93.498399][ T8192] find_check_entry.constprop.0+0x34e/0xa20 [ 93.498417][ T8192] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 93.498436][ T8192] ? kasan_quarantine_put+0x10a/0x240 [ 93.498449][ T8192] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.498468][ T8192] ? kfree+0x2b4/0x4d0 [ 93.498479][ T8192] ? translate_table+0xc0e/0x17b0 [ 93.498494][ T8192] translate_table+0xd0b/0x17b0 [ 93.498518][ T8192] ? __pfx_translate_table+0x10/0x10 [ 93.498531][ T8192] ? xt_alloc_table_info+0x3e/0xa0 [ 93.498547][ T8192] do_ip6t_set_ctl+0x570/0xb00 [ 93.498561][ T8192] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 93.498577][ T8192] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 93.498592][ T8192] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 93.498617][ T8192] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 93.498630][ T8192] nf_setsockopt+0x8d/0xf0 [ 93.498643][ T8192] ipv6_setsockopt+0x135/0x170 [ 93.498657][ T8192] rawv6_setsockopt+0xc2/0x510 [ 93.498669][ T8192] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 93.498681][ T8192] ? selinux_socket_setsockopt+0x6a/0x80 [ 93.498694][ T8192] ? sock_common_setsockopt+0x2e/0xf0 [ 93.498706][ T8192] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 93.498717][ T8192] do_sock_setsockopt+0x221/0x470 [ 93.498728][ T8192] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 93.498747][ T8192] __sys_setsockopt+0x1a0/0x230 [ 93.498765][ T8192] __x64_sys_setsockopt+0xbd/0x160 [ 93.498779][ T8192] ? do_syscall_64+0x91/0x4c0 [ 93.498795][ T8192] ? lockdep_hardirqs_on+0x7c/0x110 [ 93.498810][ T8192] do_syscall_64+0xcd/0x4c0 [ 93.498828][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.498839][ T8192] RIP: 0033:0x7f025e18e929 [ 93.498848][ T8192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.498859][ T8192] RSP: 002b:00007f025ef59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 93.498869][ T8192] RAX: ffffffffffffffda RBX: 00007f025e3b5fa0 RCX: 00007f025e18e929 [ 93.498876][ T8192] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 93.498882][ T8192] RBP: 00007f025e210b39 R08: 0000000000000588 R09: 0000000000000000 [ 93.498888][ T8192] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 93.498895][ T8192] R13: 0000000000000000 R14: 00007f025e3b5fa0 R15: 00007ffcbf62ac88 [ 93.498908][ T8192] [ 93.498912][ T8192] Mem-Info: [ 93.624887][ T8192] active_anon:19227 inactive_anon:0 isolated_anon:0 [ 93.624887][ T8192] active_file:13589 inactive_file:40609 isolated_file:0 [ 93.624887][ T8192] unevictable:1768 dirty:29 writeback:0 [ 93.624887][ T8192] slab_reclaimable:11830 slab_unreclaimable:73009 [ 93.624887][ T8192] mapped:24567 shmem:11629 pagetables:1270 [ 93.624887][ T8192] sec_pagetables:305 bounce:0 [ 93.624887][ T8192] kernel_misc_reclaimable:0 [ 93.624887][ T8192] free:434859 free_pcp:17831 free_cma:0 [ 93.642443][ T8192] Node 0 active_anon:76824kB inactive_anon:0kB active_file:54356kB inactive_file:162232kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98388kB dirty:116kB writeback:0kB shmem:42984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13072kB pagetables:4864kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB [ 93.655482][ T8192] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 93.665132][ T8192] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 93.665609][ T8197] geneve1: entered allmulticast mode [ 93.673888][ T8192] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 93.673934][ T8192] Node 0 DMA32 free:122124kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:76824kB inactive_anon:0kB active_file:54356kB inactive_file:162232kB unevictable:3536kB writepending:116kB present:2080628kB managed:1264716kB mlocked:0kB bounce:0kB free_pcp:53244kB local_pcp:7192kB free_cma:0kB [ 93.673965][ T8192] lowmem_reserve[]: 0 0 0 0 0 [ 93.673986][ T8192] Node 1 Normal free:1603536kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781948kB mlocked:0kB bounce:0kB free_pcp:16452kB local_pcp:3404kB free_cma:0kB [ 93.699420][ T8192] lowmem_reserve[]: 0 0 0 0 0 [ 93.700993][ T8192] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 93.705592][ T8192] Node 0 DMA32: 614*4kB (UME) 645*8kB (UM) 340*16kB (UME) 200*32kB (UME) 64*64kB (UME) 22*128kB (UME) 34*256kB (UME) 14*512kB (UME) 8*1024kB (M) 13*2048kB (UME) 11*4096kB (UM) = 122112kB [ 93.711420][ T8192] Node 1 Normal: 38*4kB (UME) 39*8kB (UME) 24*16kB (UME) 24*32kB (UME) 16*64kB (UE) 13*128kB (UME) 9*256kB (UE) 5*512kB (UM) 3*1024kB (UE) 3*2048kB (UM) 387*4096kB (M) = 1603536kB [ 93.718000][ T8192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 93.721040][ T8192] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 93.724096][ T8192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 93.727022][ T8192] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 93.729863][ T8192] 65824 total pagecache pages [ 93.731395][ T8192] 0 pages in swap cache [ 93.733427][ T8192] Free swap = 124996kB [ 93.734748][ T8192] Total swap = 124996kB [ 93.736056][ T8192] 1048443 pages RAM [ 93.737262][ T8192] 0 pages HighMem/MovableOnly [ 93.738744][ T8192] 282937 pages reserved [ 93.740043][ T8192] 0 pages cma reserved [ 93.799345][ T8203] could not allocate digest TFM handle sha1-asm [ 93.904322][ T8217] netlink: 'syz.1.577': attribute type 21 has an invalid length. [ 93.907573][ T8217] netlink: 'syz.1.577': attribute type 6 has an invalid length. [ 94.668809][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 94.668820][ T40] audit: type=1400 audit(2000000035.513:522): avc: denied { ioctl } for pid=8275 comm="syz.1.587" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 95.355446][ T29] IPVS: starting estimator thread 0... [ 95.413534][ T40] audit: type=1400 audit(2000000036.263:523): avc: denied { bind } for pid=8295 comm="syz.0.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.420366][ T8296] __nla_validate_parse: 3 callbacks suppressed [ 95.420377][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 95.442131][ T8294] IPVS: using max 42 ests per chain, 100800 per kthread [ 95.482584][ T5947] Bluetooth: hci3: command 0x041b tx timeout [ 95.778436][ T8310] netem: incorrect ge model size [ 95.780247][ T8310] netem: change failed [ 95.821526][ T8312] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.824776][ T40] audit: type=1400 audit(2000000036.673:524): avc: denied { ioctl } for pid=8311 comm="syz.1.597" path="socket:[21147]" dev="sockfs" ino=21147 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.862716][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 95.866024][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 95.894928][ T40] audit: type=1400 audit(2000000036.743:525): avc: denied { map } for pid=8316 comm="syz.1.598" path="/dev/vhost-vsock" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 95.927506][ T40] audit: type=1400 audit(2000000036.773:526): avc: denied { create } for pid=8323 comm="syz.4.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 95.934730][ T40] audit: type=1400 audit(2000000036.783:527): avc: denied { getopt } for pid=8323 comm="syz.4.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 95.945010][ T8325] bond0: entered promiscuous mode [ 95.946664][ T8325] bond_slave_0: entered promiscuous mode [ 95.948516][ T8325] bond_slave_1: entered promiscuous mode [ 95.951213][ T8325] bond0: left promiscuous mode [ 95.952842][ T8325] bond_slave_0: left promiscuous mode [ 95.954959][ T8325] bond_slave_1: left promiscuous mode [ 95.969527][ T40] audit: type=1400 audit(2000000036.813:528): avc: denied { connect } for pid=8331 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.969557][ T40] audit: type=1400 audit(2000000036.813:529): avc: denied { accept } for pid=8331 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.174976][ T40] audit: type=1326 audit(2000000037.023:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.0.614" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa6b18e929 code=0x0 [ 96.226607][ T40] audit: type=1326 audit(2000000037.073:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.0.614" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa6b18e929 code=0x0 [ 96.342200][ T29] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 96.457442][ T8379] tipc: Started in network mode [ 96.459148][ T8379] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 96.462930][ T8379] tipc: Enabling of bearer rejected, failed to enable media [ 96.465690][ T8380] tipc: Enabling of bearer rejected, failed to enable media [ 96.471993][ T29] usb 6-1: device descriptor read/64, error -71 [ 96.475553][ T8379] overlayfs: invalid redirect ((null)) [ 96.712020][ T29] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 96.821459][ T8387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.842769][ T29] usb 6-1: device descriptor read/64, error -71 [ 96.952465][ T29] usb usb6-port1: attempt power cycle [ 96.956841][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 97.292039][ T29] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 97.312444][ T29] usb 6-1: device descriptor read/8, error -71 [ 97.552049][ T5950] Bluetooth: hci3: command 0x041b tx timeout [ 97.562146][ T29] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 97.583723][ T29] usb 6-1: device descriptor read/8, error -71 [ 97.693698][ T29] usb usb6-port1: unable to enumerate USB device [ 97.961775][ T8430] XFS (nbd4): no-recovery mounts must be read-only. [ 98.180031][ T8453] kvm: emulating exchange as write [ 98.440109][ T8475] netlink: 64 bytes leftover after parsing attributes in process `syz.2.641'. [ 98.548338][ T8488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.645'. [ 98.732103][ T54] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 98.891966][ T54] usb 7-1: Using ep0 maxpacket: 32 [ 98.896664][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.900568][ T54] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.904900][ T54] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 98.908862][ T54] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 98.913116][ T54] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 98.918257][ T54] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 98.922169][ T54] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.927086][ T54] usb 7-1: config 0 descriptor?? [ 99.131323][ T54] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 99.162971][ T8514] tmpfs: Unknown parameter '' [ 99.404114][ T8541] netlink: 64 bytes leftover after parsing attributes in process `syz.1.663'. [ 99.438958][ T8545] overlay: Unknown parameter 'euid<00000000000000060929' [ 99.499731][ T8549] overlayfs: failed to clone upperpath [ 99.633132][ T5947] Bluetooth: hci3: command 0x041b tx timeout [ 99.718493][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 99.718504][ T40] audit: type=1400 audit(2000000040.563:546): avc: denied { write } for pid=8557 comm="syz.1.668" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.722748][ T8558] loop6: detected capacity change from 0 to 524287999 [ 99.834345][ T40] audit: type=1400 audit(2000000040.683:547): avc: denied { read append open } for pid=8565 comm="syz.4.670" path="/106/file0/blkio.throttle.io_service_bytes_recursive" dev="9p" ino=36701627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.955892][ T40] audit: type=1400 audit(2000000040.803:548): avc: denied { write } for pid=8565 comm="syz.4.670" name="blkio.throttle.io_service_bytes_recursive" dev="9p" ino=36701627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.377984][ T8571] overlay: filesystem on ./bus is read-only [ 100.378154][ T40] audit: type=1400 audit(2000000041.223:549): avc: denied { mounton } for pid=8570 comm="syz.0.671" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 100.429195][ T40] audit: type=1400 audit(2000000041.273:550): avc: denied { mount } for pid=8574 comm="syz.1.674" name="/" dev="ramfs" ino=22262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 100.432675][ T8577] tmpfs: User quota block hardlimit too large. [ 100.435358][ T8576] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 100.435388][ T8576] overlayfs: failed to set xattr on upper [ 100.435392][ T8576] overlayfs: ...falling back to redirect_dir=nofollow. [ 100.435396][ T8576] overlayfs: ...falling back to metacopy=off. [ 100.435400][ T8576] overlayfs: ...falling back to index=off. [ 100.435404][ T8576] overlayfs: ...falling back to uuid=null. [ 100.436622][ T40] audit: type=1400 audit(2000000041.273:551): avc: denied { mounton } for pid=8574 comm="syz.1.674" path="/149/file0/bus" dev="ramfs" ino=22265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 100.486604][ T40] audit: type=1400 audit(2000000041.333:552): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 100.544900][ T8587] netlink: 'syz.1.676': attribute type 11 has an invalid length. [ 100.548159][ T8587] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.676'. [ 100.718463][ T40] audit: type=1400 audit(2000000041.563:553): avc: denied { map } for pid=8597 comm="syz.4.679" path="socket:[24578]" dev="sockfs" ino=24578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.725764][ T40] audit: type=1400 audit(2000000041.563:554): avc: denied { read accept } for pid=8597 comm="syz.4.679" path="socket:[24578]" dev="sockfs" ino=24578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.852919][ T8608] kernel