last executing test programs: 2m18.485805454s ago: executing program 2 (id=66): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r0, 0x37, 0x1, 0x10001, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r0, 0x37, 0x1, 0x10001, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) r1 = socket$kcm(0x2, 0xa, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40c80) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40c80) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00000002c0)={{0x2, 0x4}, 'port1\x00', 0xa, 0x0, 0x0, 0x0, 0x7, 0x715, 0x5, 0x0, 0x2, 0xcd}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400fe00000000000000017aa5c7d40000", @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf25010000000000000001410000001800170000000e00ffc0007564703a73797a3000000000"], 0x34}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001440)=ANY=[@ANYBLOB="1c0000f5020002000000000000000000000068"], 0xfce) 2m17.961752212s ago: executing program 2 (id=70): add_key$user(&(0x7f0000000000), 0x0, &(0x7f0000000080)="6ac1a2e7da534603ffd06f4bc169011fca2cb6a43299084ac7dc008c307f", 0x1e, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 64) bind$802154_raw(r2, &(0x7f00000011c0)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) (async) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xe97, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x7fff, 0x52a1, 0x7, 0x1000}}) (async, rerun: 32) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (rerun: 32) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800000028f2000000008607000000ebcd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r4) (async, rerun: 64) add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="2905507e8de53a9643e8ac4a5c185a1bcfba8a6e1422ae23ca0361b9b971e5ddbc94a30274adb39366c643d2a159c49f365c894f3401ecfb5c72b1cfb9c064f64fb624f9750167a18a0561b6ed6d4b30b73ccf9880cd95db8907be049009d6723d12cdf23d0c24669f988de8a0df84b592ffbbac8a1321c89346b58f43092b4efbcd36fdf72826fe99c061c344e2f1fb5496753f74267ed49925f6380073bc20f16c74f1c9118f6d67629afca696ad24bcef0251fddd7abe821a85f004bd032ce8d9ed5fe6583efac37ff4267d43f51a4e674deb233aabe9a953b622", 0xdc, r4) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m17.68302745s ago: executing program 2 (id=75): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0xc804) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x6}]}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x14, 0x22, 0x201}, 0x14}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000004c0)="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", 0x1a1) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx2\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = dup(r6) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private2, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0x123) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f00000000c0)={0x3a, @multicast1, 0x4e21, 0x3, 'sh\x00', 0x2, 0x80, 0x63}, 0x2c) 2m16.71249696s ago: executing program 2 (id=84): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) open_by_handle_at(r0, &(0x7f0000000040)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x0, 0x6, 0xeab, 0x7f}}, 0x200) (async) getsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0xe13b, 0x80000000000000}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000140)={0x0, 0x92d, 0x2, 0x1, 0x1, [0x0, 0x0, 0x0, 0x0], [0x2000, 0x10001, 0x7, 0x3], [0x9, 0x1, 0x79, 0x7fff], [0x1, 0x2, 0x9, 0x2]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000001c0)={r1}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000200)=@md0, 0xee00, &(0x7f0000000240)={0x0, 0x2, 0x8000000000000000, 0x9, 0x1a468a33, 0x0, 0x7, 0x100000000}) (async, rerun: 32) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000340)={0x10, 0x9, {}, {0x0}, 0xa0, 0x400}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000300)=@sr0, r2, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000380)={0x0, 0x5, 0xdb, 0x51, 0x1, [0x0, 0x0, 0x0], [0xb7, 0x6, 0xa3, 0x1], [0x1000, 0x0, 0x17, 0x5], [0x6, 0x6f, 0x64f, 0x8]}) (async, rerun: 64) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000400)=0x9) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x28000, 0x0) (async, rerun: 64) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000480)=0x7, 0x1, 0x1) (rerun: 64) r5 = openat$cgroup_ro(r4, &(0x7f00000004c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000500)={r3, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MAP_BUFS(r6, 0xc0186419, &(0x7f0000001c40)={0x9, &(0x7f0000000540)=""/240, &(0x7f0000001b40)=[{0x1, 0x83, 0x800, &(0x7f0000000640)=""/131}, {0x2, 0xb0, 0x9, &(0x7f0000000700)=""/176}, {0x0, 0x1000, 0x5, &(0x7f00000007c0)=""/4096}, {0x8, 0x65, 0x4, &(0x7f00000017c0)=""/101}, {0x7, 0x2d, 0x6, &(0x7f0000001840)=""/45}, {0x43, 0x34, 0x9, &(0x7f0000001880)=""/52}, {0x10, 0xe4, 0xc, &(0x7f00000018c0)=""/228}, {0x0, 0x6c, 0x9, &(0x7f00000019c0)=""/108}, {0x80, 0xec, 0x0, &(0x7f0000001a40)=""/236}]}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000001c80)={0x8, 0x5e, 0x72, 0x800, 0x5, 0xa2}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000001cc0)={0xa, 0x7, 0x80000000, 0x4}) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000001d00), 0x8200) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xa, 0x0, r8) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000001d40)={@any, 0x8}) (async, rerun: 32) getsockopt$sock_int(r7, 0x1, 0x9, &(0x7f0000001d80), &(0x7f0000001dc0)=0x4) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000001e00)={0x1, @bcast, @bpq0, 0x10001, 'syz0\x00', @default, 0x6, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null]}) (async) r9 = open_tree(r4, &(0x7f0000001e80)='./file0\x00', 0x80000) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001ec0)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000001f00)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r9, 0xc01064c4, &(0x7f0000001f80)={&(0x7f0000001f40)=[r10, r11], 0x2}) 2m16.659057158s ago: executing program 2 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}]}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) syz_open_dev$midi(&(0x7f0000000080), 0x7f, 0x165202) mount$bind(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m16.411520531s ago: executing program 2 (id=90): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a010100fff50000000000010000010900010073797a30000000000900030073797a3200d5190094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000010900010073797a3000"], 0x108}}, 0x0) 2m0.185408094s ago: executing program 32 (id=90): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a010100fff50000000000010000010900010073797a30000000000900030073797a3200d5190094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000010900010073797a3000"], 0x108}}, 0x0) 1m28.015912205s ago: executing program 4 (id=614): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x58}, 0x1, 0x2}, 0x0) socket$netlink(0x10, 0x3, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x58}, 0x1, 0x2}, 0x0) (async) socket$netlink(0x10, 0x3, 0x5) (async) 1m27.950706479s ago: executing program 4 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gre0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@multicast1, @initdev, 0x0}, &(0x7f00000001c0)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xae, 0xe, 0x200, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x10, 0x9, 0xb}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev, @loopback}, &(0x7f00000006c0)=0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x7, 0x700, 0xd798, 0xffffe000, {{0x7, 0x4, 0x0, 0x13, 0x1c, 0x67, 0x0, 0x0, 0x2f, 0x0, @broadcast, @broadcast, {[@generic={0x74ec054d4bef1043, 0x7, "9ffda31786"}]}}}}}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r12, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x58, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x8}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000007c0)=@newtaction={0x260, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x24c, 0x1, [@m_mirred={0x20c, 0x17, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0xffffffffffffffff, 0x6, 0xacb}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x400, 0x10000000, 0x0, 0x80000001}, 0x3, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x1, 0x9, 0x2}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x7, 0x5, 0x8, 0x400}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x349, 0x3, 0x8ea4f8325354b1b3, 0xa29b, 0x3}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x8, 0x5, 0x6, 0x8}, 0x1, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfffffffc, 0x10000000, 0x7, 0x12000000}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x40000000, 0x8, 0x3, 0x0, 0x8}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0xfff, 0x8, 0x2, 0x3}, 0x3, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9f, 0x9, 0x20000000, 0x4, 0x8000}, 0x2, r14}}]}, {0x9f, 0x6, "5d454eac8834eb7e141674c7d6c1c1c12304fa0ab53cae563dbaff156e961547e0384ce0fc13e77f1a5905b9e9262efef424147e624b65b1ddc143252d39558d1c009cc40bdb4cead16b99df84fb3683bd68932aa3269b8592b261cb6cab270e4c1572c9f4e1ba8080b83ba96d1e49da969a684d89fae33b1c9b1bd305440509d1494c0cbd315bd204d5b43a89ee97ab63df6b31377d67672ade58"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x3c, 0x2, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x29d}, @TCA_CT_MARK={0x8, 0x5, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x260}}, 0x40) r15 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xa22, 0x0) sendto$packet(r15, &(0x7f0000000040)="85e519bec3bbb707ed5befb391caaee113", 0x11, 0x20000000, 0x0, 0x0) 1m27.877270873s ago: executing program 4 (id=616): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101540, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) ioctl$TCFLSH(r1, 0x800455cc, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mlockall(0x7) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f4000000000000"]) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x0, 0xfff, 0xfbff, 0xd44, 0x5, "aff8b9563c6b6ca3"}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000008ffac032fdd44f509083ebcb000100000000000000"], 0x14}}, 0x0) 1m27.811898571s ago: executing program 4 (id=618): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000780)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0}, 0x68) r4 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x3d, 0x81, 0x18, @mcast1, @private1, 0x7, 0x7, 0x7fff, 0x5}}) r5 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r5, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x3c, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}}, 0x0) 1m27.789487858s ago: executing program 4 (id=620): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) openat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x44) (async) openat(r1, &(0x7f0000000080)='.\x00', 0x0, 0x44) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r5, 0x0, 0x2, 0x2}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 1m27.706356189s ago: executing program 4 (id=621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a01010000000000400000010000010900010073797a30000000000900030073797a3200d5190094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000010900010073797a3000"], 0x108}}, 0x0) 1m11.676910444s ago: executing program 33 (id=621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a01010000000000400000010000010900010073797a30000000000900030073797a3200d5190094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000010900010073797a3000"], 0x108}}, 0x0) 1m11.037739512s ago: executing program 0 (id=751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a01010000000000130000010000010900010073797a30000000000900030073797a3200d5190094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000010900010073797a3000"], 0x108}}, 0x0) 1m11.037395025s ago: executing program 0 (id=752): r0 = socket(0x28, 0x3, 0xfffffffc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffe04, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x1e, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x170) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfffffe01, 0xffffffffffffffff, 0x1, 0x6b9f}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x7, 0x3, @void}]}]}, {0x4, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socket(0x28, 0x3, 0xfffffffc) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffe04, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) (async) socket(0x2b, 0x1, 0x1) (async) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x1e, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x170) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfffffe01, 0xffffffffffffffff, 0x1, 0x6b9f}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x7, 0x3, @void}]}]}, {0x4, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) 1m10.878847289s ago: executing program 0 (id=753): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x40601) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200) ioctl$NBD_SET_SOCK(r4, 0xab00, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) socket$kcm(0xa, 0x922000000003, 