profiling enabled (shift: 63) [ 100.855595][ T8608] profiling shift: 63 too large [ 100.950084][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'. [ 100.981663][ T40] audit: type=1400 audit(2000000041.823:555): avc: denied { ioctl } for pid=8618 comm="syz.4.685" path="socket:[23665]" dev="sockfs" ino=23665 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 101.117074][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 101.281742][ T8644] xt_hashlimit: size too large, truncated to 1048576 [ 101.496721][ T54] usb 7-1: USB disconnect, device number 4 [ 101.500547][ T54] usblp0: removed [ 101.835386][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'. [ 101.872033][ T5947] Bluetooth: hci3: command 0x041b tx timeout [ 101.914462][ T8664] kvm: pic: non byte write [ 102.036189][ T8675] netlink: 96 bytes leftover after parsing attributes in process `syz.0.701'. [ 102.084731][ T8683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8683 comm=syz.0.703 [ 102.106818][ T8686] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.146876][ T8690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.706'. [ 102.168846][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 102.171806][ T8690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.706'. [ 102.174953][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 102.185330][ T8693] netlink: 'syz.0.707': attribute type 4 has an invalid length. [ 102.187780][ T8693] netlink: 152 bytes leftover after parsing attributes in process `syz.0.707'. [ 102.194701][ T8693] : renamed from bond0 (while UP) [ 102.279718][ T8695] tmpfs: Cannot change global quota limit on remount [ 102.304767][ T8708] ptrace attach of "/syz-executor exec"[8709] was attempted by "/syz-executor exec"[8708] [ 102.322025][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 102.329223][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.334017][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.337723][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 102.343812][ T9] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 102.347114][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.382192][ T9] usb 9-1: config 0 descriptor?? [ 102.830969][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.0003/input/input14 [ 102.971008][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:0458:5011.0003/input/input15 [ 103.044700][ T9] kye 0003:0458:5011.0003: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 103.081067][ T8773] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 103.083219][ T8773] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.087768][ T8773] vhci_hcd vhci_hcd.0: Device attached [ 103.091886][ T8773] sctp: [Deprecated]: syz.4.699 (pid 8773) Use of int in maxseg socket option. [ 103.091886][ T8773] Use struct sctp_assoc_value instead [ 103.099053][ T8773] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 103.101227][ T8773] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.105219][ T8773] vhci_hcd vhci_hcd.0: Device attached [ 103.332120][ T6021] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 103.479796][ T8794] syz.2.725: attempt to access beyond end of device [ 103.479796][ T8794] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 103.484747][ T8794] EXT4-fs (nbd2): unable to read superblock [ 103.524726][ T61] Bluetooth: Error in BCSP hdr checksum [ 103.782226][ T12] Bluetooth: Error in BCSP hdr checksum [ 103.828933][ T8805] mmap: syz.2.728 (8805) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.945015][ C3] kye 0003:0458:5011.0003: usb_submit_urb(ctrl) failed: -1 [ 103.952011][ T8777] vhci_hcd: connection closed [ 103.953007][ T8774] vhci_hcd: connection reset by peer [ 103.956335][ T12] vhci_hcd: stop threads [ 103.957674][ T12] vhci_hcd: release socket [ 103.959539][ T12] vhci_hcd: disconnect device [ 103.961820][ T8814] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 103.963116][ T12] vhci_hcd: stop threads [ 103.966421][ T12] vhci_hcd: release socket [ 103.966879][ T12] vhci_hcd: disconnect device [ 104.043288][ T61] Bluetooth: Error in BCSP hdr checksum [ 104.201393][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 104.395395][ T8843] ip_vti0: Master is either lo or non-ether device [ 104.400954][ T8844] ip_vti0: Master is either lo or non-ether device [ 104.671035][ T8863] netlink: 'syz.2.750': attribute type 1 has an invalid length. [ 104.674433][ T8863] netlink: 'syz.2.750': attribute type 3 has an invalid length. [ 104.677545][ T8863] NCSI netlink: No device for ifindex 0 [ 104.738441][ T9] usb 9-1: USB disconnect, device number 7 [ 104.744108][ T8865] team0: Port device bond0 removed [ 104.750233][ T8865] bridge_slave_0: left allmulticast mode [ 104.754535][ T8865] bridge_slave_0: left promiscuous mode [ 104.758772][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.770934][ T8865] bridge_slave_1: left allmulticast mode [ 104.773560][ T8865] bridge_slave_1: left promiscuous mode [ 104.776104][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.793365][ T8865] bond0: (slave bond_slave_0): Releasing backup interface [ 104.803900][ T8865] bond0: (slave bond_slave_1): Releasing backup interface [ 104.813159][ T8865] team0: Port device team_slave_0 removed [ 104.817648][ T8865] team0: Port device team_slave_1 removed [ 104.820526][ T8865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.824271][ T8865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.829026][ T8865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.833245][ T8865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.856661][ T8866] team0: Mode changed to "activebackup" [ 104.973863][ T8875] gretap1: entered allmulticast mode [ 104.977458][ T8875] bridge0: port 3(gretap1) entered blocking state [ 104.980945][ T8875] bridge0: port 3(gretap1) entered disabled state [ 104.988926][ T8875] gretap1: entered promiscuous mode [ 104.996262][ T8875] bridge0: port 3(gretap1) entered blocking state [ 104.999519][ T8875] bridge0: port 3(gretap1) entered forwarding state [ 105.312691][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 105.315684][ T5947] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 105.417716][ T8889] nbd: must specify a device to reconfigure [ 105.429025][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 105.429036][ T40] audit: type=1400 audit(2000000046.273:572): avc: denied { bind } for pid=8890 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.471462][ T40] audit: type=1400 audit(2000000046.313:573): avc: denied { append } for pid=8894 comm="syz.4.760" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.523492][ T40] audit: type=1400 audit(2000000046.363:574): avc: denied { map } for pid=8903 comm="syz.2.762" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.530895][ T40] audit: type=1400 audit(2000000046.363:575): avc: denied { write execute } for pid=8903 comm="syz.2.762" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 105.534940][ T8906] bridge_slave_0: invalid flags given to default FDB implementation [ 105.544149][ T8904] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.546812][ T8904] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.549511][ T8904] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.552538][ T8904] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.708825][ T40] audit: type=1400 audit(2000000046.553:576): avc: denied { mount } for pid=8894 comm="syz.4.760" name="/" dev="9p" ino=36701456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 105.712663][ T8896] netlink: 'syz.4.760': attribute type 3 has an invalid length. [ 105.724737][ T8896] __nla_validate_parse: 4 callbacks suppressed [ 105.724748][ T8896] netlink: 224 bytes leftover after parsing attributes in process `syz.4.760'. [ 106.217236][ T40] audit: type=1400 audit(2000000047.063:577): avc: denied { ioctl } for pid=8944 comm="syz.1.774" path="socket:[24951]" dev="sockfs" ino=24951 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 106.230386][ T8947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.235671][ T8947] bond0: (slave rose0): Enslaving as an active interface with an up link [ 106.253269][ T40] audit: type=1400 audit(2000000047.103:578): avc: denied { unmount } for pid=6710 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 106.279599][ T8953] tmpfs: Bad value for 'mpol' [ 106.329231][ T8961] overlay: Bad value for 'workdir' [ 106.336242][ T8963] ip6gre1: entered promiscuous mode [ 106.338034][ T8963] ip6gre1: entered allmulticast mode [ 106.378097][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 106.386064][ T40] audit: type=1400 audit(2000000047.233:579): avc: denied { connect } for pid=8967 comm="syz.1.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.403814][ T8969] xt_cgroup: xt_cgroup: no path or classid specified [ 106.441142][ T8973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.779'. [ 106.444133][ T8973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.779'. [ 106.449449][ T8973] erspan0: entered promiscuous mode [ 106.452458][ T8973] batadv_slave_1: entered promiscuous mode [ 106.521222][ T40] audit: type=1400 audit(2000000047.363:580): avc: denied { write } for pid=8978 comm="syz.1.780" lport=57744 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 106.656873][ T40] audit: type=1400 audit(2000000047.503:581): avc: denied { create } for pid=8990 comm="syz.0.782" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 106.776789][ T9001] bridge_slave_0: invalid flags given to default FDB implementation [ 106.781007][ T9001] netlink: 112 bytes leftover after parsing attributes in process `syz.2.784'. [ 106.960730][ T9007] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.788'. [ 106.966732][ T9007] netlink: 'syz.1.788': attribute type 1 has an invalid length. [ 106.969139][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.788'. [ 107.091122][ T9018] overlay: ./file0 is not a directory [ 107.341057][ T9030] ipvlan2: entered promiscuous mode [ 107.343746][ T9030] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 107.346171][ T9030] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 107.546548][ T9046] overlayfs: failed to clone upperpath [ 107.603460][ T9037] netlink: 44 bytes leftover after parsing attributes in process `syz.4.799'. [ 107.728955][ T9061] netlink: 'syz.0.806': attribute type 2 has an invalid length. [ 107.735098][ T9061] netlink: 'syz.0.806': attribute type 7 has an invalid length. [ 107.737571][ T9061] netlink: 180 bytes leftover after parsing attributes in process `syz.0.806'. [ 107.951965][ T52] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 108.108007][ T52] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 108.111433][ T52] usb 7-1: config 0 has no interface number 0 [ 108.114087][ T52] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 108.118873][ T52] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 108.126026][ T52] usb 7-1: config 0 interface 255 has no altsetting 0 [ 108.128857][ T52] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 108.133006][ T52] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.142587][ T52] usb 7-1: config 0 descriptor?? [ 108.150793][ T52] ums-realtek 7-1:0.255: USB Mass Storage device detected [ 108.349619][ T52] usb 7-1: USB disconnect, device number 6 [ 108.431999][ T6021] vhci_hcd: vhci_device speed not set [ 108.587570][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880568c1c00: rx timeout, send abort [ 108.592995][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880568c1c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.947244][ T9094] netlink: 'syz.2.814': attribute type 83 has an invalid length. [ 108.984503][ T9096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.994869][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.041285][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056eaac00: rx timeout, send abort [ 109.044204][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056ea8800: rx timeout, send abort [ 109.046928][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056eaac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 109.051530][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056ea8800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 109.210032][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.817'. [ 109.280988][ T9130] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 109.599396][ T9167] 9pnet: p9_errstr2errno: server reported unknown error @d4 fNŠf [ 109.782905][ T52] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 109.828862][ T9179] netlink: 'syz.0.838': attribute type 3 has an invalid length. [ 109.832887][ T9179] netlink: 'syz.0.838': attribute type 2 has an invalid length. [ 109.837017][ T9179] netlink: 'syz.0.838': attribute type 12 has an invalid length. [ 109.839428][ T9179] netlink: 'syz.0.838': attribute type 28 has an invalid length. [ 109.941999][ T52] usb 9-1: Using ep0 maxpacket: 32 [ 109.945189][ T52] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 109.948645][ T52] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 109.952744][ T52] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.958173][ T52] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 109.961023][ T52] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 109.963708][ T52] usb 9-1: Product: syz [ 109.965026][ T52] usb 9-1: Manufacturer: syz [ 109.966499][ T52] usb 9-1: SerialNumber: syz [ 109.973597][ T52] input: appletouch as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/input/input18 [ 110.175759][ T52] usb 9-1: USB disconnect, device number 8 [ 110.187150][ T52] appletouch 9-1:1.0: input: appletouch disconnected [ 110.267525][ T9187] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 110.292858][ T56] e1000 0000:00:06.0 eth0: Reset adapter [ 110.292925][ T9187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.388762][ T9187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.391210][ T9187] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 110.392442][ T56] e1000 0000:00:06.0 eth0: Reset adapter [ 110.397880][ T9187] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 110.541118][ T9204] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.542384][ T56] e1000 0000:00:06.0 eth0: Reset adapter [ 110.544888][ T9204] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.550668][ T9204] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.554428][ T9204] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.757895][ T6021] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 120.408849][ T9261] vxcan0: tx address claim with dlc 0 [ 120.412326][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 120.412339][ T40] audit: type=1400 audit(2000000061.263:593): avc: denied { mounton } for pid=9258 comm="syz.2.854" path="/184/bus" dev="tmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 120.542188][ T9268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9268 comm=syz.1.853 [ 120.546173][ T9268] __nla_validate_parse: 7 callbacks suppressed [ 120.546182][ T9268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.853'. [ 120.629449][ T5950] Bluetooth: hci1: hardware error 0x08 [ 120.633188][ T5947] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 120.703402][ T9287] tipc: Started in network mode [ 120.708586][ T9287] tipc: Node identity d22979f9431b, cluster identity 4711 [ 120.711694][ T9287] tipc: Enabled bearer , priority 0 [ 120.718332][ T9287] tipc: Disabling bearer [ 121.072900][ T54] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 121.086964][ T9300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.862'. [ 121.087343][ T9302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.862'. [ 121.130221][ T9305] 9pnet: Found fid 0 not clunked [ 121.180878][ T40] audit: type=1400 audit(2000000062.023:594): avc: denied { shutdown } for pid=9304 comm="syz.2.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 121.261933][ T54] usb 6-1: Using ep0 maxpacket: 32 [ 121.265772][ T54] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 121.270657][ T54] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 121.281918][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.284596][ T54] usb 6-1: Product: syz [ 121.285987][ T54] usb 6-1: Manufacturer: syz [ 121.287494][ T54] usb 6-1: SerialNumber: syz [ 121.290521][ T54] usb 6-1: config 0 descriptor?? [ 121.296659][ T9296] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 121.302968][ T54] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input19 [ 121.316160][ T40] audit: type=1400 audit(2000000062.163:595): avc: denied { map } for pid=9312 comm="syz.4.865" path="/dev/video3" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 121.442831][ T9320] netlink: 'syz.4.868': attribute type 3 has an invalid length. [ 121.481477][ T40] audit: type=1400 audit(2000000062.323:596): avc: denied { listen } for pid=9324 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.497068][ T9330] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=9330 comm=syz.4.870 [ 121.497732][ T40] audit: type=1400 audit(2000000062.343:597): avc: denied { bind } for pid=9328 comm="syz.4.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 121.529113][ T40] audit: type=1400 audit(2000000062.373:598): avc: denied { read } for pid=9295 comm="syz.1.861" path="socket:[25274]" dev="sockfs" ino=25274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.554630][ T9335] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 121.557650][ T9335] netlink: 40 bytes leftover after parsing attributes in process `syz.2.871'. [ 121.573434][ T9335] team0: Port device geneve0 added [ 121.646179][ T40] audit: type=1326 audit(2000000062.493:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.0.875" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6b18e929 code=0x7ffc0000 [ 121.653961][ T40] audit: type=1326 audit(2000000062.493:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.0.875" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6b18e929 code=0x7ffc0000 [ 121.662432][ T40] audit: type=1326 audit(2000000062.493:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.0.875" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7ffa6b18e929 code=0x7ffc0000 [ 121.671207][ T40] audit: type=1326 audit(2000000062.493:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9342 comm="syz.0.875" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa6b18e929 code=0x7ffc0000 [ 121.731735][ T29] usb 6-1: USB disconnect, device number 14 [ 121.731746][ C3] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 121.779399][ T9359] raw_sendmsg: syz.0.881 forgot to set AF_INET. Fix it! [ 122.121292][ T9401] netlink: 32 bytes leftover after parsing attributes in process `syz.0.892'. [ 122.384619][ T9421] nfs: Unknown parameter 'noaccipher' [ 122.427928][ T9423] program syz.1.901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.427990][ T9424] program syz.1.901 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.672041][ T5950] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 122.706774][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 122.709709][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 122.841952][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 122.972802][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 122.975345][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 123.004883][ T9] usb 6-1: config 0 has no interfaces? [ 123.006767][ T9] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 123.009621][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.014067][ T9] usb 6-1: config 0 descriptor?? [ 123.470252][ T13] nci: nci_ntf_packet: unknown ntf opcode 0xd06 [ 123.482385][ T6021] libceph: connect (1)[c::]:6789 error -101 [ 123.485146][ T6021] libceph: mon0 (1)[c::]:6789 connect error [ 123.574743][ T9432] ceph: No mds server is up or the cluster is laggy [ 123.640815][ T9486] can0: slcan on ptm1. [ 123.953560][ T9485] can0 (unregistered): slcan off ptm1. [ 124.333529][ T9508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.921'. [ 124.379848][ T9512] nfs4: Unknown parameter 'tmpfs' [ 124.416457][ T9519] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 125.124340][ T9564] fuse: Unknown parameter '0x00000000000000040x00000000000000040x000000000000000400000000000000000000' [ 125.491962][ T54] usb 6-1: USB disconnect, device number 15 [ 125.572309][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 125.572325][ T40] audit: type=1400 audit(125.478:632): avc: denied { bind } for pid=9593 comm="syz.1.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 125.579423][ T9594] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 125.585094][ T9594] netlink: 228 bytes leftover after parsing attributes in process `syz.1.943'. [ 125.694159][ T40] audit: type=1400 audit(125.598:633): avc: denied { view } for pid=9595 comm="syz.1.944" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 125.764432][ T9602] xt_hashlimit: size too large, truncated to 1048576 [ 125.910843][ T9611] UHID_CREATE from different security context by process 663 (syz.1.948), this is not allowed. [ 125.983348][ T9615] tipc: Enabled bearer , priority 10 [ 126.046997][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 126.049898][ T9623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 126.141200][ T40] audit: type=1400 audit(126.038:634): avc: denied { create } for pid=9624 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.149976][ T40] audit: type=1400 audit(126.038:635): avc: denied { bind } for pid=9624 comm="syz.0.953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.157899][ T40] audit: type=1400 audit(126.048:636): avc: denied { write } for pid=9624 comm="syz.0.953" path="socket:[28863]" dev="sockfs" ino=28863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.161698][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.955'. [ 126.175685][ T9637] netlink: 'syz.1.955': attribute type 2 has an invalid length. [ 126.178360][ T9637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.209902][ T9641] overlayfs: workdir and upperdir must be separate subtrees [ 126.247710][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.959'. [ 126.252619][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.959'. [ 126.311955][ T40] audit: type=1400 audit(126.208:637): avc: denied { create } for pid=9652 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 126.318174][ T40] audit: type=1400 audit(126.218:638): avc: denied { getopt } for pid=9652 comm="syz.1.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 126.331973][ T40] audit: type=1400 audit(126.228:639): avc: denied { mounton } for pid=9657 comm="syz.0.964" path="/337/file0" dev="tmpfs" ino=1817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 126.331998][ T9658] 9pnet_fd: Insufficient options for proto=fd [ 126.429706][ T40] audit: type=1326 audit(126.328:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.969" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa6b18e929 code=0x0 [ 126.490946][ T9681] netlink: 292 bytes leftover after parsing attributes in process `syz.1.972'. [ 126.603388][ T9696] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 126.743157][ T40] audit: type=1400 audit(126.648:641): avc: denied { create } for pid=9703 comm="syz.1.980" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 126.802878][ T9702] netlink: 40 bytes leftover after parsing attributes in process `syz.2.979'. [ 127.272197][ T838] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 127.442088][ T838] usb 7-1: Using ep0 maxpacket: 8 [ 127.448282][ T838] usb 7-1: config 2 interface 0 has no altsetting 0 [ 127.457138][ T838] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 127.459837][ T838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.462437][ T838] usb 7-1: Product: syz [ 127.463740][ T838] usb 7-1: Manufacturer: syz [ 127.465179][ T838] usb 7-1: SerialNumber: syz [ 127.635220][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.997'. [ 127.683966][ T838] usb 7-1: USB disconnect, device number 7 [ 127.690310][ T9762] vlan2: entered allmulticast mode [ 127.693002][ T9762] bond0: entered allmulticast mode [ 127.695158][ T9762] bond_slave_0: entered allmulticast mode [ 127.697015][ T9762] bond_slave_1: entered allmulticast mode [ 127.725602][ T9770] lo: entered allmulticast mode [ 127.754286][ T9773] lo: left allmulticast mode [ 128.032269][ T9783] netlink: 'syz.0.1003': attribute type 25 has an invalid length. [ 128.151976][ T838] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 128.316303][ T838] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 128.320191][ T838] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.323939][ T838] usb 9-1: Product: syz [ 128.325792][ T838] usb 9-1: Manufacturer: syz [ 128.327784][ T838] usb 9-1: SerialNumber: syz [ 128.336057][ T838] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 128.356845][ T838] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.565555][ T9785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.569387][ T9785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.574143][ T9785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.582102][ T9785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.586295][ T52] usb 9-1: USB disconnect, device number 9 [ 128.769781][ T9809] netlink: 'syz.1.1011': attribute type 1 has an invalid length. [ 128.804577][ T9809] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 128.811802][ T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 128.812594][ T9809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.922967][ T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 129.031510][ T9813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38547 sclass=netlink_route_socket pid=9813 comm=syz.0.1012 [ 129.039079][ T9813] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1012'. [ 129.054913][ T9816] overlayfs: failed to resolve '/': -2 [ 129.088579][ T9819] unsupported nla_type 14345 [ 129.132679][ T9826] netlink: 'syz.4.1017': attribute type 2 has an invalid length. [ 129.136914][ T9826] netlink: 'syz.4.1017': attribute type 2 has an invalid length. [ 129.144590][ T9832] overlayfs: failed to clone upperpath [ 129.271685][ T9848] fuse: Bad value for 'fd' [ 129.392494][ T838] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 129.399757][ T838] ath9k_htc: Failed to initialize the device [ 129.410462][ T52] usb 9-1: ath9k_htc: USB layer deinitialized [ 129.535135][ T9884] xt_hashlimit: max too large, truncated to 1048576 [ 129.862186][ T9912] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 129.895540][ T9914] 0: renamed from hsr0 (while UP) [ 129.900875][ T9914] 0: entered allmulticast mode [ 129.902827][ T9914] hsr_slave_0: entered allmulticast mode [ 129.904489][ T9914] hsr_slave_1: entered allmulticast mode [ 129.906476][ T9914] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 129.922450][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.926348][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.932401][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.934740][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.937848][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.940678][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x2 [ 129.944000][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.946511][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.948873][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.951170][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.953673][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.956571][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.959084][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.962013][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.964430][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.966693][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.969099][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.972884][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.975897][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x2 [ 129.978974][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.982109][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.985154][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.988125][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.991205][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.994339][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 129.997351][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 130.000357][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 130.003656][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 130.006611][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 130.009474][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 130.011921][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 130.014219][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 130.016599][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 130.019770][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 130.023033][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 130.026140][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 130.029248][ T838] hid-generic 0000:0000:20000000.0004: unknown main item tag 0x0 [ 130.042951][ T838] hid-generic 0000:0000:20000000.0004: hidraw1: HID v0.01 Device [syz0] on syz1 [ 130.089518][ T9919] fido_id[9919]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 130.113055][ T9923] netlink: 'syz.4.1044': attribute type 12 has an invalid length. [ 130.169836][ T9929] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.247319][ T9939] 9pnet_virtio: no channels available for device syz [ 130.298082][ T9944] overlay: ./file0 is not a directory [ 130.535641][ T9959] openvswitch: netlink: IPv4 tun info is not correct [ 130.779785][ T9977] __nla_validate_parse: 9 callbacks suppressed [ 130.779802][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1059'. [ 130.809025][ T9977] openvswitch: netlink: Geneve opt len 10 is not a multiple of 4. [ 130.895938][ T9992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1064'. [ 130.899950][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1064'. [ 130.928205][ T40] kauditd_printk_skb: 1757 callbacks suppressed [ 130.928217][ T40] audit: type=1400 audit(130.818:2399): avc: denied { mount } for pid=9986 comm="syz.0.1063" name="/" dev="autofs" ino=30191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 130.942265][ T40] audit: type=1400 audit(130.828:2400): avc: denied { read write } for pid=5934 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.960444][ T40] audit: type=1400 audit(130.828:2401): avc: denied { open } for pid=5934 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.971110][ T40] audit: type=1400 audit(130.828:2402): avc: denied { ioctl } for pid=5934 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 130.977660][T10002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1067'. [ 130.980505][ T40] audit: type=1400 audit(130.848:2403): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 130.995091][ T40] audit: type=1800 audit(130.898:2404): pid=10006 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1068" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 131.013984][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 131.140208][T10011] netlink: 'syz.1.1070': attribute type 5 has an invalid length. [ 131.156773][ T40] audit: type=1400 audit(131.058:2405): avc: denied { create } for pid=10018 comm="syz.2.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 131.204208][T10029] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 131.237665][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1074'. [ 131.277475][ T40] audit: type=1400 audit(131.178:2406): avc: denied { read } for pid=10039 comm="syz.2.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 131.357184][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 131.360181][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 131.368617][T10053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1086'. [ 131.375840][ T40] audit: type=1400 audit(131.278:2407): avc: denied { listen } for pid=10054 comm="syz.0.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 131.379257][T10053] netlink: 'syz.2.1086': attribute type 5 has an invalid length. [ 131.427325][T10053] ip6erspan0: entered promiscuous mode [ 131.431245][T10062] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1088'. [ 131.489382][T10075] sctp: [Deprecated]: syz.0.1091 (pid 10075) Use of int in max_burst socket option deprecated. [ 131.489382][T10075] Use struct sctp_assoc_value instead [ 131.508405][T10078] misc userio: The device must be registered before sending interrupts [ 131.598070][T10086] bridge_slave_0: left allmulticast mode [ 131.600389][T10086] bridge_slave_0: left promiscuous mode [ 131.602942][T10086] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.609142][T10086] bridge_slave_1: left promiscuous mode [ 131.611686][T10086] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.620603][T10086] bond0: (slave bond_slave_0): Releasing backup interface [ 131.625453][T10086] bond_slave_0: left allmulticast mode [ 131.635692][T10086] bond0: (slave bond_slave_1): Releasing backup interface [ 131.639813][T10086] bond_slave_1: left allmulticast mode [ 131.663683][T10086] team0: Port device team_slave_0 removed [ 131.666005][ T40] audit: type=1400 audit(131.568:2408): avc: denied { map } for pid=10088 comm="syz.2.1095" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.679263][T10086] team0: Port device team_slave_1 removed [ 131.681576][T10086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.685074][T10086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.690194][T10086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.694879][T10086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.970246][T10129] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 131.981280][T10129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10129 comm=syz.1.1108 [ 132.080597][T10141] befs: (nullb0): No write support. Marking filesystem read-only [ 132.084561][T10141] befs: (nullb0): invalid magic header [ 132.272905][ T9] page_pool_release_retry() stalled pool shutdown: id 33, 1 inflight 60 sec [ 132.472163][T10156] xt_hashlimit: size too large, truncated to 1048576 [ 132.596371][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.598961][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.676769][T10175] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 132.682388][ T29] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 132.783830][T10175] /dev/sr0: Can't open blockdev [ 132.824634][T10190] qrtr: Invalid version 192 [ 132.831951][ T29] usb 9-1: device descriptor read/64, error -71 [ 133.028814][T10206] No control pipe specified [ 133.056049][T10213] netlink: 'syz.0.1140': attribute type 5 has an invalid length. [ 133.082084][ T29] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 133.095100][T10218] ksmbd: Unknown IPC event: 0, ignore. [ 133.186284][T10232] fuse: Bad value for 'fd' [ 133.212045][ T29] usb 9-1: device descriptor read/64, error -71 [ 133.266238][T10234] netlink: 'syz.2.1145': attribute type 21 has an invalid length. [ 133.270621][T10234] 9pnet_fd: Insufficient options for proto=fd [ 133.342102][ T29] usb usb9-port1: attempt power cycle [ 133.492357][T10242] use of bytesused == 0 is deprecated and will be removed in the future, [ 133.495096][T10242] use the actual size instead. [ 133.552568][ T1121] sr 2:0:0:0: [sr0] tag#6 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 133.555587][ T1121] sr 2:0:0:0: [sr0] tag#6 Sense Key : Illegal Request [current] [ 133.557956][ T1121] sr 2:0:0:0: [sr0] tag#6 Add. Sense: Invalid command operation code [ 133.560388][ T1121] sr 2:0:0:0: [sr0] tag#6 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 133.563086][ T1121] blk_print_req_error: 40 callbacks suppressed [ 133.563096][ T1121] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 133.568110][ T1121] buffer_io_error: 39 callbacks suppressed [ 133.568116][ T1121] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 133.683762][ T29] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 133.704528][ T29] usb 9-1: device descriptor read/8, error -71 [ 133.941945][ T29] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 133.966072][ T29] usb 9-1: device descriptor read/8, error -71 [ 134.022011][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 134.072396][ T29] usb usb9-port1: unable to enumerate USB device [ 134.170408][T10298] 9pnet: p9_errstr2errno: server reported unknown error @ [ 134.172102][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 134.177257][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 134.183884][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 134.187390][T10294] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 134.187657][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 134.194239][ T9] usb 6-1: Product: syz [ 134.195939][ T9] usb 6-1: Manufacturer: syz [ 134.197939][ T9] usb 6-1: SerialNumber: syz [ 134.202858][ T9] usb 6-1: config 0 descriptor?? [ 134.206366][T10269] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 134.210975][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 134.213710][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 134.421740][T10269] overlay: filesystem on ./bus not supported [ 134.582050][ T838] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 134.732684][ T838] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 134.736638][ T838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.740073][ T838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.744477][ T838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 134.747930][ T838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.751484][ T838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.755784][ T838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 134.759194][ T838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.762864][ T838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.767107][ T838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 134.770644][ T838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.774208][ T838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.778328][ T838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 134.781977][ T838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.785096][ T838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.788853][ T838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 134.792794][ T838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.796329][ T838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.800594][ T838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 134.804161][ T838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.807648][ T838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.811606][ T838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 134.814357][ T838] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.817010][ T838] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.820417][ T838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 134.825001][ T838] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 134.827631][ T838] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 134.830064][ T838] usb 7-1: Product: syz [ 134.831315][ T838] usb 7-1: Manufacturer: syz [ 134.832786][ T838] usb 7-1: SerialNumber: syz [ 134.835551][ T838] usb 7-1: config 0 descriptor?? [ 134.841409][ T838] yurex 7-1:0.0: USB YUREX device now attached to Yurex #1 [ 135.092071][ T52] usb 7-1: USB disconnect, device number 8 [ 135.117631][ T9] usb 6-1: USB disconnect, device number 16 [ 135.120333][ T52] yurex 7-1:0.0: USB YUREX #1 now disconnected [ 135.252003][ T9] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 135.403702][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 