0x11) timer_create(0x6, &(0x7f0000000280)={0x0, 0x21, 0x0, @thr={&(0x7f0000000200)="f9cd0c30f13b8ce40b8b0d3d1f4043e48cc8c444cdd45cac95462b38ce38e498684cd0a7a85e94122ddca03587a2cbe88b9d3163c5fec13ea4f69c4f5968d3760599b989126e7d4183d37df7e5022fa818c162dbeb125be09ecdc49faff4389d5d4652fa43cf420751323d6a18ab58914eb32c8e", &(0x7f0000000140)="be41020a051f516b988ae3d7d9bbcf287a367d552a2a68363a5ee6c6b77e368981724fa3cfb8"}}, &(0x7f0000000340)) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) lseek(r6, 0x7fff, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f00000002c0)=@ethernet={0x1, @local}, 0x80, &(0x7f0000000080)}, 0xc920f1266dec2aa1) 1m10.376532349s ago: executing program 0 (id=754): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x10010, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl(r0, 0x8b01, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) getsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x30, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {}, {0x1c}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x40000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1/file0'}}, {@redirect_dir_off}, {@default_permissions}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat$null(r4, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r6, &(0x7f0000000600)={&(0x7f0000000540)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)='~', 0x1}], 0x1}, 0x48000) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4c28, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)='i', 0x1}], 0xf, 0x0, 0x21}, 0x805) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m9.382478567s ago: executing program 0 (id=755): syz_emit_ethernet(0x3de, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x3a8, 0x3a, 0xff, @remote, @mcast2, {[@srh={0x0, 0x2, 0x4, 0x1, 0x4, 0x30, 0xa4, [@private1]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1f, "06aa85616167c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b01000000d206000000ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f0a6eba31fb68b2d734a6671e27182aee96f24a4a5cf390da000000000c0272479611e4f7f429125ba825a766fe9f105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212bad518db9848e7723dc7cb24689b3effbca39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1m7.539759715s ago: executing program 0 (id=761): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @private0, 0x9}, r1, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) r2 = syz_clone(0xb9332000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000100)='stack\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x8d7d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r5 = socket(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[@ANYRESOCT, @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYRES16=r4, @ANYBLOB="405e8ac24c8a5f9c94181ba901d677c7bd5302133aee9a83f30e20b2bc42aca3fa221381f47f65355dd3f483cae6dd2fbff700720a8712c44f05cba21c5246c10c34fdbac3ea035513a9597338e0b288cabdce9b9d720ec470723214bc75bd0eca5b63baea2eb6133bc7003b3aa44d3b117faba3e7bdba5b413aa8ab7a7788eb39ba60c2f37167ddc49c727b55a021dd440e50286634d2d468f060e6d37e3a75aab64d5b2a1b52a3ecb45386b026101dbbccff39eccdd9c644693b3e", @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r6, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r6, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r5}, 0x20) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x88) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x0, 0x0, 0x3, 0x0, "9ecf3315567f14d56a87d1b2cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f034d5ac33e31d612d976920300000000000000503621ec6679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], &(0x7f0000000180)=""/129, 0x3d, 0x81, 0x1, 0x0, 0x0, @void, @value}, 0x28) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a001000", 0x26}], 0x1}, 0x24084040) keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, r10, r9}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r12, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r11, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) close(r7) 1m7.437216373s ago: executing program 34 (id=761): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @private0, 0x9}, r1, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) r2 = syz_clone(0xb9332000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000100)='stack\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x8d7d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x1, 0x18}, 0xc) r5 = socket(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[@ANYRESOCT, @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYRES16=r4, @ANYBLOB="405e8ac24c8a5f9c94181ba901d677c7bd5302133aee9a83f30e20b2bc42aca3fa221381f47f65355dd3f483cae6dd2fbff700720a8712c44f05cba21c5246c10c34fdbac3ea035513a9597338e0b288cabdce9b9d720ec470723214bc75bd0eca5b63baea2eb6133bc7003b3aa44d3b117faba3e7bdba5b413aa8ab7a7788eb39ba60c2f37167ddc49c727b55a021dd440e50286634d2d468f060e6d37e3a75aab64d5b2a1b52a3ecb45386b026101dbbccff39eccdd9c644693b3e", @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r6, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r6, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r5}, 0x20) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x88) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x0, 0x0, 0x3, 0x0, "9ecf3315567f14d56a87d1b2cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f034d5ac33e31d612d976920300000000000000503621ec6679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], &(0x7f0000000180)=""/129, 0x3d, 0x81, 0x1, 0x0, 0x0, @void, @value}, 0x28) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a001000", 0x26}], 0x1}, 0x24084040) keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, r10, r9}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r12, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r11, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) close(r7) 3.381944221s ago: executing program 3 (id=1394): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000180)={0x60, 0xb, r0, {{0x10000, 0x8, 0xfffffffffffff801, 0xe7, 0x100000000, 0x3, 0x5, 0x2}}}, 0x60) write$binfmt_script(r2, &(0x7f0000000d80), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000080)='net/ip_tables_targets\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=virtio,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) 3.151422485s ago: executing program 3 (id=1401): r0 = syz_io_uring_setup(0x24fb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x24, @short={0x2, 0x6fc8bb28eab68c3, 0xaaa0}}, 0x14, &(0x7f0000000140)={&(0x7f0000000540)="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", 0x801}, 0x1, 0x0, 0x0, 0x440c2}, 0x4008805) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000240)='posixacl\x00', 0x0, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'pimreg1\x00', 0x200}) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) 3.057502228s ago: executing program 3 (id=1404): r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) (async) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3f2100005a617bc8221d111332d05afee6e316828324b86abac7cb5912da729ee45fb49cdc9ecb9513c26cb4744772d602eb7ea3f595fc3844137b05ab9aa25ec74d5961d3dd5c85d48470445cb8cd10bdf01f2ad3d3018cb2070ae8735d6d6bb2091aebc9bca28e2d3050f893eb219ed5d3c7d9cdab81615ef3dceb7d4b45445c62a5cb7f78b1145c75edc646cbe9891742f292061611b2cfe04d1c0c2aeffabed85ec4afb5a1719d9e275edc549acd3708ace494e94c7d900d1c18a112660214f7f592b198", @ANYRES16=0x0, @ANYBLOB="000029bd7000fedbdf25010000000000000007410000001400180200000f6574683a626f6e6430000000"], 0x30}}, 0x4c040) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x8, 0x2, 0xa0363159, 0x5, 0xe, 0xd, 0x4, 0xf5e4, 0x0, 0x0, 0x2, 0x2}}) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="3e0f01c20f01c4f30f090fc75f6ebaf80c66b81279808866efbafc0cb065eeb8ff038ec0baf80c66b8e958d28966efbafc0cec66b9bc08000066b84a6d000066ba000000000f30f30f1ec7baa100ed", 0x4f}], 0x1, 0x4, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000000)={0x60003, 0x0, [0x0, 0x8001, 0x0, 0x0, 0x3ff]}) 2.937242029s ago: executing program 3 (id=1407): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0xe, 0x0, &(0x7f0000000900)) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x0, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) read$FUSE(r1, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, r4, {0xf}}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x0) r6 = dup(r5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x4) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x14d000, 0x0) ioctl$DRM_IOCTL_LOCK(r8, 0x4008642a, &(0x7f0000000200)={0x0, 0x1}) copy_file_range(r5, 0x0, r6, &(0x7f0000000640)=0xd000, 0xd000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0xfffffffe}, {0x0, 0x4}, {0x0, 0x0, 0x8}, 0x0, 0x3f0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd37de1182026f0a7}) 2.873275012s ago: executing program 3 (id=1410): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDENABIO(r1, 0x4b36) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x0, 0x0, 0x200}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.790072053s ago: executing program 3 (id=1411): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000003c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x1000) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000000)='\x00\x00\x00', 0x3}, {&(0x7f0000000100)='P', 0xfffffe97}], 0x2) close_range(r3, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000040)=@arm64) r5 = open(&(0x7f0000000180)='./bus\x00', 0x283fe, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r5, 0x0) getsockopt$packet_int(r5, 0x107, 0xb, &(0x7f0000000440), &(0x7f0000000480)=0x4) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44007) r6 = socket(0xa, 0x2, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x24, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/130, 0x82}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x40000001) 1.378053284s ago: executing program 6 (id=1432): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fchdir(r2) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x11}, 0x18) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000100)='./cgroup/../file0\x00', &(0x7f0000000140)='minix\x00', 0x240000, 0x0) fcntl$notify(r1, 0x402, 0x80000003) fcntl$notify(r0, 0x402, 0x0) 1.377690049s ago: executing program 5 (id=1434): r0 = syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x106, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="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", 0x0, 0x1, 0x6, 0x2, 0x0}) r1 = epoll_create1(0x80000) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x1}) 1.314365607s ago: executing program 6 (id=1435): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x2b, 0x1000, &(0x7f0000000080)="a07bacd30c40f0fa8ac4fbee21241167952a7212aa939779cd7e6e6340c63c0930f45fcb56bc9de93ab4a9", &(0x7f00000002c0)=""/4096, 0x8, 0x0, 0x7d, 0xa4, &(0x7f0000000180)="01896bdc20c7bdb62e8508724f060fd2192eab860b8eb891b1c52df448fa440851b20803e87aa551b5070f094c0f78ebed5234a48451deca4ba78b13e6fa081e20f41a9da9b5c545ae1008914c42af9174501d73b561d0ba793ef3ca77ca4194d77aa2279a50c50d1db8195394fdbb9d68ae5b3ae31dfb64d9736c6911", &(0x7f00000012c0)="3749f8d124c1247b8fcc5faa2945989b0a0bfe0c02ab6ca3286550735967e2cb108aaa8dd867946c1f4f40cfd931a3f26770b05dcf28927cfbd3c36726ded888a53168233a8e002340fa98507d8035333b9671370ec3d5836cc70eabd1e5ae5d960d0552f4246ac01e87eb50c1ed2f7854cc0f66f529528fd574ede1dc5859415241471e460537f1976e25195bccd05518fba4599a7d344a8a39783b3a5691437ef7dd94", 0x1, 0x0, 0x3}, 0x50) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x77}], 0x1, 0x0, 0x0, 0x0) r2 = syz_clone(0x80100000, &(0x7f0000001440)="269e78e23a1f82c4a2ea825fb30b14353e1a341f77b0188ce17678d54796e66977926fd3b69ffe153cb210ebbd4ba3", 0x2f, &(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)="0fb099f8e44a4aa5730cfcb0c8736372bf318c8dcb6212aa9563cfaf33e16c94150fc46caf294f2a957770fab4573781f6371d60d91b0b90aed2e86d724db3a68fb3ddbb4bf541a2cdee3fce1519352d496daba388c40a11ecd7d543fd075911253c486ba1c506b6d9f4e80d63d1347981a18f3c84c3b26d47e55bd2abe346271547b49ed2a4bf26acefbe69da5cb704d580708abf5fa4273a1faf81c41f010ccb48b65811890276e0733ed7d045b3c3f359884afe54") fstat(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001640)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private0}}, &(0x7f00000017c0)=0xe8) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_clone(0x3000, &(0x7f00000018c0)="485400bd5c43e3f2b1085b2f7155bea9684a3dec6ba017bb300fd88ea0", 0x1d, &(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)="df53c6c5e1e10fcf9fb2ccf86b4b6087038c60dabd64045fdc6f3847c80409f4cc1856ba4a9d5084fcabc6c9bfa2616a570b77389dcb4933ff1def0d8d1561aad9966bf9de3acb76c5f9fca24b9ebe08d38b4bffb0558d0a71072da719ad08884718aa2c9efe231c86a77c57ceca4096eb80d6dc1aa56666c6eba39cc27bb11acacf1b4e3c905840bc28eb0506eea48a793825a9bdab44f05fcded58d7d3ae4ac1f2c5c7e64bf0e5837668881b5375b9329695d9f13e385fa28924ef3bb604fc34f0945decb34d433e375dc000876ddee06746d21f468064166669045ea871c3076ad450fe4613662f12bda705c335") fstat(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = gettid() tkill(r11, 0x7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001bc0)={0x0, 0x0}, &(0x7f0000001c00)=0xc) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) setresgid(0xffffffffffffffff, 0x0, r13) sendmsg$unix(r1, &(0x7f0000001d40)={&(0x7f0000001380)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001400)=[{&(0x7f00000000c0)="ee9b5b5b7c6e6d2437c8fd2b84186c4efa916da26d8ed630ed32f2232ff6b2e474c5e9a6d03fa1f0", 0x28}], 0x1, &(0x7f0000001d80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c220000000000020000000002000000f88f205ddd3081edb5adaaa0ae683f619ab4fe6443d209472dafe50d6836b73a06f5c4992a868b248a70ada1269954cf7ce5727f63b0fbce8d556066aa5ca40996ed1d168168ae81b005fd785dcad3243356e52709a6f570674592109f99618688acbc", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0], 0xc8, 0x24000000}, 0x4000000) 1.313209462s ago: executing program 5 (id=1438): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r2) sendmmsg$alg(r2, &(0x7f0000006680)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="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", 0x100}], 0x1, 0x0, 0x0, 0x20040854}], 0x1, 0x40) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000540)={'sit0\x00', 0x8000}) recvmsg$can_raw(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x2) 1.250008854s ago: executing program 6 (id=1440): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x69) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xca) 1.24978609s ago: executing program 6 (id=1441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xcc}}, 0x1) 1.186439693s ago: executing program 6 (id=1442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000080), 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x8) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x5437, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) msgget(0x2, 0x217) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000780)={0x1}, 0x8, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) userfaultfd(0x80001) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000), 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000080)='./file1\x00', 0x12b842, 0x0) 352.541599ms ago: executing program 5 (id=1443): unshare(0xa000200) (async) semget$private(0x0, 0x4000, 0x0) r0 = socket$inet(0x2, 0x807, 0x8) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x0, @multicast2}, 0x10) (async) unshare(0x44000800) (async) listen(r0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0x3}, {0x0, 0x3, 0x1800}], 0x2, 0x0) (async) unshare(0x60400) 287.365891ms ago: executing program 1 (id=1445): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x0, 0x300000f, 0x13, r0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000040)="3dfeb16709cca4c68ec0a1896a6d39292259e90f7abfdaee0f52b82dd5a79833afd765d3272836d800d74bb1a770183e755b9f370600000092a0e4830800000000000040bdb04d5d", 0x1f00, 0x48) (async, rerun: 32) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x80000000) (async) syz_clone(0x7080100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 286.913974ms ago: executing program 5 (id=1446): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r1, 0x8565d75cf7886128, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x529}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x12, 0x3, "6b2efa89029bcc3dbb2b64f9749c"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24000000}, 0x40810) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) fcntl$setlease(r0, 0x400, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000240)=0x7d, &(0x7f0000000280)=0x4) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f00000002c0)='timers\x00') writev(r0, &(0x7f0000000880)=[{&(0x7f0000000300)="f280f0a6ed", 0x5}, {&(0x7f0000000340)="54553add1235668a5d16392fe775c84441066bfed5bdc1a2395280ba88ae3c89f3dd4d79fe16d3490def47301928e872ee6f50eece00070a7a47533397a02741989269e0c64287e0a7e9109d3fbaabede64d7ddf953c0af8c0ac2cb1b760e8f1d1c8e11bb22fb9762da570421811d93132184df11fbb0025d5e2f78c6bf27959796c1409443c550f52973ab1db2526f4c5f213296b239e39b6e23d79c1812d613e2339b4a7f2206e3b6bcf263d44aa3376a1658d8d81385e4d73df880a5eb2e261be278d24f01e516accaa54cc280c1cf5f67c3eeec5c05ecf0f3306", 0xdc}, {&(0x7f0000000440)="67eb2fcb8770be58f79027d814d0192722e459d2232d7c4ed19c51b6d949d82832f1b5da9dbc7e0ad8362a69ddbd86200792c0837330d97e910fa9913e4ff1857069d675633a18288614d1646025721b5defebca648ecf799c36115ec967123a63f61eacaa8fdd4206de440c37f7621ce9ebd8fa5493e15b38d10c2fee004186c936ae1ee8249b79de3df4b666be481954199b2a24f0aa8ec7b8", 0x9a}, {&(0x7f0000000500)="93f31980b06aa4d8673d66eb9dba3375498abad42ed3ba711083468e99da65a9cd3493008a496c5d4b829e41b6cc3e2ef9452b07c3c58dd40df14143ef5eb3ded28e", 0x42}, {&(0x7f0000000580)="e9e0eaa4902eaa05e4ee9c3f836c1d105c482929f12dda7ccec61ff168abe896cf50be54e350451f6f2fe7da0140d3936d775cf6293b8b4dc0e6dba675bc9d6a36dc7a213e3fdd79bd4b43454fcab17d5dcf4a09e4dc340664c34f44245ac4e2c0f2046c59d4ffac7c58c97c19ff38e2a0856debcc9699cd5099e56c83e8b43ab101aec1c895f52ac259997370dc02c4a616cd0cf9e23486cfeafaea9e3e713e25b60c8af96bb84e0b3c1764c985c7cfa1adf4a5e53eb331beae3f15fbd10c326714293ac4f49cb6ffd09e6b7c6608f0015872d86e48e133f0", 0xd9}, {&(0x7f0000000680)="71cb536697b380b39863ed78a977a5637821794e07", 0x15}, {&(0x7f00000006c0)="567b5fede37df68ee137fcd0a5e04003c7676ee860a0cbf0acbfe89527db00a5a5b6038dfc70598eb8dce68925658c667e007f71b680a245175d71dba9f8bbe2f21c07275ce9f16807627ef6cc221f4f179876f61de6232051a8323fcfc369fb599d8c51584555a1f7322c6fa5ebf43a28354700b0b88f7850414fbb5effe1c92db7a30fdf8399831681ea67ad28f52c44c326c0a5646afe94", 0x99}, {&(0x7f0000000780)="0cd52f2b109a3147e19ba2719ba3", 0xe}, {&(0x7f00000007c0)="44d24b16d2195ff0ada7810ba5d031c199e7e6088b7b61e04a8b08e93aef9d4504e70cce6c5384951ed3b13158c1f8fccba3f8b4602bad14c938b1a6df5c279cabe84f1a7527254028e52d325bb72c60ec46620ed035faa79778e7ea4257286cf04c9d1235b853a44a3c3ea8355198fbc9d1eb928e200f6da234bf092d705239ff433d0c9054bec072bae3498c0bb94497760fac0d995ad7604ed6d817e7", 0x9e}], 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r7, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x64}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r6) sendmsg$TIPC_NL_NET_GET(r8, &(0x7f0000001d80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d40)={&(0x7f0000000b00)={0x1234, r9, 0x318, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NODE={0x1094, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "68ee443493e6e87469976914c15595158017c70046e1219a33fc302e65fd42e0e17aff5936b7dec62fcecaa15c87ec71dfc75482500bf63e6c34e9c6d72368bcc5167c2376ed704b8936b3b8420d2b8be791058f32f85d17177b532cdd26f289c9b818df3476ca28e008887820fc66f39f482ad69d06c0f26c88a820d94b5b61424810b5ceb44cafeca3b7bc1e293dd55b76ca537ecb4928fe8ac1c7e57c5d4f57fdbd6e649e2f4afb96d5959090d2ad6484501db9f60bdb59ea18beb4908239b91c93fcf327ad13046d91baba8766c9538fb42859dfa8932dda4a65ae094e7ad2df2fe7b3cf7234c6008d9bc1fac029da95f5b13786990fb18aaa35f693e1119da83a5d6c9e05eb51119c7ccdcac1aee4006554e1a180424bc9e53fedd83d505d875c06817bb4f500bdde67c27424856582ab11ea913eb4702b877c772b0909909a2f4eac54ad687d61bac2d4ed66f074942a628b799f861359e0abdb7ce54a9604e4caaaa5cf7056ded9eef0c73b4a69d3d837470487b2cf62146833520c69de253f98408a19af8591699a5c266c86e82b96c8dd198dc9d22c958498eeb2cff9217b0a0d860341e3a85167cf0798ed720aed7011ccd9d36876222c2f762245a80f12bcab6381f8e20827c14c5d33867723d5752f4223a3233f8115265d2143acc006f4f620fee9caedd68cd2601b474f337562c47835ea36ab60c5ac766278d6ff9a8a9165cbbaf0be985b5a08b052bd4981ece359624a97de99c92b6bbd641baa4b74c77b27c314c98dac373f3e2c33a828f6bf629d6b465dd6a3d55253f0aa2a26a28aead5252ae517eded368eb200b0f93dffdae54c4a16e5f878c98ccfdfb8c9be4873ed091d7c6ea101719166625e052babcc3f026c860c3eec32a71cc5682c0eee26cbb6809a0370ef20c3ec3032a88fa337c986e46e5741bec4e3329c654e0db54d65170085e4d792c4799960ffb0ae036b9d1bbc36d52e8dc19162a68bea22e7dcf4b9dbf1ef4228966ac28ed3e5afc26c55ed818b28010da7be75ce88d8a4297bf21047dbfc9f3f64327cb9761384c03f49fd738bb4bc082faf73450da1d900f3c331800c40f1557e23c7fd271c53809c4125a4097c4debdd416a6f51467414916d67b829985350923411f3cfd2a453700f559e5e2e3bb586b9110b6390dbc63297646cd3f9979d957c2e869fdb5d2924f987afd41a0e80ce482c5b3a0d65dc05c6375de692b3c2397771cf440daa5fc8b538d203bc5b7a3ec1efedbe6487a660c140c04bedcfb311b80d9e707916a02dda3be208177b9bf9295486608154e3519f46e89e312c2e25b557c7c7c7da8655d47870e031c053770e109e44c95a54d2dcf4f99625c5f5c90cfa357ec232276f8ec41bf0592294340048e7cd6b263adc1cdb7eeb2584277a2ea7a16550b6bdb744c43cdd5f948ef2332c9d3581200bc4802ca5c4f384c3a01c227e337db3a6dac72ca7a238706778c4ccd60fe3c8b60295232dcccac8ab1f64b98d44c675b7383590a73a3fbfb172d5e0d1fac4c8c55259d94275eb009bd0ce094481c55454fb1ccd0fcc98a50d000e522d202a6dc3f4deea454830751631210576dc27f1bf3f505e15f6afbd1e809e921b1ab8d526878cca0160aff39bb96bf59716b524ea43cb079d97eec32207026237c513040175530421faf604b22aac2904809e802fc89de95ccd97a9f5bbf5941091860f4e735ef2f5df823231e5dd716fa46f752794d4487a06d511f89de5d163628db159f2260f5e1f6049435821317b905d0f5d0362014ad62ce4490aadcb0cef72060323ce454a21b4f258078b942c4ee4848ca8df3d637af381465402c3ae685565909a93a31d97e46007d13a539fbcbfa6340cef17ae56cdd8706995324166e8f0f0a9487c6ba3d97f24e4ee8f56e47e84080f4fcd65f731f3304b441316e65ac648172d9cd950bdee2431c70b794974ab0a041a83f3c2961b53589b9056bc503b832ca60887ad4a004f52929261edbf0c4535dc2a28309c647a54ca775927f17b5781a737db972e8c599e36880213233c29fafc03d93c0877d3fa57086412e67a86f500fad0ee815ae36c2cc5d91d3ce5d804ac31f5b13bfc71f3d4cb30d32b15d5e8d4949468d58823b0aa8342dc792dde332d0818759bfc436caca792fce44060fd4a4aa07b025a09fe627592d3caf85bd89b3f257be2086a67182ad9f5a83856689cd8d48940e84a524f3841709b7dd41f5faf9377b97995081a22200be2fa8251e86e02d4daf5539e113698921ca6a7356d8559cb37677158108bc5d7058a48893bf492587bf5944d6ec246949a01a10f43d43f12c02566e8fe9d1b5d122bada028474fbd8b413bb71129d41d310774b8bd4d43c76cfc722533638c25b6855e9e0e1fa013303835485e0ff81f7b4677744eb704743c3c8c67f163a92c81e63107e4424b0ab11ea8f4ffcde48c04a6bad65315f180aca0da81ff47df92f3626d64ceae92a4a5d6b5dce86ce2e6f81559a1f0722c832bf8902513e24855e17aa231384e030e7a4d27ef96b127307d1409fee7a7183725f816fe93730619e3186cbaca901ea7ad13ed48d987ce486bd0cd2bb117dea99b38862f24b29bce22f46ffb2fbecff4c1fdd1b63995b27e1b40fee55232452eb82300006a1d260a9820c9767ab7a70ebe906ffdec3dd9a95c913228c79f6f85d9c14996101c2b9cf92a9c35b2616c2372c8f6a13b9d59da0346379cb7d69d1c96fbaad0ea538fbd0e22b1bc3528f11c4690e060b589480aaabe94ad6c7316d1076084795b74f653e5c45ea4112807c262606e53736aad1ed78beb4b8ad705e12605774484568935c887d261dfdac23b80fcf26d1361359f9f3897498ff7de2e091f2b7f534293d3614f9601d9cb095b0f8596c6ae15f66b910a759f34128a0b854e487ef7fbc30dab03090af8b8969a91096543c36c9143febb1c18ecbf425aa41f07c113095af95e41b8a1c0457fb432bee931b3678f14fb01289d0447346af104697e5ecc9297bf7c3e4830f2ae4889c2226276fdf1f003f3f864b59f32891628f78727c53382e2b2f9cf019b28af6e231498cf518dc619ce4afbe446d9269d08d011c35ca83bd48698200bbaab7812e99abb0682e5ab63b5571f428ff42884b8e8f1ec7a614e94f347d0a2fecb92c69baef23ba209905487d3a279503ac8e7c9496cf18ec8bf49842b1393da95912261bc886d5973bb3d3c3f8faf22a22f37f32225d09f87eb24fdd7a6692f0b0f663e68898f4b610f1ad9c3e5b8dd4046979bed872957417752c3125ae2801c3c2a2e42474bdc87c7b366d95c1fea38423a6c8a648ba3ff84a56b1febc77e64e73159fbf02df5f0530fb8e2a914ecc8abacc2e3fc13fbbc708f9e3361ec0756aeb818f4002f86fd0fabc87a25f04929d340a0c0b5d67c16d40970aec2f5d447e09d0370d00ef60e9e52afdeabe7e045c3e7f453394b6a20b0bb89c979b9b43a9b236fbf0aa675dac47cd26cea5250e9649c12ea04d92d8d7dcc2c2cd2d6e99db2b8f4b5d52ec623bddfc71c0f6f1183a5541032be0f663e02bbf0bc8603e574ad90dd6a850a4a69cc068121e3ea30f72c8ccd31a7dcfc1681ddeef875b8a03fe8c01854d7af19aa31aab9ab441980001270eab7c4fd859f47d3787ed40dbf9fa2a706ef60f2d77618033d0e9d32e8624341a172c79dd5124f4f86c7b937e226b93f2dd99ec5c0439ebd3db5aee2a5ad6d075cd94f32c1c951a2a5b9bc751d47d831438891120a674e7b043e68737712dbfd0097ecfbf394a813b4d373dd86e3bbdca5e3842267bf148f25899a82372eebffa4c584da69f06ddf0b519ef067947782d12506a0da7f1cb1e326cec0ed1e2ba08dee1ed6390d9940ba1b9ddd00987226be756001cb1d9171c491e1710972b4dab07bdd9a61490570d9971daa98c1f2c968a901109d2d57d105eba1cddd0b11b661ee2de1b3863d529ea12c9d95a9091527893829c1a87937350d3b04adc8c3a1a909405110673f25f2894e42e512c7ad1eddf3660615f3cea71af7254888866bf073e0efba97bf9d2e50a177c87985a4fe2adf211191508b8f1676dbd9125eac6153a93e4cab689b95e31fddedb413ac6fe5689b93d1e42b668a7199b564df741ecab2e95382ba118d5e20e890b43c0a3f48e2c982bb480eed11f25d16c91e27670a6e2821eb6580af105018e61e5f45fb95f379cabcff25c2b5658ab913413965cd39025d4b0ebae44512d5179cd644958d1da4d349b862bae00be706d4d912e7744bdd179f27011f8786b5b9ea0fb84b808ad4a8009cb54e857ffdef5ca8e61ca1f46c314ee8e09b7fa55507782f81756b95a3bc770310bf89f47d86f9451c002b6365b73f74a66307e424a25f81b7577e380774ce47074101f960c68b66d8e0dced5aa409d1e38a2e1edd99f51964d5757d2b58869e41be113bd26ef40652d6a506dc37926e3e8404cf161ac2d276003802c3e97e562147d9fd9fdeff24fe6333e3ed3adaa55ca93b983139570be5637fbc895f6c85f7202a91094bd3f5dd7c07e6b8dcd20aced6a649d484cf084b0005cf2e6cbfa8a2365df3f5c55426bb1f4bc7b4431c5fa4de7e2a83d2924484c2f7e0446aabc612f84cb88ae7f299d7db818811387c5c6d352dbd92cbc1b17ef66c96b29c2c2f4d8ab909bde4a5eab47ecf5bf3c415dfa806ec76e69267de7a0c2342cfeb4dffcc07694093733319bc6f9342ceb056b7bd2c5d66f516f9200391602d2e8348b039374479ee96563a3133341999507a3e219f5eab9221b854cf81e1ed8b87fcdbd7cf2bfcfce9abab7a53035730b296d93de2ebafd07b780a2ddb0ecfc785b1caa44cbf087cdedd637c804189132a28a448ab951be2b1a6ad43dc5699ea032ea84d77a060e0b9c0c3fb59446e77211f0ab448c1a25982d078f4085b28f7492c5d9ae54c8223e7e27b6a9eaa441cdad45b3d85553be0aad90095a188e75b852747c52f5018dfe7b106624f74e033c624bd53711935493e24fdd91fbe4b0acc808b4a7f288bd45be9e918886494b89e01adde5edad2f0dc43eae649714925b0c33ba25d6c772ff9d3a0444746269f1afa08e4111a3e57304a77ae498d38151769b8719d37446dc9ef0c0777dd3d44cdab4acfc0befa32d9a60f85b2be09c199ed308ca61e5c9beeca9f7171764e1ed970dd765674800374182c21e6e8a713a8b5a798c6d76836cac1940a583f748607f9582dab31e4abdc6095bafbb848fee27230e549a4f6e16d187e8d1fcab03ef4d511337b957efad5d2259971d670c7fdbf60c8c68394114d88224e9a0e37608ab86be29eb5629ce5ba587ca2a16d2d9b30f6a31682f51adfcfd864c9847621362b84f000c8825237f3976ae10cfd40a04c1bde7e0322801c340279e1057627dcd74f61f1c8fd0fa36435e91e5892017747a4e43b51d0984402ff0a3110268d410f68192187f049c23e58623b288a904be00d0131caa4264ac921522fd19e709274d7ee9f5bc90f2f7b6d02730e90da71fcf8d488ca7bded7c35a8d550db1cdd7799537791c04ee02cd44ab95b3453a6cd93de4e09707f3378dd49cb428b757695f72d3f62dcc7e2feac5266b866df8cfb7338f7224207b021691c9ef145299792093cf44f536179ac2e7006f0d56383bcface05e789167a5814d789dc807225ed7fc43b47554108958b5fe5d69d6bc12545cb7a2a731417a4936d9bd2cb598553f78a1393265a7c08d12b5bb626f7950df78fb9161a83b13faeef0af50831f5f"}, @TIPC_NLA_NODE_ID={0x60, 