135.408676][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 135.411522][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 135.414737][ T9] usb 6-1: Product: syz [ 135.416102][ T9] usb 6-1: Manufacturer: syz [ 135.417459][ T9] usb 6-1: SerialNumber: syz [ 135.420527][ T9] usb 6-1: config 0 descriptor?? [ 135.422903][T10313] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 135.425746][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 135.427621][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 135.537224][ T5950] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 135.540351][ T5950] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 135.742074][ T54] usb 6-1: USB disconnect, device number 17 [ 135.935797][T10368] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 135.939702][T10368] overlayfs: failed to set xattr on upper [ 135.942240][T10368] overlayfs: ...falling back to redirect_dir=nofollow. [ 135.945297][T10368] overlayfs: ...falling back to index=off. [ 135.947787][T10368] overlayfs: ...falling back to uuid=null. [ 136.078906][T10374] binder: 10372:10374 ioctl c0306201 200000000640 returned -22 [ 136.225310][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 136.225324][ T40] audit: type=1400 audit(136.128:2418): avc: denied { ioctl } for pid=10385 comm="syz.4.1192" path="socket:[31769]" dev="sockfs" ino=31769 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 136.287375][T10392] __nla_validate_parse: 140 callbacks suppressed [ 136.287389][T10392] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1195'. [ 136.342566][T10394] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1195'. [ 136.749115][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 136.749160][ T40] audit: type=1400 audit(136.648:2419): avc: denied { nlmsg_read } for pid=10400 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.754518][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 137.032571][T10413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1201'. [ 137.204674][ T40] audit: type=1400 audit(137.108:2420): avc: denied { lock } for pid=10421 comm="syz.2.1203" path="socket:[28608]" dev="sockfs" ino=28608 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 137.242050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.272304][T10434] Driver unsupported XDP return value 0 on prog (id 206) dev N/A, expect packet loss! [ 137.296713][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'. [ 137.301538][T10434] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 137.309495][T10434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.524190][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1212'. [ 137.527716][T10454] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1212'. [ 137.531381][T10454] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1212'. [ 137.718072][T10473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1217'. [ 137.788695][T10481] GUP no longer grows the stack in syz.4.1218 (10481): 200000003000-20000000a000 (200000002000) [ 137.792452][T10481] CPU: 1 UID: 0 PID: 10481 Comm: syz.4.1218 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 137.792468][T10481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.792474][T10481] Call Trace: [ 137.792479][T10481] [ 137.792483][T10481] dump_stack_lvl+0x16c/0x1f0 [ 137.792520][T10481] gup_vma_lookup+0x1d2/0x220 [ 137.792539][T10481] __get_user_pages+0x271/0x3b80 [ 137.792555][T10481] ? __pfx___get_user_pages+0x10/0x10 [ 137.792571][T10481] get_user_pages_remote+0x258/0xb20 [ 137.792582][T10481] ? __pfx_mtree_load+0x10/0x10 [ 137.792601][T10481] ? __pfx_get_user_pages_remote+0x10/0x10 [ 137.792625][T10481] __access_remote_vm+0x246/0x810 [ 137.792648][T10481] ? do_raw_spin_lock+0x12c/0x2b0 [ 137.792666][T10481] ? __pfx___access_remote_vm+0x10/0x10 [ 137.792689][T10481] proc_pid_cmdline_read+0x4de/0x900 [ 137.792709][T10481] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 137.792725][T10481] ? rw_verify_area+0xcf/0x680 [ 137.792744][T10481] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 137.792761][T10481] vfs_readv+0x5be/0x8b0 [ 137.792784][T10481] ? __pfx_vfs_readv+0x10/0x10 [ 137.792801][T10481] ? kmem_cache_free+0x2d1/0x4d0 [ 137.792823][T10481] ? __fget_files+0x20e/0x3c0 [ 137.792841][T10481] ? do_preadv+0x1a6/0x270 [ 137.792852][T10481] do_preadv+0x1a6/0x270 [ 137.792865][T10481] ? __pfx_do_preadv+0x10/0x10 [ 137.792881][T10481] do_syscall_64+0xcd/0x4c0 [ 137.792900][T10481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.792912][T10481] RIP: 0033:0x7f025e18e929 [ 137.792921][T10481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.792937][T10481] RSP: 002b:00007f025ef38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 137.792947][T10481] RAX: ffffffffffffffda RBX: 00007f025e3b6080 RCX: 00007f025e18e929 [ 137.792954][T10481] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 137.792962][T10481] RBP: 00007f025e210b39 R08: 0000000000000000 R09: 0000000000000000 [ 137.792970][T10481] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 137.792980][T10481] R13: 0000000000000000 R14: 00007f025e3b6080 R15: 00007ffcbf62ac88 [ 137.792999][T10481] [ 137.995397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 138.114153][T10501] vlan2: entered promiscuous mode [ 138.116409][T10501] vlan2: entered allmulticast mode [ 138.118544][T10501] hsr_slave_1: entered allmulticast mode [ 138.389727][T10535] IPVS: set_ctl: invalid protocol: 60 245.255.255.255:0 [ 138.467179][T10537] kvm: pic: non byte write [ 138.505933][ T40] audit: type=1400 audit(138.408:2421): avc: denied { setopt } for pid=10549 comm="syz.0.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 138.515166][ T40] audit: type=1400 audit(138.408:2422): avc: denied { map } for pid=10540 comm="syz.4.1234" path="/dev/sr0" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 138.755700][T10560] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 138.770583][T10560] kvm: pic: non byte read [ 138.774863][T10560] kvm: pic: level sensitive irq not supported [ 138.775560][T10560] kvm: pic: non byte read [ 138.783020][T10560] kvm: pic: level sensitive irq not supported [ 138.783978][T10560] kvm: pic: non byte read [ 138.790196][T10560] kvm: pic: level sensitive irq not supported [ 138.791287][T10560] kvm: pic: non byte read [ 138.801168][ T40] audit: type=1400 audit(138.698:2423): avc: denied { remount } for pid=10559 comm="syz.4.1239" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 139.307132][ T1233] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.446550][ T1233] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.583106][ T5947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.591006][ T5947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.594356][ T5947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.599013][ T5947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.601980][ T5947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.664326][ T1233] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.672852][ T40] audit: type=1400 audit(139.568:2424): avc: denied { accept } for pid=10581 comm="syz.1.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.697111][ T40] audit: type=1400 audit(139.598:2425): avc: denied { accept } for pid=10584 comm="syz.0.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 139.794778][ T1233] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.821615][T10592] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.839219][T10592] bridge0: port 3(gretap1) entered disabled state [ 139.849013][T10579] chnl_net:caif_netlink_parms(): no params data found [ 139.950357][T10579] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.954531][T10579] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.957735][T10579] bridge_slave_0: entered allmulticast mode [ 139.961516][T10579] bridge_slave_0: entered promiscuous mode [ 139.966741][T10579] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.969739][T10579] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.974646][T10579] bridge_slave_1: entered allmulticast mode [ 139.978470][T10579] bridge_slave_1: entered promiscuous mode [ 140.029624][T10579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.034741][T10579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.177331][ T1233] erspan0 (unregistering): left promiscuous mode [ 140.449359][ T40] audit: type=1400 audit(140.348:2426): avc: denied { setattr } for pid=10629 comm="syz.2.1260" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 140.518087][ T1233] bond0 (unregistering): Released all slaves [ 140.582263][ T1233] bond1 (unregistering): Released all slaves [ 140.592341][T10579] team0: Port device team_slave_0 added [ 140.596831][T10579] team0: Port device team_slave_1 added [ 140.644229][T10579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.647273][T10579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.660373][T10579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.666678][T10579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.669902][T10579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.683986][T10579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.704748][ T1233] tipc: Left network mode [ 140.842180][T10579] hsr_slave_0: entered promiscuous mode [ 140.845320][T10579] hsr_slave_1: entered promiscuous mode [ 140.960122][ T1233] batadv_slave_1: left promiscuous mode [ 140.969069][ T1233] hsr_slave_0: left promiscuous mode [ 140.993136][ T1233] veth1_macvtap: left promiscuous mode [ 140.995046][ T1233] veth0_macvtap: left promiscuous mode [ 140.996792][ T1233] veth1_vlan: left promiscuous mode [ 140.998442][ T1233] veth0_vlan: left promiscuous mode [ 141.041675][T10656] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 141.046433][T10656] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 141.369111][T10667] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10667 comm=syz.2.1266 [ 141.374232][T10667] __nla_validate_parse: 4 callbacks suppressed [ 141.374241][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 141.644658][ T5950] Bluetooth: hci3: command tx timeout [ 142.437984][T10579] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.457296][T10579] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.468168][T10579] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.479400][T10579] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.619957][T10579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.638805][T10579] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.665479][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.668494][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.693888][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.696224][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.928991][T10579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.124074][ T40] audit: type=1400 audit(143.028:2427): avc: denied { getopt } for pid=10726 comm="syz.2.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.126695][T10579] veth0_vlan: entered promiscuous mode [ 143.142322][T10579] veth1_vlan: entered promiscuous mode [ 143.159974][T10579] veth0_macvtap: entered promiscuous mode [ 143.165240][T10579] veth1_macvtap: entered promiscuous mode [ 143.169978][T10727] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 143.175120][T10727] SELinux: failed to load policy [ 143.187667][T10579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.196142][T10579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.201089][T10579] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.204399][T10579] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.207088][T10579] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.209740][T10579] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.235260][ T40] audit: type=1400 audit(143.138:2428): avc: denied { append } for pid=10748 comm="syz.1.1277" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 143.247845][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 143.321151][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.324622][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.356520][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.359588][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.377531][ T40] audit: type=1400 audit(143.278:2429): avc: denied { mounton } for pid=10579 comm="syz-executor" path="/syzkaller.228xcU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=35103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 143.551088][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1287'. [ 143.566018][T10815] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1290'. [ 143.640844][ T40] audit: type=1400 audit(143.538:2430): avc: denied { mount } for pid=10825 comm="syz.5.1294" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 143.712057][ T5950] Bluetooth: hci3: command tx timeout [ 143.731681][T10839] syz.2.1298: attempt to access beyond end of device [ 143.731681][T10839] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 143.743250][T10839] syz.2.1298: attempt to access beyond end of device [ 143.743250][T10839] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 143.753759][T10839] syz.2.1298: attempt to access beyond end of device [ 143.753759][T10839] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 