0x3, "a55094280ad409fcc0533a7135ad73ebe4f11fced39462746dd6d3852a3a77317b714598a092186cacb589d4986a3a67d8fac8a0a7d71b5b51b509347f1b6613e24a47a340107bdc6bf11dbe56162a2f25f91894f66708c62fdc1eda"}, @TIPC_NLA_NODE_ID={0x25, 0x3, "c2aaa3ff9e326290121cf3a3f04cfec2a3118cf2bb525f3474bd4eff1fee373eae"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb33}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1234}, 0x1, 0x0, 0x0, 0x48001}, 0x40850) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000001dc0), &(0x7f0000001e40)=0x68) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ec0), r8) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000002080)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f00)={0x128, r10, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x128}, 0x1, 0x0, 0x0, 0xd0}, 0x40000) r11 = signalfd4(r5, &(0x7f00000020c0)={[0xff]}, 0x8, 0x80000) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r11, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r12, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000c5) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002280), r8) sendmsg$IPVS_CMD_GET_SERVICE(r11, &(0x7f0000002340)={&(0x7f0000002240), 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x14, r13, 0x300, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x20008000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)=@ipv4_newrule={0x30, 0x20, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x14, 0x80, 0x1, 0xe7, 0x0, 0x0, 0x7, 0x10}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7fff}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) getsockname$packet(r0, &(0x7f0000002480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000024c0)=0x14) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000002500)) r14 = socket$netlink(0x10, 0x3, 0x2) connect(r14, &(0x7f0000002540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x1, 0x1, {0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x80) socket$inet_mptcp(0x2, 0x1, 0x106) 286.794493ms ago: executing program 1 (id=1447): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x200000100000011, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) (async) write$binfmt_format(r0, &(0x7f00000002c0)='0\x00', 0x1) (async) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "004001", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], "e4073d2d9d9074f6738f6fe9"}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2e, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x20) 286.57771ms ago: executing program 5 (id=1448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="61050905e504060605010a3d56332f077cecf90ab915e101260d"], 0x1a) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r6, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000180)=""/172, 0xac}], 0x2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r5, 0x709, 0x0, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r7, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffff9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000090}, 0x40140d8) 286.294373ms ago: executing program 1 (id=1449): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @sk_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x2, 0x68cb, 0x80000}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x7, 0x1}, {0x2, 0x5, 0x1, 0x9}], 0x10, 0x3f2, @void, @value}, 0x94) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000010000000080007000010000018000180140002006e657464657673696d300000000000000800060000100000080008"], 0x44}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x1c, r1, 0x48212b8952c3affd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x40) (async) r7 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x94040000}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x7ffff, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0xc, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x84, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0x16010000}}], 0x98}, 0x0) 284.857206ms ago: executing program 6 (id=1450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="66410f3881560c66ba6100b800100000efc74424003f010000c7442402cc6d0000ff2c24df18650f01c40f01ca66baf80cb835875f8aef66bafc0cb0a9ee363ef3460f09440f00d9c74424006e000000c74424020b000000ff1c24", 0x5b}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000280), 0x22200, 0x0) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f0000000300)=0x2) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x4}}, 0x30) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x2) getsockopt$ax25_int(r7, 0x101, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$ax25_int(r7, 0x101, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r8, 0xab0a, 0x1000001000104) r9 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200) ioctl$NBD_SET_SOCK(r9, 0xab00, r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r9, 0xab00, r10) r11 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000240), 0x184000, 0x0) recvmmsg(r6, &(0x7f0000003d80)=[{{&(0x7f0000000340)=@tipc, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000540)=""/97, 0x61}, {&(0x7f00000005c0)=""/68, 0x44}, {&(0x7f0000000640)=""/100, 0x64}], 0x4}, 0x4}, {{&(0x7f00000006c0)=@pppol2tp, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000740)=""/213, 0xd5}, {&(0x7f0000000840)=""/103, 0x67}, {&(0x7f00000008c0)=""/32, 0x20}, {&(0x7f0000000900)=""/98, 0x62}, {&(0x7f0000000980)=""/4084, 0xff4}, {&(0x7f0000001980)=""/62, 0x3e}, {&(0x7f00000019c0)=""/196, 0xc4}], 0x7, &(0x7f0000001b40)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002b40)=""/41, 0x29}, {&(0x7f0000002b80)=""/147, 0x93}, {&(0x7f0000002c40)=""/105, 0x69}], 0x3, &(0x7f0000002d00)}, 0x80000000}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002d40)=""/37, 0x25}, {&(0x7f0000002d80)=""/212, 0xd4}], 0x2, &(0x7f0000002ec0)=""/90, 0x5a}, 0x1}, {{&(0x7f0000002f40)=@caif, 0x80, &(0x7f0000003580)=[{&(0x7f0000002fc0)=""/239, 0xef}, {&(0x7f00000030c0)=""/80, 0x50}, {&(0x7f0000003140)=""/216, 0xd8}, {&(0x7f0000003240)=""/247, 0xf7}, {&(0x7f0000003340)=""/190, 0xbe}, {&(0x7f0000003400)=""/182, 0xb6}, {&(0x7f00000034c0)=""/100, 0x64}, {&(0x7f0000003540)=""/60, 0x3c}], 0x8, &(0x7f0000003600)=""/119, 0x77}, 0x309d}, {{&(0x7f0000003680)=@nfc_llcp, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003700)=""/108, 0x6c}, {&(0x7f0000003780)=""/22, 0x16}, {&(0x7f00000037c0)=""/190, 0xbe}, {&(0x7f0000003880)=""/130, 0x82}, {&(0x7f0000003940)=""/112, 0x70}, {&(0x7f00000039c0)=""/37, 0x25}, {&(0x7f0000003a00)=""/66, 0x42}, {&(0x7f0000003a80)=""/42, 0x2a}, {&(0x7f0000003ac0)=""/170, 0xaa}, {&(0x7f0000003b80)=""/88, 0x58}], 0xa, &(0x7f0000003cc0)=""/136, 0x88}, 0x7}], 0x6, 0x2000, &(0x7f00000002c0)) mmap$fb(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r11, 0xbe000) ioctl$NBD_DO_IT(r8, 0xab03) ioctl$NBD_CLEAR_SOCK(r8, 0xab04) ioctl$KVM_RUN(r2, 0xae80, 0x0) 181.517527ms ago: executing program 1 (id=1451): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001580)=@nat={'nat\x00', 0x62, 0x5, 0x3a0, 0xe0, 0x0, 0xffffffff, 0x250, 0xe0, 0x308, 0x308, 0xffffffff, 0x308, 0x308, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ipvlan0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x300, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text32={0x20, 0x0}], 0x1, 0x3b, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1b7a, 0x1f}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048890}, 0x14) 181.181244ms ago: executing program 5 (id=1452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32) 73.846002ms ago: executing program 1 (id=1453): mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='ntfs3\x00', 0x8080, &(0x7f00000001c0)='discard') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffffffff0c00000018000380140003800c7636800500020000000000040001800c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$khugepaged_scan(r5, &(0x7f0000000380), 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$sock(r8, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000008c0)="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", 0x3f8}], 0x2}}], 0x1, 0x0) open_by_handle_at(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="280000004e000000fc01f2ffffffffff0300000000000000080000000600000000000000010100000600000000000000"], 0x82) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r7}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) r12 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r12, &(0x7f0000003bc0)="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", 0x45d) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000e1000010000000000000000000a00000a78010000060a010400000000d869c5e00e04b37ade64b8d100000000020000454c010480580101800b0001007461726765740000b0fd02800c00034000000000000000020900020073797a3200000000140000001100010000000000000000000000000a9e99edb48f25be81a13dc5c914d8c3bb6a37e7b72b61ca9ec2982773ecf6f0278cb3b5866b145bc552f88976bfff323d333401b59c41bae254a07907b4717defe3ec0c423e80ea350fef39b9a05f1c033aeae4b2df786b26d83db6ccffc21ee5a6bfa9c9eac41c7c15ff4a953f83d56f3e5df51fd800e3"], 0x1a0}, 0x1, 0xf5ffffff, 0x0, 0x24004001}, 0x0) 0s ago: executing program 1 (id=1454): socket$kcm(0x10, 0x2, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000fd00), 0xffffffffffffffff) r5 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0xfffffffffffffffd, {{0x42}, 0x1}}, 0x10) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001a0000000c00228004020080040000800500920000000000070021"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): ev="9p" ino=37617923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.254185][ T39] audit: type=1400 audit(1733311070.408:570): avc: denied { getattr } for pid=8379 comm="syz.0.638" name="/" dev="9p" ino=37617923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 106.266585][ T39] audit: type=1400 audit(1733311070.427:571): avc: denied { remount } for pid=8379 comm="syz.0.638" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 106.500426][ T8387] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 106.799097][ T8390] netlink: 100 bytes leftover after parsing attributes in process `syz.3.641'. [ 107.375488][ T8397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.378844][ T8397] IPv6: NLM_F_CREATE should be set when creating new route [ 107.638718][ T39] audit: type=1400 audit(1733311071.709:572): avc: denied { create } for pid=8416 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 107.763655][ T8422] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 107.765818][ T8422] UDF-fs: Scanning with blocksize 2048 failed [ 107.768567][ T8422] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 107.770477][ T8422] UDF-fs: Scanning with blocksize 4096 failed [ 107.775113][ T8423] /dev/sr0: Can't open blockdev [ 107.801027][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'. [ 107.883081][ T8430] usb usb2: usbfs: process 8430 (syz.1.651) did not claim interface 0 before use [ 108.089221][ T8445] infiniband syz2: set down [ 108.093144][ T8445] infiniband syz2: added ipvlan1 [ 108.129845][ T8445] RDS/IB: syz2: added [ 108.132414][ T8445] smc: adding ib device syz2 with port count 1 [ 108.134899][ T8445] smc: ib device syz2 port 1 has pnetid [ 108.419352][ T8447] infiniband syz0: set active [ 108.421064][ T8447] infiniband syz0: added syz_tun [ 108.452948][ T8447] RDS/IB: syz0: added [ 108.455078][ T8447] smc: adding ib device syz0 with port count 1 [ 108.458400][ T8447] smc: ib device syz0 port 1 has pnetid [ 108.854823][ T8459] serio: Serial port ptm0 [ 108.894244][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 108.953957][ T8467] vxcan1: entered allmulticast mode [ 108.959601][ T8467] netlink: 'syz.1.663': attribute type 39 has an invalid length. [ 108.962585][ T8467] vxcan1: left allmulticast mode [ 108.967631][ T39] audit: type=1400 audit(1733311072.953:573): avc: denied { read } for pid=8466 comm="syz.1.663" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.977651][ T39] audit: type=1400 audit(1733311072.953:574): avc: denied { open } for pid=8466 comm="syz.1.663" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.026687][ T39] audit: type=1400 audit(1733311073.009:575): avc: denied { ioctl } for pid=8466 comm="syz.1.663" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 109.068180][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 109.071840][ T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 109.074689][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.078222][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 109.081601][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.085320][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.089985][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 109.093173][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.316248][ T25] usb 5-1: usb_control_msg returned -32 [ 109.318248][ T25] usbtmc 5-1:16.0: can't read capabilities [ 110.083117][ T39] audit: type=1400 audit(1733311074.000:576): avc: denied { setopt } for pid=8487 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 110.904072][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 111.055472][ T8517] ipt_REJECT: ECHOREPLY no longer supported. [ 111.064119][ T8517] ipt_REJECT: ECHOREPLY no longer supported. [ 111.078196][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.083172][ T8] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 111.086432][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.093594][ T8] usb 6-1: config 0 descriptor?? [ 111.182467][ T8524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.680'. [ 111.272359][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 111.272374][ T39] audit: type=1400 audit(1733311075.113:578): avc: denied { create } for pid=8526 comm="syz.3.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 111.283259][ T39] audit: type=1400 audit(1733311075.123:579): avc: denied { ioctl } for pid=8526 comm="syz.3.681" path="socket:[23257]" dev="sockfs" ino=23257 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 111.319015][ T8510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=91 sclass=netlink_route_socket pid=8510 comm=syz.1.675 [ 111.391446][ T8530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.682'. [ 111.752846][ T8540] netlink: 52 bytes leftover after parsing attributes in process `syz.3.684'. [ 111.828217][ T833] usb 5-1: USB disconnect, device number 12 [ 111.950829][ T8553] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 112.068998][ T8560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.283146][ T833] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 112.454198][ T833] usb 5-1: Using ep0 maxpacket: 8 [ 112.457278][ T833] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.460733][ T833] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.464031][ T833] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.467333][ T833] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.470818][ T833] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.473260][ T833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.694260][ T833] usb 5-1: GET_CAPABILITIES returned 0 [ 112.695986][ T833] usbtmc 5-1:16.0: can't read capabilities [ 112.769970][ T8568] IPVS: set_ctl: invalid protocol: 94 172.30.1.4:20003 [ 112.772518][ T8568] IPVS: set_ctl: invalid protocol: 94 172.30.1.4:20003 [ 112.914781][ T8549] kAFS: Can only specify source 'none' with -o dyn [ 112.934082][ T833] usb 5-1: USB disconnect, device number 13 [ 113.611848][ T8] usbhid 6-1:0.0: can't add hid device: -71 [ 113.613660][ T8] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 113.617300][ T8] usb 6-1: USB disconnect, device number 7 [ 114.024751][ T8597] netlink: 56 bytes leftover after parsing attributes in process `syz.3.703'. [ 114.029650][ T8597] bond0: Unable to set down delay as MII monitoring is disabled [ 114.032537][ T39] audit: type=1400 audit(1733311077.695:580): avc: denied { create } for pid=8596 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.099734][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 114.749044][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.706'. [ 114.752291][ T8608] netlink: 'syz.0.706': attribute type 3 has an invalid length. [ 114.755584][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 114.768672][ T39] audit: type=1400 audit(1733311078.378:581): avc: denied { override_creds } for pid=8606 comm="syz.0.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 115.003522][ T39] audit: type=1400 audit(1733311078.602:582): avc: denied { execute_no_trans } for pid=8625 comm="syz.0.712" path="/216/file1" dev="tmpfs" ino=1197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.079144][ T39] audit: type=1400 audit(1733311078.668:583): avc: denied { remount } for pid=8628 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.138610][ T8634] tmpfs: Bad value for 'mpol' [ 116.064323][ T8652] libceph: resolve ' [ 116.064323][ T8652] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 116.064323][ T8652] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 116.111079][ T39] audit: type=1400 audit(1733311079.641:584): avc: denied { mounton } for pid=8657 comm="syz.0.721" path="/220/bus" dev="tmpfs" ino=1220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 116.113697][ T8659] NILFS (loop0): device size too small [ 116.120457][ T8658] NILFS (loop0): device size too small [ 116.340405][ T39] audit: type=1400 audit(1733311079.856:585): avc: denied { ioctl } for pid=8676 comm="syz.0.726" path="socket:[23352]" dev="sockfs" ino=23352 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 117.038982][ T8686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8686 comm=syz.1.729 [ 117.347258][ T8704] usb 1-1: USB disconnect, device number 2 [ 117.411244][ T8709] overlayfs: failed to resolve 'fscontext=staff_u': -2 [ 117.443987][ T8704] xt_hashlimit: size too large, truncated to 1048576 [ 118.427623][ T8722] netlink: 'syz.1.740': attribute type 1 has an invalid length. [ 118.444756][ T8722] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.455913][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 118.703471][ T39] audit: type=1400 audit(1733311082.063:586): avc: denied { read } for pid=5332 comm="acpid" name="event5" dev="devtmpfs" ino=2942 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 118.711803][ T6887] bond0: (slave syz_tun): Releasing backup interface [ 118.712089][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.714288][ T39] audit: type=1400 audit(1733311082.063:587): avc: denied { open } for pid=5332 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=2942 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 118.721575][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.730251][ T39] audit: type=1400 audit(1733311082.063:588): avc: denied { ioctl } for pid=5332 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=2942 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 118.735888][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.746464][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.749193][ T5936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 118.754302][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.828095][ T8742] netlink: 'syz.3.746': attribute type 1 has an invalid length. [ 118.832114][ T8742] netlink: 134728 bytes leftover after parsing attributes in process `syz.3.746'. [ 118.879291][ T30] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 118.911453][ T7633] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.957241][ T5936] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 118.969626][ T39] audit: type=1400 audit(1733311082.307:589): avc: denied { getopt } for pid=8750 comm="syz.0.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 118.986496][ T8745] rdma_rxe: rxe_newlink: failed to add bond0 [ 119.015566][ T7633] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.030256][ T30] usb 6-1: device descriptor read/64, error -71 [ 119.090843][ T7633] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.097968][ T8736] chnl_net:caif_netlink_parms(): no params data found [ 119.180517][ T8767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.752'. [ 119.186595][ T39] audit: type=1400 audit(1733311082.512:590): avc: denied { setopt } for pid=8766 comm="syz.0.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.203330][ T7633] bond0: (slave netdevsim0): Releasing backup interface [ 119.207168][ T7633] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.212875][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.215078][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.217403][ T8736] bridge_slave_0: entered allmulticast mode [ 119.220258][ T8736] bridge_slave_0: entered promiscuous mode [ 119.225003][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.227397][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.229773][ T8736] bridge_slave_1: entered allmulticast mode [ 119.232670][ T8736] bridge_slave_1: entered promiscuous mode [ 119.235292][ T8767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.752'. [ 119.238193][ T8767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.752'. [ 119.268333][ T8767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.752'. [ 119.275230][ T8736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.280847][ T8736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.307353][ T30] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 119.311101][ T8772] netlink: 68 bytes leftover after parsing attributes in process `syz.0.753'. [ 119.321621][ T8736] team0: Port device team_slave_0 added [ 119.324407][ T8736] team0: Port device team_slave_1 added [ 119.354038][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.356700][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.366433][ T8736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.382196][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.384636][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.394499][ T8736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.450630][ T8736] hsr_slave_0: entered promiscuous mode [ 119.454385][ T8736] hsr_slave_1: entered promiscuous mode [ 119.459768][ T7633] bridge_slave_1: left allmulticast mode [ 119.461781][ T7633] bridge_slave_1: left promiscuous mode [ 119.463847][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.468137][ T30] usb 6-1: device descriptor read/64, error -71 [ 119.470069][ T7633] bridge_slave_0: left allmulticast mode [ 119.471553][ T7633] bridge_slave_0: left promiscuous mode [ 119.473126][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.511432][ T8773] block nbd0: Device being setup by another task [ 119.585543][ T30] usb usb6-port1: attempt power cycle [ 119.755950][ T8773] block nbd0: shutting down sockets [ 119.903796][ T7633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.909791][ T7633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.914861][ T7633] bond0 (unregistering): (slave bond2): Releasing backup interface [ 119.921554][ T7633] bond0 (unregistering): Released all slaves [ 119.928803][ T7633] bond1 (unregistering): Released all slaves [ 119.944628][ T39] audit: type=1400 audit(1733311083.223:591): avc: denied { mounton } for pid=8775 comm="syz.0.754" path="/232/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 119.952858][ T8778] overlayfs: failed to resolve './file1/file0': -2 [ 119.969825][ T30] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 120.002999][ T30] usb 6-1: device descriptor read/8, error -71 [ 120.061177][ T7633] bond2 (unregistering): Released all slaves [ 120.258768][ T30] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 120.279477][ T8736] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.280520][ T30] usb 6-1: device descriptor read/8, error -71 [ 120.286676][ T8736] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.291604][ T8736] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.295966][ T8736] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.378257][ T8736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.398984][ T30] usb usb6-port1: unable to enumerate USB device [ 120.402632][ T8736] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.426011][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.428631][ T7634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.445076][ T7625] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.446936][ T7625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.580129][ T7633] hsr_slave_0: left promiscuous