143.760183][T10839] syz.2.1298: attempt to access beyond end of device [ 143.760183][T10839] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 143.766652][T10839] syz.2.1298: attempt to access beyond end of device [ 143.766652][T10839] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 143.774759][T10839] syz.2.1298: attempt to access beyond end of device [ 143.774759][T10839] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 143.779369][T10839] syz.2.1298: attempt to access beyond end of device [ 143.779369][T10839] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 143.785435][T10839] syz.2.1298: attempt to access beyond end of device [ 143.785435][T10839] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 143.790095][T10839] syz.2.1298: attempt to access beyond end of device [ 143.790095][T10839] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 143.795225][T10839] syz.2.1298: attempt to access beyond end of device [ 143.795225][T10839] nbd2: rw=0, sector=0, nr_sectors = 8 limit=0 [ 143.828733][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 143.978605][T10864] netlink: set zone limit has 4 unknown bytes [ 143.983161][T10864] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1303'. [ 143.992404][T10864] fuse: Unknown parameter 'ro000000000001#Aja0000' [ 144.242389][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1306'. [ 144.629962][T10885] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1308'. [ 144.667790][T10888] netlink: 'syz.0.1309': attribute type 2 has an invalid length. [ 144.906601][ T40] audit: type=1326 audit(144.808:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281918e929 code=0x7fc00000 [ 144.913890][ T40] audit: type=1326 audit(144.808:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f281918e929 code=0x7fc00000 [ 144.920537][ T40] audit: type=1326 audit(144.808:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281918e929 code=0x7fc00000 [ 144.927698][ T40] audit: type=1326 audit(144.808:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281918e929 code=0x7fc00000 [ 144.935343][ T40] audit: type=1326 audit(144.808:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281918e929 code=0x7fc00000 [ 144.942766][ T40] audit: type=1326 audit(144.808:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.1306" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f281918e929 code=0x7fc00000 [ 144.984168][T10901] netlink: 'syz.5.1313': attribute type 4 has an invalid length. [ 145.016182][T10905] Mount JFS Failure: -22 [ 145.085713][T10914] overlayfs: failed to resolve './file1': -2 [ 145.147117][T10919] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1317'. [ 145.149969][T10919] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1317'. [ 145.154461][T10919] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 145.792099][ T5950] Bluetooth: hci3: command tx timeout [ 146.067419][T10951] loop2: detected capacity change from 0 to 7 [ 146.324079][T10951] Dev loop2: unable to read RDB block 7 [ 146.325914][T10951] loop2: unable to read partition table [ 146.327600][T10951] loop2: partition table beyond EOD, truncated [ 146.332107][T10951] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 146.563620][T10978] vlan2: entered allmulticast mode [ 146.565310][T10978] : entered allmulticast mode [ 146.566839][T10978] @: entered allmulticast mode [ 146.568432][T10978] bond_slave_1: entered allmulticast mode [ 146.663363][T10981] __nla_validate_parse: 1 callbacks suppressed [ 146.663381][T10981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1337'. [ 146.738690][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1338'. [ 146.742564][T10985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1338'. [ 146.807620][T10991] overlayfs: failed to clone upperpath [ 146.885698][T10995] netlink: 84 bytes leftover after parsing attributes in process `##Jm\'. [ 146.888718][T10995] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 147.275339][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1350'. [ 147.357493][T11035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1352'. [ 147.360647][T11035] gretap0: entered promiscuous mode [ 147.396091][T11038] wg1: entered promiscuous mode [ 147.397830][T11038] wg1: entered allmulticast mode [ 147.425067][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1355'. [ 147.428010][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1355'. [ 147.432232][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1355'. [ 147.435507][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1355'. [ 147.645207][T11049] block device autoloading is deprecated and will be removed. [ 147.731962][ T6174] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 147.861959][ T6174] usb 7-1: device descriptor read/64, error -71 [ 147.873106][ T5950] Bluetooth: hci3: command tx timeout [ 147.978516][T11051] bridge4: entered promiscuous mode [ 148.102938][ T6174] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 148.241984][ T6174] usb 7-1: device descriptor read/64, error -71 [ 148.302687][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 148.354090][ T6174] usb usb7-port1: attempt power cycle [ 148.368616][T11078] IPVS: Scheduler module ip_vs_sip not found [ 148.457455][T11083] xt_limit: Overflow, try lower: 1207959552/384 [ 148.520755][T11089] netlink: 'syz.0.1370': attribute type 9 has an invalid length. [ 148.523343][T11089] netlink: 'syz.0.1370': attribute type 7 has an invalid length. [ 148.525843][T11089] netlink: 'syz.0.1370': attribute type 8 has an invalid length. [ 148.691967][ T6174] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 148.713510][ T6174] usb 7-1: device descriptor read/8, error -71 [ 148.952020][ T6174] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 148.974067][ T6174] usb 7-1: device descriptor read/8, error -71 [ 149.084184][ T6174] usb usb7-port1: unable to enumerate USB device [ 149.554433][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 149.554532][ T40] audit: type=1400 audit(149.458:2448): avc: denied { getopt } for pid=11113 comm="syz.0.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 149.582688][T11107] kvm: pic: non byte write [ 149.596106][ T40] audit: type=1804 audit(149.498:2449): pid=11118 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1379" name="file0" dev="tmpfs" ino=2590 res=1 errno=0 [ 149.603751][ T40] audit: type=1800 audit(149.498:2450): pid=11118 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1379" name="file0" dev="tmpfs" ino=2590 res=0 errno=0 [ 149.614820][T11118] IPVS: persistence engine module ip_vs_pe_s not found [ 149.653784][ T40] audit: type=1400 audit(149.558:2451): avc: denied { map } for pid=11120 comm="syz.0.1380" path="socket:[34499]" dev="sockfs" ino=34499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 149.781183][T11138] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 149.912765][ T40] audit: type=1400 audit(149.818:2452): avc: denied { create } for pid=11152 comm="syz.0.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 149.986120][T11157] netlink: 'syz.0.1389': attribute type 5 has an invalid length. [ 150.101343][T11164] tipc: Bearer : already 2 bearers with priority 10 [ 150.106229][T11164] tipc: Bearer : trying with adjusted priority [ 150.109250][T11164] tipc: Enabled bearer , priority 9 [ 150.228462][T11171] binfmt_misc: register: failed to install interpreter file ./file0 [ 150.264134][T11178] cgroup: Invalid name [ 150.352059][ T5950] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 150.352529][ T5947] Bluetooth: hci4: command 0xfc11 tx timeout [ 150.496398][T11193] delete_channel: no stack [ 150.749254][T11201] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 150.753299][T11201] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 150.756387][T11201] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 150.759053][T11201] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 150.786775][ T40] audit: type=1400 audit(150.688:2453): avc: denied { watch } for pid=11202 comm="syz.5.1403" path="/17/blkio.bfq.io_service_bytes_recursive" dev="tmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.832968][ T29] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 150.913259][ T40] audit: type=1400 audit(150.818:2454): avc: denied { lock } for pid=11204 comm="syz.5.1404" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36008 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 150.992191][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 150.996574][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.000834][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.005705][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.009417][T11207] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11207 comm=syz.5.1405 [ 151.009741][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.021523][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.025571][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.028844][ T29] usb 6-1: SerialNumber: syz [ 151.037034][ T29] hub 6-1:1.0: bad descriptor, ignoring hub [ 151.039089][ T29] hub 6-1:1.0: probe with driver hub failed with error -5 [ 151.043516][ T29] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 151.291976][ T6021] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 151.443819][ T6021] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 151.447747][ T6021] usb 10-1: config 0 interface 0 has no altsetting 0 [ 151.453923][ T6021] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 151.456859][ T6021] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 151.459540][ T6021] usb 10-1: Product: syz [ 151.460906][ T6021] usb 10-1: Manufacturer: syz [ 151.463491][ T6021] usb 10-1: SerialNumber: syz [ 151.466379][ T6021] usb 10-1: config 0 descriptor?? [ 151.472173][ T6021] usb 10-1: selecting invalid altsetting 0 [ 151.575406][T11232] netlink: 'syz.2.1415': attribute type 3 has an invalid length. [ 151.578288][T11232] netlink: 'syz.2.1415': attribute type 3 has an invalid length. [ 151.581667][T11232] netlink: 'syz.2.1415': attribute type 3 has an invalid length. [ 151.585151][T11232] netlink: 'syz.2.1415': attribute type 3 has an invalid length. [ 151.587680][T11232] netlink: 'syz.2.1415': attribute type 3 has an invalid length. [ 151.587978][T11233] netlink: 'syz.1.1399': attribute type 10 has an invalid length. [ 151.590753][T11232] netlink: 'syz.2.1415': attribute type 3 has an invalid length. [ 151.596379][T11232] netlink: 'syz.2.1415': attribute type 3 has an invalid length. [ 151.599249][T11232] netlink: 'syz.2.1415': attribute type 3 has an invalid length. [ 151.610257][T11233] batman_adv: batadv0: Adding interface: team0 [ 151.612976][T11233] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.620691][T11233] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 151.625254][T11233] team0: entered promiscuous mode [ 151.626902][T11233] team_slave_0: entered promiscuous mode [ 151.628764][T11233] team_slave_1: entered promiscuous mode [ 151.631525][T11233] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.634152][T11233] batman_adv: batadv0: Interface activated: team0 [ 151.636464][T11233] batman_adv: batadv0: Interface deactivated: team0 [ 151.638579][T11233] batman_adv: batadv0: Removing interface: team0 [ 151.642778][T11233] bridge0: port 3(team0) entered blocking state [ 151.645579][T11233] bridge0: port 3(team0) entered disabled state [ 151.651179][T11233] bridge0: port 3(team0) entered blocking state [ 151.653960][T11233] bridge0: port 3(team0) entered forwarding state [ 151.660500][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.667890][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.682956][T11209] __nla_validate_parse: 36 callbacks suppressed [ 151.682972][T11209] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1406'. [ 151.696167][ T52] usb 10-1: USB disconnect, device number 2 [ 151.715302][T11241] loop6: detected capacity change from 0 to 524287999 [ 151.763060][ T6021] usb 6-1: USB disconnect, device number 18 [ 151.778589][T11246] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3) [ 151.885292][T11255] nbd: couldn't find a device at index -1605786504 [ 151.976406][T11258] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1424'. [ 151.999691][T11258] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11258 comm=syz.0.1424 [ 152.005095][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1424'. [ 152.048410][T11260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1425'. [ 152.078145][T11260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11260 comm=syz.0.1425 [ 152.084056][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 152.245060][T11273] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1429'. [ 152.256686][T11273] batadv0: entered promiscuous mode [ 152.259478][T11273] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 152.263739][T11273] batadv0: left promiscuous mode [ 152.278789][T11275] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11275 comm=syz.0.1431 [ 152.400723][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'. [ 152.404270][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'. [ 152.426550][ T40] audit: type=1400 audit(152.328:2455): avc: denied { setopt } for pid=11285 comm="syz.5.