mode [ 120.585607][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.590002][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.592782][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.594832][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.628924][ T7633] veth1_macvtap: left promiscuous mode [ 120.630726][ T7633] veth0_macvtap: left promiscuous mode [ 120.632244][ T7633] veth1_vlan: left promiscuous mode [ 120.633751][ T7633] veth0_vlan: left promiscuous mode [ 121.020521][ T5938] Bluetooth: hci1: command tx timeout [ 121.460235][ T7633] team0 (unregistering): Port device team_slave_1 removed [ 121.565759][ T7633] team0 (unregistering): Port device team_slave_0 removed [ 122.492920][ T8806] pim6reg1: entered promiscuous mode [ 122.494985][ T8806] pim6reg1: entered allmulticast mode [ 122.503728][ T8736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.680914][ T8736] veth0_vlan: entered promiscuous mode [ 122.702996][ T8736] veth1_vlan: entered promiscuous mode [ 122.756307][ T8736] veth0_macvtap: entered promiscuous mode [ 122.761972][ T8736] veth1_macvtap: entered promiscuous mode [ 122.774413][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.778231][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.783394][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.786839][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.792275][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.795951][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.811301][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.815967][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.819657][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.823079][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.829193][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.832659][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.839661][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.844201][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.871545][ T8736] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.874792][ T8736] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.879002][ T8736] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.882195][ T8736] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.980769][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.986473][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.991030][ T7634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.993997][ T7634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.996169][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.008028][ T5936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.011339][ T5936] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 123.014157][ T5936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.049677][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.052633][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.095115][ T7625] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.143833][ T39] audit: type=1400 audit(1733311086.207:592): avc: denied { mounton } for pid=8736 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 123.240841][ T7625] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.251688][ T5938] Bluetooth: hci1: command tx timeout [ 123.303714][ T8858] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 123.328360][ T7625] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.504639][ T7625] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.511620][ T8868] netlink: 108 bytes leftover after parsing attributes in process `syz.5.771'. [ 123.558289][ T8835] chnl_net:caif_netlink_parms(): no params data found [ 123.695973][ T8884] mmap: syz.5.773 (8884) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.705068][ T8885] binder: BINDER_SET_CONTEXT_MGR already set [ 123.707091][ T8885] binder: 8883:8885 ioctl 4018620d 20000100 returned -16 [ 123.714020][ T8884] dlm: plock device version mismatch: kernel (1.2.0), user (808464432.808464432.808464432) [ 123.728883][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.734254][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.737438][ T8835] bridge_slave_0: entered allmulticast mode [ 123.742202][ T8835] bridge_slave_0: entered promiscuous mode [ 123.749467][ T7625] bridge_slave_0: left allmulticast mode [ 123.751762][ T7625] bridge_slave_0: left promiscuous mode [ 123.755311][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.940165][ T39] audit: type=1400 audit(1733311086.965:593): avc: denied { accept } for pid=8891 comm="syz.3.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 124.000740][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 124.004211][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.775'. [ 124.400649][ T7625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.405131][ T7625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.408941][ T7625] bond0 (unregistering): Released all slaves [ 124.413142][ T8835] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.415836][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.418813][ T8835] bridge_slave_1: entered allmulticast mode [ 124.422200][ T8835] bridge_slave_1: entered promiscuous mode [ 124.538799][ T39] audit: type=1400 audit(1733311087.526:594): avc: denied { getopt } for pid=8923 comm="syz.3.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 124.538910][ T8924] IPVS: set_ctl: invalid protocol: 51 172.20.20.47:20003 [ 124.546425][ T7625] IPVS: stopping backup sync thread 6406 ... [ 124.552753][ T8835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.557759][ T8835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.690714][ T8835] team0: Port device team_slave_0 added [ 124.702814][ T8835] team0: Port device team_slave_1 added [ 124.705072][ T8937] fuse: Bad value for 'fd' [ 124.705387][ T8926] syzkaller1: entered promiscuous mode [ 124.711122][ T8926] syzkaller1: entered allmulticast mode [ 124.782511][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.784514][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.793311][ T8835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.798208][ T8835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.800128][ T8835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.808120][ T8835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.864667][ T8835] hsr_slave_0: entered promiscuous mode [ 124.870667][ T8835] hsr_slave_1: entered promiscuous mode [ 124.872786][ T8835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.874816][ T8835] Cannot create hsr debugfs directory [ 125.153667][ T7625] hsr_slave_0: left promiscuous mode [ 125.159965][ T7625] hsr_slave_1: left promiscuous mode [ 125.166791][ T7625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.169460][ T7625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.172796][ T7625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.175124][ T7625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.197559][ T7625] veth1_macvtap: left promiscuous mode [ 125.200507][ T7625] veth0_macvtap: left promiscuous mode [ 125.202708][ T7625] veth0_vlan: left promiscuous mode [ 125.206538][ T7634] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 125.209340][ T5938] Bluetooth: hci0: command tx timeout [ 125.322979][ T7625] team0 (unregistering): Port device vlan2 removed [ 125.462940][ T7636] smc: removing ib device syz2 [ 125.464829][ T5938] Bluetooth: hci1: command tx timeout [ 125.508931][ T8976] fuse: Bad value for 'user_id' [ 125.510801][ T8976] fuse: Bad value for 'user_id' [ 126.338046][ T7625] team0 (unregistering): Port device team_slave_1 removed [ 126.460168][ T7625] team0 (unregistering): Port device team_slave_0 removed [ 127.362705][ T8835] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 127.365940][ T8835] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 127.383032][ T8977] netdevsim netdevsim3: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 127.410119][ T8835] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 127.423176][ T8835] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 127.432134][ T5938] Bluetooth: hci0: command tx timeout [ 127.563720][ T8983] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3814 sclass=netlink_xfrm_socket pid=8983 comm=syz.5.794 [ 127.582177][ T8985] vcan0: entered allmulticast mode [ 127.670516][ T8835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.691561][ T5938] Bluetooth: hci1: command tx timeout [ 127.793868][ T8835] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.804124][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.806937][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.816228][ T7633] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.818812][ T7633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.849333][ T39] audit: type=1400 audit(1733311090.622:595): avc: denied { read } for pid=8984 comm="syz.1.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 127.995696][ T8835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.227772][ T8835] veth0_vlan: entered promiscuous mode [ 128.243312][ T8835] veth1_vlan: entered promiscuous mode [ 128.271891][ T8835] veth0_macvtap: entered promiscuous mode [ 128.276864][ T9010] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 128.279700][ T9010] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 128.327730][ T9010] netem: incorrect ge model size [ 128.338276][ T9010] netem: change failed [ 128.364862][ T8835] veth1_macvtap: entered promiscuous mode [ 128.378614][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.381405][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.386637][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.389553][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.392481][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.395801][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.401398][ T8835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.412651][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.416515][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.419858][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.423579][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.428932][ T8835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.431949][ T8835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.436151][ T8835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.443419][ T8835] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.447016][ T8835] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.450333][ T8835] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.453375][ T8835] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.562901][ T7636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.568271][ T7636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.590900][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.592338][ T9037] netlink: 44 bytes leftover after parsing attributes in process `syz.5.800'. [ 128.593667][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.842538][ T39] audit: type=1400 audit(1733311091.539:596): avc: denied { read } for pid=9058 comm="syz.6.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 128.884434][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.806'. [ 128.892451][ T39] audit: type=1400 audit(1733311091.595:597): avc: denied { setopt } for pid=9060 comm="syz.5.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 129.079155][ T9083] overlayfs: failed to resolve './file0': -2 [ 129.161860][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.808'. [ 129.171080][ T9086] netlink: 'syz.6.808': attribute type 10 has an invalid length. [ 129.181023][ T9086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.182825][ T9092] binder: BINDER_SET_CONTEXT_MGR already set [ 129.185709][ T9086] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 129.189043][ T9086] tmpfs: Unknown parameter 'usrquotaeðQn"fÃh´:™óîvÁÐæàHwSwß{Õï¾£„±6pV¦'o˜ƒØ¹ö¶ðÕJ‰ÿè‰ý¢Ýȳ8Œ•¸AŠ:E˜£É”4yÒñ¹L¥Kq™Þ0üH´{ŽÙúE9E–Öª†‘†ÿ£X¬Ú®ÉèbµJQÁ' [ 129.192482][ T9092] binder: 9091:9092 ioctl 4018620d 20000100 returned -16 [ 129.198459][ T9092] binder: BINDER_SET_CONTEXT_MGR already set [ 129.200771][ T9092] binder: 9091:9092 ioctl 4018620d 20000100 returned -16 [ 129.203505][ T9092] binder: BINDER_SET_CONTEXT_MGR already set [ 129.205772][ T9092] binder: 9091:9092 ioctl 4018620d 20000100 returned -16 [ 129.207514][ T39] audit: type=1400 audit(1733311091.876:598): avc: denied { remount } for pid=9088 comm="syz.5.809" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 129.299900][ T9105] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 129.305533][ T9106] evm: overlay not supported [ 129.309934][ T39] audit: type=1400 audit(1733311091.979:599): avc: denied { relabelto } for pid=9102 comm="syz.6.811" name="cgroup.procs" dev="cgroup" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 129.321824][ T39] audit: type=1400 audit(1733311091.979:600): avc: denied { associate } for pid=9102 comm="syz.6.811" name="cgroup.procs" dev="cgroup" ino=758 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 129.445346][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.815'. [ 129.448895][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.815'. [ 129.453972][ T9119] binder: 9118:9119 ioctl 4018620d 0 returned -22 [ 129.456881][ T9120] binder: 9118:9120 ioctl c08c5335 20000000 returned -22 [ 129.655448][ T5938] Bluetooth: hci0: command tx timeout [ 129.699935][ T9144] netlink: 'syz.5.819': attribute type 1 has an invalid length. [ 129.987284][ T1332] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 130.179714][ T1332] usb 6-1: Using ep0 maxpacket: 8 [ 130.184083][ T9179] netlink: 'syz.5.825': attribute type 1 has an invalid length. [ 130.185063][ T1332] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 130.192878][ T1332] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.57 [ 130.196498][ T1332] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 130.199451][ T1332] usb 6-1: SerialNumber: syz [ 130.212495][ T1332] cdc_ether 6-1:1.0: skipping garbage [ 130.214791][ T1332] usb 6-1: bad CDC descriptors [ 130.235432][ T39] audit: type=1400 audit(1733311092.849:601): avc: denied { name_bind } for pid=9180 comm="syz.5.826" src=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 130.331958][ T9183] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 130.334037][ T9183] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 130.338051][ T9183] vhci_hcd vhci_hcd.0: Device attached [ 130.381655][ T9186] vhci_hcd: connection closed [ 130.384249][ T1176] vhci_hcd: stop threads [ 130.387631][ T1176] vhci_hcd: release socket [ 130.389313][ T1176] vhci_hcd: disconnect device [ 130.455968][ T39] audit: type=1400 audit(1733311093.054:602): avc: denied { create } for pid=9195 comm="syz.6.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 130.465349][ T39] audit: type=1400 audit(1733311093.064:603): avc: denied { sys_admin } for pid=9195 comm="syz.6.828" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 130.571023][ T9204] IPv6: Can't replace route, no match found [ 130.608901][ T9201] syz.6.830: attempt to access beyond end of device [ 130.608901][ T9201] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 130.612880][ T9201] syz.6.830: attempt to access beyond end of device [ 130.612880][ T9201] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 130.616089][ T9201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 130.616243][ T9206] netlink: 'syz.5.832': attribute type 1 has an invalid length. [ 130.619036][ T9201] syz.6.830: attempt to access beyond end of device [ 130.619036][ T9201] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 130.619112][ T9201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 130.619533][ T9201] syz.6.830: attempt to access beyond end of device [ 130.619533][ T9201] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 130.622087][ T9206] netlink: 56 bytes leftover after parsing attributes in process `syz.5.832'. [ 130.625482][ T9201] syz.6.830: attempt to access beyond end of device [ 130.625482][ T9201] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 130.632911][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.832'. [ 130.637056][ T9201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 130.639046][ T9206] netlink: 24 bytes leftover after parsing attributes in process `syz.5.832'. [ 130.644136][ T9201] syz.6.830: attempt to access beyond end of device [ 130.644136][ T9201] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 130.653322][ T9201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 130.656945][ T9201] syz.6.830: attempt to access beyond end of device [ 130.656945][ T9201] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 130.661396][ T9201] syz.6.830: attempt to access beyond end of device [ 130.661396][ T9201] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 130.665818][ T9201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 130.669756][ T9201] syz.6.830: attempt to access beyond end of device [ 130.669756][ T9201] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 130.673537][ T9201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 130.674978][ T9207] block nbd6: shutting down sockets [ 130.676288][ T9201] syz.6.830: attempt to access beyond end of device [ 130.676288][ T9201] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 130.682783][ T9201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 130.685906][ T9201] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 130.688689][ T9201] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 130.834660][ T8561] usb 6-1: USB disconnect, device number 12 [ 131.044480][ T39] audit: type=1400 audit(1733311093.597:604): avc: denied { create } for pid=9234 comm="syz.5.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 131.051429][ T39] audit: type=1400 audit(1733311093.597:605): avc: denied { connect } for pid=9234 comm="syz.5.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 131.323205][ T35] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 131.494258][ T35] usb 10-1: Using ep0 maxpacket: 32 [ 131.497526][ T35] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 131.500341][ T35] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.503791][ T35] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 131.508197][ T35] usb 10-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 131.512639][ T35] usb 10-1: config 0 interface 0 has no altsetting 0 [ 131.516600][ T35] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 131.519648][ T35] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 131.522417][ T35] usb 10-1: Product: syz [ 131.523821][ T35] usb 10-1: Manufacturer: syz [ 131.525428][ T35] usb 10-1: SerialNumber: syz [ 131.528595][ T35] usb 10-1: config 0 descriptor?? [ 131.531972][ T35] ldusb 10-1:0.0: Interrupt in endpoint not found [ 131.569721][ T25] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 131.680260][ T9251] overlay: Unknown parameter 'smackfsfloor' [ 131.734669][ T39] audit: type=1400 audit(1733311094.252:606): avc: denied { append } for pid=9256 comm="syz.3.844" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 131.742762][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 131.747579][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.751481][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.754926][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 131.757147][ T35] usb 10-1: USB disconnect, device number 2 [ 131.759985][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.845'. [ 131.760166][ T25] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 131.760193][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.760932][ T39] audit: type=1400 audit(1733311094.270:607): avc: denied { create } for pid=9234 comm="syz.5.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.760969][ T39] audit: type=1400 audit(1733311094.270:608): avc: denied { write } for pid=9234 comm="syz.5.839" path="socket:[26431]" dev="sockfs" ino=26431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 131.762236][ T25] usb 6-1: config 0 descriptor?? [ 131.880404][ T5938] Bluetooth: hci0: command tx timeout [ 132.012714][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 132.015013][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 132.020970][ T25] usb 6-1: USB disconnect, device number 13 [ 132.103693][ T39] audit: type=1400 audit(1733311094.598:609): avc: denied { write } for pid=9298 comm="syz.6.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.111189][ T39] audit: type=1400 audit(1733311094.598:610): avc: denied { nlmsg_write } for pid=9298 comm="syz.6.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 132.226607][ T9308] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff00000000000000000000' [ 132.438768][ T9316] netlink: 40 bytes leftover after parsing attributes in process `syz.5.855'. [ 132.764190][ T9333] TCP: tcp_parse_options: Illegal window scaling value 67 > 14 received [ 133.062169][ T9354] input: syz0 as /devices/virtual/input/input17 [ 133.070246][ T9354] 9pnet: Unknown protocol version 9p20\++} [ 133.294010][ T9376] smb3: Unknown parameter '€' [ 133.714021][ T9407] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 414 [ 133.933661][ T9430] netlink: 60 bytes leftover after parsing attributes in process `syz.6.877'. [ 133.937460][ T9430] unsupported nlmsg_type 40 [ 133.974773][ T9435] netlink: 'syz.3.878': attribute type 11 has an invalid length. [ 134.696753][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.880'. [ 134.699538][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.6.880'. [ 135.300114][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.300244][ T5975] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 135.305162][ T5975] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 135.751629][ T9470] rdma_rxe: rxe_newlink: failed to add syz_tun [ 137.523729][ T5975] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 137.523743][ T5938] Bluetooth: hci3: command 0x040f tx timeout [ 137.525807][ T5975] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 138.468692][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.471115][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.747443][ T5938] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.749965][ T5975] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 139.751606][ T5975] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 141.971194][ T5938] Bluetooth: hci0: command 0x0c1a tx timeout [ 141.971322][ T5975] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 141.975774][ T5975] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 142.046764][ T9435] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.878'. [ 142.050106][ T9435] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 142.131287][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 142.131304][ T39] audit: type=1400 audit(1733311103.971:616): avc: denied { create } for pid=9562 comm="syz.6.884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 142.224275][ T9581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.891'. [ 142.282455][ T39] audit: type=1400 audit(1733311104.111:617): avc: denied { watch_mount } for pid=9588 comm="syz.3.894" path="/213" dev="tmpfs" ino=1190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 142.348141][ T39] audit: type=1400 audit(1733311104.186:618): avc: denied { nlmsg_read } for pid=9584 comm="syz.6.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.380341][ T9599] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 142.456840][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz.5.897'. [ 142.460211][ T9606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.896'. [ 142.624703][ T9621] Mount JFS Failure: -22 [ 142.667966][ T9626] tap0: tun_chr_ioctl cmd 1074025678 [ 142.669928][ T9626] tap0: group set to 0 [ 142.745678][ T9621] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (22067556344 ns) > initial count (16820256 ns). Using initial count to start timer. [ 142.768977][ T9634] fuse: Bad value for 'fd' [ 142.823927][ T9639] overlayfs: invalid redirect ((null)) [ 142.826207][ T39] audit: type=1400 audit(1733311104.625:619): avc: denied { execmem } for pid=9635 comm="syz.6.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 142.829796][ T9639] overlayfs: invalid redirect ((null)) [ 142.896696][ T9650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.907'. [ 142.899901][ T9650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.907'. [ 142.928592][ T39] audit: type=1400 audit(1733311104.719:620): avc: denied { write } for pid=9631 comm="syz.3.