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.434371][ T40] audit: type=1400 audit(152.338:2456): avc: denied { read } for pid=11285 comm="syz.5.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.581160][T11304] tmpfs: Bad value for 'mpol' [ 152.585610][T11300] input: syz0 as /devices/virtual/input/input21 [ 152.688955][ T40] audit: type=1800 audit(152.588:2457): pid=11314 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1445" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 153.152482][ T54] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 153.313589][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 153.318166][ T54] usb 6-1: config 1 interface 0 has no altsetting 0 [ 153.322403][ T54] usb 6-1: New USB device found, idVendor=0525, idProduct=aca8, bcdDevice= 0.40 [ 153.326307][ T54] usb 6-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 153.329731][ T54] usb 6-1: Product: syz [ 153.332323][ T54] usb 6-1: Manufacturer: syz [ 153.334801][ T54] usb 6-1: SerialNumber: syz [ 153.416438][T11364] ptrace attach of "/syz-executor exec"[10579] was attempted by "/syz-executor exec"[11364] [ 153.491409][T11371] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1463'. [ 153.544932][T11340] QAT: Invalid ioctl -2144835806 [ 153.586054][ T54] usb 6-1: USB disconnect, device number 19 [ 153.720105][T11386] xt_l2tp: unknown flags: 17 [ 154.202598][T11429] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 154.291982][ T6021] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 154.441922][ T6021] usb 7-1: Using ep0 maxpacket: 8 [ 154.444941][ T6021] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 154.447605][ T6021] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.452518][ T6021] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.457212][ T6021] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.461753][ T6021] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.467675][ T6021] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 154.470900][ T6021] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.475655][ T6021] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.480327][ T6021] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.484997][ T6021] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.490612][ T6021] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 154.494333][ T6021] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.498368][ T6021] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.503215][ T6021] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.507687][ T6021] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.516842][ T6021] usb 7-1: string descriptor 0 read error: -22 [ 154.519532][ T6021] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 154.523371][ T6021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.534563][ T6021] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 154.615225][T11450] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1484'. [ 154.805296][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 154.805307][ T40] audit: type=1400 audit(154.708:2462): avc: denied { read } for pid=11459 comm="syz.5.1486" name="file0" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.816164][ T40] audit: type=1400 audit(154.708:2463): avc: denied { open } for pid=11459 comm="syz.5.1486" path="/45/file0" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.824524][ T40] audit: type=1400 audit(154.718:2464): avc: denied { ioctl } for pid=11459 comm="syz.5.1486" path="/45/file0" dev="tmpfs" ino=273 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 154.850586][ T6198] usb 7-1: USB disconnect, device number 13 [ 154.853989][T11464] usb 7-1: Couldn't submit interrupt_out_urb -19 [ 154.881239][T11473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60845 sclass=netlink_route_socket pid=11473 comm=syz.0.1489 [ 154.921736][ T40] audit: type=1400 audit(154.818:2465): avc: denied { setattr } for pid=11477 comm="syz.0.1491" path="socket:[38000]" dev="sockfs" ino=38000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.941948][ T29] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 155.111938][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 155.115617][ T29] usb 6-1: config 0 has no interfaces? [ 155.119221][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.127494][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 155.132951][ T29] usb 6-1: SerialNumber: syz [ 155.146271][ T29] usb 6-1: config 0 descriptor?? [ 155.309301][T11523] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11523 comm=syz.5.1502 [ 155.676985][ T40] audit: type=1400 audit(155.578:2466): avc: denied { bind } for pid=11580 comm="syz.5.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.820518][ T40] audit: type=1400 audit(155.718:2467): avc: denied { write } for pid=11588 comm="syz.2.1519" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 155.874831][T11604] tmpfs: Unknown parameter 'm. l#bi' [ 155.932238][ T29] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 155.985700][T11615] tipc: Enabling of bearer rejected, already enabled [ 155.990756][T11615] tipc: Enabling of bearer rejected, already enabled [ 155.995560][T11615] fuse: Unknown parameter '6' [ 156.103566][ T29] usb 10-1: not running at top speed; connect to a high speed hub [ 156.107070][ T29] usb 10-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 156.110921][ T29] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 156.114210][ T29] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.122849][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.126577][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.130485][ T29] usb 10-1: Product: ꙿ᨞摽¼航֒ಐ涪菏썉贫꠹즖仩⍮늈槎㰏ȍ⯰腢鿾脷➵䚂鈜䯑赅畑婚䉮廀霴ꉧꖗ빈ᣗ⦞᳦缣ꯢ㫭艹ﮜ渁괽Ӱ詊魏཯흇곿稜˔嶽핪∁棺嵂溽鳛꜊삲๮㒃딕奬再Іꯒ窧ⳍ覨姙磝㸝礖誺肊㢠懛 [ 156.139660][ T29] usb 10-1: SerialNumber: 姼處ᵨ鿧祃Ó㏳넇龔鐫氖齂鶥ᝤᖈ筷䤞㼨惍⋟⩔桬ﲉ돰שׂ♖꼈꽁眆墡곂戈౩᧡ﻔ떎쨦覟캋ꘂ෦ᐙ䬍₦魉㘇ﲱ迊⻫躆ʜ鉫䰍?럀倫Ꮛ✢涬৔҅஝驯瞓艜眮凼䒝읋껫玟夵菮Ꚓ蟹铱遭꺨㾧䟸∾埞ᇋ蚢²雨탆볦㨟춂ۻ畫㣉턗떿튜␜꟮꒗壆 [ 156.231678][ T40] audit: type=1400 audit(156.128:2468): avc: denied { create } for pid=11632 comm="syz.2.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 156.379666][T11651] xt_hashlimit: size too large, truncated to 1048576 [ 156.439667][T11650] team0 (unregistering): Port device team_slave_0 removed [ 156.452733][T11650] team0 (unregistering): Port device team_slave_1 removed [ 156.459002][T11650] team0 (unregistering): Port device vlan0 removed [ 156.472286][ T29] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 156.474498][ T29] cdc_ncm 10-1:1.0: bind() failure [ 156.480198][T11653] C: renamed from lo (while UP) [ 156.480338][ T29] usb 10-1: USB disconnect, device number 3 [ 156.487342][T11653] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 156.689038][T11665] xt_hashlimit: size too large, truncated to 1048576 [ 156.770131][ T40] audit: type=1400 audit(156.668:2469): avc: denied { getopt } for pid=11664 comm="syz.0.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.939311][T11682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.994661][T11685] __nla_validate_parse: 17 callbacks suppressed [ 156.994678][T11685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1544'. [ 157.267053][T11721] validate_nla: 45 callbacks suppressed [ 157.267065][T11721] netlink: 'syz.5.1556': attribute type 21 has an invalid length. [ 157.271374][T11721] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1556'. [ 157.274588][T11721] netlink: 'syz.5.1556': attribute type 4 has an invalid length. [ 157.277031][T11721] netlink: 'syz.5.1556': attribute type 5 has an invalid length. [ 157.279437][T11721] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1556'. [ 157.318511][T11722] syz.2.1554 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 157.471294][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1557'. [ 157.474517][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1557'. [ 157.497145][ T1334] usb 6-1: USB disconnect, device number 20 [ 157.509220][T11725] futex_wake_op: syz.5.1557 tries to shift op by -1; fix this program [ 157.543975][T11730] usb usb3: usbfs: interface 0 claimed by hub while 'syz.1.1559' sets config #256 [ 157.547313][T11730] netlink: 'syz.1.1559': attribute type 2 has an invalid length. [ 157.549806][T11730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.557442][T11731] usb usb3: usbfs: interface 0 claimed by hub while 'syz.1.1559' sets config #52 [ 157.558057][T11732] netlink: 'syz.1.1559': attribute type 2 has an invalid length. [ 157.563256][T11732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.595158][T11740] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 157.597732][T11739] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 157.623128][ T5939] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 157.771997][ T5939] usb 7-1: Using ep0 maxpacket: 16 [ 157.775469][ T5939] usb 7-1: config 8 has an invalid interface number: 182 but max is 0 [ 157.777874][ T5939] usb 7-1: config 8 has no interface number 0 [ 157.779685][ T5939] usb 7-1: config 8 interface 182 altsetting 24 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.783395][ T5939] usb 7-1: config 8 interface 182 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 157.787461][ T5939] usb 7-1: config 8 interface 182 altsetting 24 has an invalid descriptor for endpoint zero, skipping [ 157.790892][ T5939] usb 7-1: config 8 interface 182 altsetting 24 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 157.794181][ T5939] usb 7-1: config 8 interface 182 altsetting 24 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 157.797205][ T5939] usb 7-1: config 8 interface 182 altsetting 24 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 157.800326][ T5939] usb 7-1: config 8 interface 182 altsetting 24 endpoint 0x2 has invalid maxpacket 2031, setting to 1024 [ 157.803653][ T5939] usb 7-1: config 8 interface 182 altsetting 24 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 157.806727][ T5939] usb 7-1: config 8 interface 182 altsetting 24 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 157.809874][ T5939] usb 7-1: config 8 interface 182 altsetting 24 has a duplicate endpoint with address 0x2, skipping [ 157.813865][ T5939] usb 7-1: config 8 interface 182 has no altsetting 0 [ 157.818546][ T5939] usb 7-1: New USB device found, idVendor=2357, idProduct=012e, bcdDevice=26.ec [ 157.821282][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.823653][ T5939] usb 7-1: Product: Њ [ 157.824911][ T5939] usb 7-1: Manufacturer: Ь [ 157.826501][ T5939] usb 7-1: SerialNumber: syz [ 157.831367][T11727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.835608][T11727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.839176][T11754] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (8), value rounded to 0 ms [ 157.908030][T11766] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1568'. [ 157.920848][T11766] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1568'. [ 157.960211][T11773] netlink: 'syz.0.1572': attribute type 39 has an invalid length. [ 157.988256][T11775] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1573'. [ 157.991410][T11775] netem: invalid attributes len -17 [ 157.994524][T11775] netem: change failed [ 158.050626][ T5939] usb 7-1: USB disconnect, device number 14 [ 158.730178][T11817] ------------[ cut here ]------------ [ 158.732502][T11817] WARNING: CPU: 3 PID: 11817 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 158.736535][T11817] Modules linked in: [ 158.738544][T11817] CPU: 3 UID: 0 PID: 11817 Comm: syz.2.1585 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 158.745073][T11817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.749266][T11817] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 158.752150][T11817] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 83 6d 7a 0e 00 75 0b c6 05 7a 6d 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 158.759693][T11817] RSP: 0018:ffffc90007f174f8 EFLAGS: 00010246 [ 158.762345][T11817] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 158.765438][T11817] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000040dc0 [ 158.768585][T11817] RBP: 0000000004000000 R08: 0000000000000005 R09: 0000000000000000 [ 158.771757][T11817] R10: 0000000000800000 R11: 0000000000000001 R12: 000000000000000e [ 158.775125][T11817] R13: 1ffff92000fe2eb4 R14: 0000000004000000 R15: 000000000000000e [ 158.778231][T11817] FS: 00007f2819fea6c0(0000) GS:ffff8880d6a53000(0000) knlGS:0000000000000000 [ 158.781779][T11817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.784476][T11817] CR2: 0000200000001000 CR3: 000000003cd2c000 CR4: 0000000000352ef0 [ 158.787597][T11817] DR0: 0000000000000007 DR1: 0000000000004e6a DR2: 0000000000000007 [ 158.790772][T11817] DR3: 00000000000002d5 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.794047][T11817] Call Trace: [ 158.795353][T11817] [ 158.796560][T11817] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 158.799096][T11817] ? rcu_is_watching+0x12/0xc0 [ 158.801056][T11817] ? trace_kmem_cache_alloc+0x28/0xc0 [ 158.803380][T11817] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 158.805607][T11817] ? hashtab_init+0x1b1/0x290 [ 158.807497][T11817] __alloc_pages_noprof+0xb/0x1b0 [ 158.809523][T11817] ___kmalloc_large_node+0x84/0x1e0 [ 158.811672][T11817] ? hashtab_init+0x1b1/0x290 [ 158.813686][T11817] __kmalloc_large_node_noprof+0x1c/0x70 [ 158.815923][T11817] ? __pfx_ebitmap_read+0x10/0x10 [ 158.817954][T11817] __kmalloc_noprof.cold+0xc/0x61 [ 158.819946][T11817] hashtab_init+0x1b1/0x290 [ 158.821794][T11817] ? __asan_memcpy+0x3c/0x60 [ 158.823758][T11817] policydb_read+0x7b4/0x3220 [ 158.825654][T11817] ? __pfx_policydb_read+0x10/0x10 [ 158.827705][T11817] security_load_policy+0x15c/0x12c0 [ 158.829797][T11817] ? irqentry_exit+0x3b/0x90 [ 158.831700][T11817] ? __pfx_security_load_policy+0x10/0x10 [ 158.834103][T11817] ? _copy_from_user+0x93/0xd0 [ 158.835992][T11817] sel_write_load+0x332/0x1bd0 [ 158.837928][T11817] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.840030][T11817] ? __lock_acquire+0xb8a/0x1c90 [ 158.842113][T11817] ? __pfx_sel_write_load+0x10/0x10 [ 158.844211][T11817] ? __pfx_sel_write_load+0x10/0x10 [ 158.846296][T11817] vfs_write+0x2a0/0x1150 [ 158.848031][T11817] ? __pfx___mutex_lock+0x10/0x10 [ 158.850119][T11817] ? __pfx_vfs_write+0x10/0x10 [ 158.852158][T11817] ? __fget_files+0x20e/0x3c0 [ 158.854069][T11817] ksys_write+0x12a/0x250 [ 158.855819][T11817] ? __pfx_ksys_write+0x10/0x10 [ 158.857780][T11817] do_syscall_64+0xcd/0x4c0 [ 158.859607][T11817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.861962][T11817] RIP: 0033:0x7f281918e929 [ 158.863385][T11817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.869342][T11817] RSP: 002b:00007f2819fea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.872299][T11817] RAX: ffffffffffffffda RBX: 00007f28193b5fa0 RCX: 00007f281918e929 [ 158.875416][T11817] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 158.878537][T11817] RBP: 00007f2819210b39 R08: 0000000000000000 R09: 0000000000000000 [ 158.881697][T11817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.884881][T11817] R13: 0000000000000000 R14: 00007f28193b5fa0 R15: 00007ffc4497efe8 [ 158.888012][T11817] [ 158.889255][T11817] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.892179][T11817] CPU: 3 UID: 0 PID: 11817 Comm: syz.2.1585 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 158.896863][T11817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.901094][T11817] Call Trace: [ 158.902439][T11817] [ 158.903636][T11817] dump_stack_lvl+0x3d/0x1f0 [ 158.905510][T11817] panic+0x71c/0x800 [ 158.907098][T11817] ? __pfx_panic+0x10/0x10 [ 158.908893][T11817] ? show_trace_log_lvl+0x29b/0x3e0 [ 158.911022][T11817] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 158.913443][T11817] check_panic_on_warn+0xab/0xb0 [ 158.915473][T11817] __warn+0xf6/0x3c0 [ 158.917070][T11817] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 158.919502][T11817] report_bug+0x3c3/0x580 [ 158.921225][T11817] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 158.923646][T11817] handle_bug+0x184/0x210 [ 158.925373][T11817] exc_invalid_op+0x17/0x50 [ 158.927198][T11817] asm_exc_invalid_op+0x1a/0x20 [ 158.929130][T11817] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 158.931804][T11817] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 83 6d 7a 0e 00 75 0b c6 05 7a 6d 7a 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 158.939381][T11817] RSP: 0018:ffffc90007f174f8 EFLAGS: 00010246 [ 158.941824][T11817] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 158.944930][T11817] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000040dc0 [ 158.948085][T11817] RBP: 0000000004000000 R08: 0000000000000005 R09: 0000000000000000 [ 158.951255][T11817] R10: 0000000000800000 R11: 0000000000000001 R12: 000000000000000e [ 158.953836][T11817] R13: 1ffff92000fe2eb4 R14: 0000000004000000 R15: 000000000000000e [ 158.956338][T11817] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 158.958362][T11817] ? rcu_is_watching+0x12/0xc0 [ 158.959895][T11817] ? trace_kmem_cache_alloc+0x28/0xc0 [ 158.961654][T11817] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 158.963436][T11817] ? hashtab_init+0x1b1/0x290 [ 158.964938][T11817] __alloc_pages_noprof+0xb/0x1b0 [ 158.966566][T11817] ___kmalloc_large_node+0x84/0x1e0 [ 158.968235][T11817] ? hashtab_init+0x1b1/0x290 [ 158.969774][T11817] __kmalloc_large_node_noprof+0x1c/0x70 [ 158.971601][T11817] ? __pfx_ebitmap_read+0x10/0x10 [ 158.973703][T11817] __kmalloc_noprof.cold+0xc/0x61 [ 158.975731][T11817] hashtab_init+0x1b1/0x290 [ 158.977586][T11817] ? __asan_memcpy+0x3c/0x60 [ 158.979428][T11817] policydb_read+0x7b4/0x3220 [ 158.981319][T11817] ? __pfx_policydb_read+0x10/0x10 [ 158.983304][T11817] security_load_policy+0x15c/0x12c0 [ 158.985412][T11817] ? irqentry_exit+0x3b/0x90 [ 158.987181][T11817] ? __pfx_security_load_policy+0x10/0x10 [ 158.989403][T11817] ? _copy_from_user+0x93/0xd0 [ 158.991328][T11817] sel_write_load+0x332/0x1bd0 [ 158.993239][T11817] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.995326][T11817] ? __lock_acquire+0xb8a/0x1c90 [ 158.997312][T11817] ? __pfx_sel_write_load+0x10/0x10 [ 158.999420][T11817] ? __pfx_sel_write_load+0x10/0x10 [ 159.001485][T11817] vfs_write+0x2a0/0x1150 [ 159.002895][T11817] ? __pfx___mutex_lock+0x10/0x10 [ 159.004489][T11817] ? __pfx_vfs_write+0x10/0x10 [ 159.006030][T11817] ? __fget_files+0x20e/0x3c0 [ 159.007530][T11817] ksys_write+0x12a/0x250 [ 159.008909][T11817] ? __pfx_ksys_write+0x10/0x10 [ 159.010740][T11817] do_syscall_64+0xcd/0x4c0 [ 159.012560][T11817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.014917][T11817] RIP: 0033:0x7f281918e929 [ 159.016700][T11817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.024227][T11817] RSP: 002b:00007f2819fea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.027515][T11817] RAX: ffffffffffffffda RBX: 00007f28193b5fa0 RCX: 00007f281918e929 [ 159.030663][T11817] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 159.033807][T11817] RBP: 00007f2819210b39 R08: 0000000000000000 R09: 0000000000000000 [ 159.036932][T11817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.039613][T11817] R13: 0000000000000000 R14: 00007f28193b5fa0 R15: 00007ffc4497efe8 [ 159.042828][T11817] [ 159.044672][T11817] Kernel Offset: disabled [ 159.046387][T11817] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:22:41 Registers: info registers vcpu 0 CPU#0 RAX=0000000000184373 RBX=0000000000000000 RCX=ffffffff8b801c19 RDX=0000000000000000 RSI=ffffffff8de19e08 RDI=ffffffff8c157920 RBP=fffffbfff1c52ef0 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486645 R10=ffff88806a43322b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e297780 R14=ffffffff90a81450 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6753000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3826a0 CR3=000000003353b000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000009b DR2=00040000ffffffff DR3=0000000000000009 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c1fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 293b6e36aea1b844 ce3a8a18bf992076 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4acb0f33cc2a9415 e95057daffd74c36 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea8ebe1c746fcc95 6f2420f9be13689c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f34c7dbdabc9821 7f9f65c58931aae0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004fc0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e0a000046920000 006153ee00615466 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b3d600002a3a0000 40e200008b620000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dcae0000000001a6 006153db006153d8 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006156cd006156f9 4ab4000000000090 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c9fbb9ba3e02b547 ad92ad7e9e2e9b9f ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b6b9a44f73489816 2a6305cd3bc6bf02 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0049b00064616f6c 2f78756e696c6573 2f01ffffffffffff ffffe30803800312 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006040601880338 0800018003018004 04800304800406a0 030008000690030f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 020001a00304ddfe eff8080001980307 85f4cc0800019003 020400018c030000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8080880001b00302 040001ac03100400 01a80300040001a4 0300020001a2030a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080006e003001000 06d00300100006c0 0302100006b00338 1000049003002080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0101808010000004 0100000008060601 7be80c80a3808010 0006800401000004 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080606015aec0208 0006e00300100006 d00300100006c003 02100006b0033810 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004900300208080 80880001b0030204 0001ac0310040001 a80300040001a403 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00020001a2030a02 0001a00304ddfeef f808000198030785 f4cc080001900302 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000014acc3 RBX=0000000000000001 RCX=ffffffff8b801c19 RDX=0000000000000000 RSI=ffffffff8de19e08 RDI=ffffffff8c157920 RBP=ffffed1003bd1488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801de8a440 R14=ffffffff90a81450 R15=0000000000000000 RIP=ffffffff8b80077f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6853000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3252ea2e9c CR3=0000000029a95000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000004e6a DR2=0000000000000007 DR3=00000000000002d5 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=a2b14527aca98d48 5e4504f55c758333 a2b14527aca98d48 5e4504f55c758333 a2b14527aca98d48 5e4504f55c758333 a2b14527aca98d48 5e4504f55c758333 ZMM18=c7493c72949a7f3d 2f1660492b619b8e c7493c72949a7f3d 2f1660492b619b8e c7493c72949a7f3d 2f1660492b619b8e c7493c72949a7f3d 2f1660492b619b8e ZMM19=310a000000000000 0000000000000005 310a000000000000 0000000000000004 310a000000000000 0000000000000003 310a000000000000 0000000000000002 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1125c971e24d4e24 268a98b493cb6190 647de11a9873a37e ea3ec609b3db70d3 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c5daa44d0635367a a8b019a7a2ceda10 01abe9e657bad3c9 008641ce1d0f282e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d4c0ab77b0e739f 229429e015ca2864 17066bab01e215c3 1c2562dbfee3fda2 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00040008000f0010 000a000000000000 0300000000000016 0000000cffffffea ZMM25=da1d83fcda1d83fc da1d83fcda1d83fc da1d83fcda1d83fc da1d83fcda1d83fc da1d83fcda1d83fc da1d83fcda1d83fc da1d83fcda1d83fc da1d83fcda1d83fc ZMM26=f1cc4afaf1cc4afa f1cc4afaf1cc4afa f1cc4afaf1cc4afa f1cc4afaf1cc4afa f1cc4afaf1cc4afa f1cc4afaf1cc4afa f1cc4afaf1cc4afa f1cc4afaf1cc4afa ZMM27=71d284f371d284f3 71d284f371d284f3 71d284f371d284f3 71d284f371d284f3 71d284f371d284f3 71d284f371d284f3 71d284f371d284f3 71d284f371d284f3 ZMM28=00000100000000ff 000000fe000000fd 000000fc000000fb 000000fa000000f9 000000f8000000f7 000000f6000000f5 000000f4000000f3 000000f2000000f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9507000095070000 9507000095070000 9507000095070000 9507000095070000 9507000095070000 9507000095070000 9507000095070000 9507000095070000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00007fc6829618b8 RCX=000000000000001c RDX=00000000ffffffff RSI=00007fc682b0d4c0 RDI=0000000000000001 RBP=00007fff58906880 RSP=00007fff58906760 R8 =0000000000000000 R9 =00007fc682b0d4e0 R10=00007fc6828e1010 R11=00007fc682bdd5f0 R12=00007fc682945408 R13=00007fc682bdd5f0 R14=0000009b00000001 R15=0000000000000001 RIP=00007fc682bf51ce RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc682872c80 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc68294e274 CR3=0000000037c38000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc682945408 00007fc682bdd5f0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc682945408 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000007300 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6365765f72647800 725f6d6f646e6172 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000558 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000840 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc682bddb20 00007fc682bde050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855ba255 RDI=ffffffff9b0893a0 RBP=ffffffff9b089360 RSP=ffffc90007f16e60 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b089360 R15=ffffffff855ba1f0 RIP=ffffffff855ba27f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2819fea6c0 ffffffff 00c00000 GS =0000 ffff8880d6a53000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000003cd2c000 CR4=00352ef0 DR0=0000000000000007 DR1=0000000000004e6a DR2=0000000000000007 DR3=00000000000002d5 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000003b80eee8 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2819211b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2819211b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2819211b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2819211b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2819211bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2819211c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2819384488 00007f2819384480 00007f2819384478 00007f2819384450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2819eed100 00007f2819384440 00007f2819384458 00007f28193844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2819384498 00007f2819384490 00007f2819384488 00007f2819384480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000