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 142.953966][ T9654] Bluetooth: MGMT ver 1.23 [ 142.956427][ T9652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.041220][ T9656] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 143.066204][ T9663] xt_hashlimit: size too large, truncated to 1048576 [ 143.149707][ T9667] overlayfs: missing 'lowerdir' [ 143.915730][ T39] audit: type=1400 audit(1733311105.645:621): avc: denied { ioctl } for pid=9685 comm="syz.3.917" path="socket:[33164]" dev="sockfs" ino=33164 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 144.163831][ T39] audit: type=1400 audit(1733311105.879:622): avc: denied { ioctl } for pid=9708 comm="syz.5.924" path="socket:[32121]" dev="sockfs" ino=32121 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 144.175748][ T9699] /dev/sr0: Can't open blockdev [ 144.343229][ T39] audit: type=1400 audit(1733311106.038:623): avc: denied { map } for pid=9720 comm="syz.6.927" path="socket:[30139]" dev="sockfs" ino=30139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.355031][ T39] audit: type=1400 audit(1733311106.038:624): avc: denied { read } for pid=9720 comm="syz.6.927" path="socket:[30139]" dev="sockfs" ino=30139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 144.557570][ T9742] xt_hashlimit: size too large, truncated to 1048576 [ 144.561422][ T9743] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 144.581111][ T9748] netlink: 'syz.6.933': attribute type 1 has an invalid length. [ 144.612802][ T39] audit: type=1400 audit(1733311106.290:625): avc: denied { mount } for pid=9749 comm="syz.3.935" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 144.633733][ T9750] netlink: 'syz.3.935': attribute type 10 has an invalid length. [ 144.645081][ T9750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.714479][ T9757] binder: 9756:9757 ioctl 4018620d 0 returned -22 [ 144.819293][ T9762] Invalid option length (1047906) for dns_resolver key [ 145.136141][ T9765] fuse: Bad value for 'fd' [ 145.138882][ T9765] xt_hashlimit: size too large, truncated to 1048576 [ 145.701246][ T9773] netlink: 32 bytes leftover after parsing attributes in process `syz.6.941'. [ 146.372261][ T9778] SET target dimension over the limit! [ 146.417835][ T9786] 9pnet_virtio: no channels available for device syz [ 146.493479][ T9790] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 146.498896][ T9786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 146.710697][ T9808] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 146.733306][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.952'. [ 146.739389][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.952'. [ 147.024724][ T9827] xt_hashlimit: size too large, truncated to 1048576 [ 147.030504][ T9827] syz.1.958: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 147.035514][ T9827] CPU: 3 UID: 0 PID: 9827 Comm: syz.1.958 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 147.038293][ T9827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.041652][ T9827] Call Trace: [ 147.042849][ T9827] [ 147.043921][ T9827] dump_stack_lvl+0x16c/0x1f0 [ 147.045640][ T9827] warn_alloc+0x24d/0x3a0 [ 147.047216][ T9827] ? __pfx_warn_alloc+0x10/0x10 [ 147.049006][ T9827] ? __get_vm_area_node+0x1b0/0x2f0 [ 147.050896][ T9827] ? __get_vm_area_node+0x1dc/0x2f0 [ 147.052801][ T9827] __vmalloc_node_range_noprof+0x1105/0x1530 [ 147.054983][ T9827] ? __pfx___lock_acquire+0x10/0x10 [ 147.056903][ T9827] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 147.059036][ T9827] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.061355][ T9827] ? __pfx_lock_release+0x10/0x10 [ 147.063187][ T9827] ? trace_lock_acquire+0x14e/0x1f0 [ 147.065125][ T9827] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 147.067273][ T9827] vmalloc_noprof+0x6b/0x90 [ 147.068920][ T9827] ? hashlimit_mt_check_common+0x8b0/0x1450 [ 147.071193][ T9827] hashlimit_mt_check_common+0x8b0/0x1450 [ 147.073290][ T9827] hashlimit_mt_check+0x71/0x90 [ 147.075084][ T9827] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 147.076658][ T9827] xt_check_match+0x284/0xa50 [ 147.077916][ T9827] ? __wait_for_common+0x312/0x600 [ 147.079343][ T9827] ? __pfx_xt_check_match+0x10/0x10 [ 147.081166][ T9827] ? xt_find_target+0x1ee/0x290 [ 147.082933][ T9827] ? xt_find_match+0x1f2/0x290 [ 147.084653][ T9827] find_check_entry.constprop.0+0x34d/0xa20 [ 147.086688][ T9827] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 147.088913][ T9827] ? kvfree+0x47/0x50 [ 147.090329][ T9827] translate_table+0xd06/0x17b0 [ 147.092021][ T9827] ? __pfx_translate_table+0x10/0x10 [ 147.092045][ T5993] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 147.093861][ T9827] ? __might_fault+0xe3/0x190 [ 147.097017][ T9827] do_ip6t_set_ctl+0x605/0xc40 [ 147.098267][ T9827] ? __mutex_lock+0x1cc/0xa60 [ 147.099663][ T9827] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 147.101211][ T9827] ? __mutex_unlock_slowpath+0x164/0x690 [ 147.102980][ T9827] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 147.104658][ T9827] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 147.106426][ T9827] nf_setsockopt+0x8a/0xf0 [ 147.107601][ T9827] ipv6_setsockopt+0x135/0x170 [ 147.109229][ T9827] rawv6_setsockopt+0xd7/0x680 [ 147.110884][ T9827] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 147.112749][ T9827] ? selinux_socket_setsockopt+0x6a/0x80 [ 147.114722][ T9827] ? sock_common_setsockopt+0x2e/0xf0 [ 147.116595][ T9827] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 147.118623][ T9827] do_sock_setsockopt+0x222/0x480 [ 147.120307][ T9827] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 147.122203][ T9827] ? lock_acquire+0x2f/0xb0 [ 147.123796][ T9827] __sys_setsockopt+0x1a0/0x230 [ 147.125481][ T9827] __x64_sys_setsockopt+0xbd/0x160 [ 147.127240][ T9827] ? do_syscall_64+0x91/0x250 [ 147.128862][ T9827] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.130663][ T9827] do_syscall_64+0xcd/0x250 [ 147.131906][ T9827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.133929][ T9827] RIP: 0033:0x7fc2ef57ff19 [ 147.135462][ T9827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.141956][ T9827] RSP: 002b:00007fc2f0427058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.144795][ T9827] RAX: ffffffffffffffda RBX: 00007fc2ef745fa0 RCX: 00007fc2ef57ff19 [ 147.147495][ T9827] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 147.150124][ T9827] RBP: 00007fc2ef5f3986 R08: 0000000000000588 R09: 0000000000000000 [ 147.152798][ T9827] R10: 00000000200014c0 R11: 0000000000000246 R12: 0000000000000000 [ 147.155484][ T9827] R13: 0000000000000000 R14: 00007fc2ef745fa0 R15: 00007fff83101af8 [ 147.158055][ T9827] [ 147.161144][ T9827] Mem-Info: [ 147.162410][ T9827] active_anon:10380 inactive_anon:0 isolated_anon:0 [ 147.162410][ T9827] active_file:12224 inactive_file:38905 isolated_file:0 [ 147.162410][ T9827] unevictable:1768 dirty:114 writeback:0 [ 147.162410][ T9827] slab_reclaimable:8405 slab_unreclaimable:76282 [ 147.162410][ T9827] mapped:24113 shmem:5331 pagetables:1201 [ 147.162410][ T9827] sec_pagetables:299 bounce:0 [ 147.162410][ T9827] kernel_misc_reclaimable:0 [ 147.162410][ T9827] free:464167 free_pcp:4388 free_cma:0 [ 147.180223][ T9827] Node 0 active_anon:41520kB inactive_anon:0kB active_file:48896kB inactive_file:155516kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:96420kB dirty:452kB writeback:0kB shmem:17788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14192kB pagetables:4804kB sec_pagetables:1196kB all_unreclaimable? no [ 147.194198][ T9827] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:104kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 147.205366][ T9827] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.214714][ T9827] lowmem_reserve[]: 0 1212 0 0 0 [ 147.216297][ T9827] Node 0 DMA32 free:265044kB boost:28672kB min:56280kB low:63180kB high:70080kB reserved_highatomic:0KB active_anon:41520kB inactive_anon:0kB active_file:48896kB inactive_file:155516kB unevictable:3536kB writepending:452kB present:2080628kB managed:1269940kB mlocked:0kB bounce:0kB free_pcp:3488kB local_pcp:476kB free_cma:0kB [ 147.224969][ T9827] lowmem_reserve[]: 0 0 0 0 0 [ 147.226223][ T9827] Node 1 Normal free:1575916kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:104kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:14744kB local_pcp:11376kB free_cma:0kB [ 147.233837][ T9827] lowmem_reserve[]: 0 0 0 0 0 [ 147.235115][ T9827] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 147.238488][ T9827] Node 0 DMA32: 523*4kB (UE) 427*8kB (UME) 168*16kB (UME) 190*32kB (UME) 234*64kB (UME) 61*128kB (UME) 132*256kB (UM) 113*512kB (UME) 69*1024kB (UM) 22*2048kB (UM) 5*4096kB (M) = 264900kB [ 147.243354][ T5993] usb 10-1: device descriptor read/64, error -71 [ 147.244263][ T9827] Node 1 Normal: 37*4kB (UME) 21*8kB (UME) 31*16kB (UME) 136*32kB (UME) 55*64kB (UME) 20*128kB (UME) 6*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 3*2048kB (ME) 379*4096kB (ME) = 1575916kB [ 147.249913][ T9827] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.252780][ T9827] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 147.255730][ T9827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 147.258504][ T9827] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 147.261066][ T9827] 56461 total pagecache pages [ 147.262426][ T9827] 0 pages in swap cache [ 147.263637][ T9827] Free swap = 124208kB [ 147.264784][ T9827] Total swap = 124996kB [ 147.265900][ T9827] 1048443 pages RAM [ 147.266975][ T9827] 0 pages HighMem/MovableOnly [ 147.268259][ T9827] 281637 pages reserved [ 147.269397][ T9827] 0 pages cma reserved [ 147.498236][ T5993] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 147.637400][ T5993] usb 10-1: device descriptor read/64, error -71 [ 147.645092][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.647173][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.651162][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.654044][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.654114][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.658588][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.658664][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.658672][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.658725][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.658732][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.658787][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.658794][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.658845][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.658853][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.658921][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.658928][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.658999][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659006][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.659053][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659060][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.659106][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659113][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.659177][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659184][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.659231][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659237][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.659282][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659288][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.659341][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659346][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.659409][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659415][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.659510][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659517][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.659565][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659571][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.659633][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659639][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.659685][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659691][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.659737][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659743][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.659794][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659800][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.659862][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.659868][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.663377][ T9861] binder_alloc: binder_alloc_mmap_handler: 9856 20ffd000-21000000 already mapped failed -16 [ 147.664626][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.670693][ T9861] binder_alloc: binder_alloc_mmap_handler: 9856 20ffd000-21000000 already mapped failed -16 [ 147.671402][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.673837][ T9861] binder_alloc: binder_alloc_mmap_handler: 9856 20ffd000-21000000 already mapped failed -16 [ 147.676148][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.678353][ T9861] binder_alloc: binder_alloc_mmap_handler: 9856 20ffd000-21000000 already mapped failed -16 [ 147.681097][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.684048][ T9861] binder_alloc: binder_alloc_mmap_handler: 9856 20ffd000-21000000 already mapped failed -16 [ 147.685075][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.687265][ T9861] binder_alloc: binder_alloc_mmap_handler: 9856 20ffd000-21000000 already mapped failed -16 [ 147.689448][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.691999][ T9861] binder_alloc: binder_alloc_mmap_handler: 9856 20ffd000-21000000 already mapped failed -16 [ 147.693954][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.696306][ T9861] binder_alloc: binder_alloc_mmap_handler: 9856 20ffd000-21000000 already mapped failed -16 [ 147.698132][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.701210][ T9861] binder_alloc: binder_alloc_mmap_handler: 9856 20ffd000-21000000 already mapped failed -16 [ 147.703522][ T9858] binder: BINDER_SET_CONTEXT_MGR already set [ 147.755522][ T5993] usb usb10-port1: attempt power cycle [ 147.757144][ T9858] binder: 9856:9858 ioctl 4018620d 20000100 returned -16 [ 147.834421][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 147.834437][ T39] audit: type=1400 audit(1733311109.312:629): avc: denied { setopt } for pid=9864 comm="syz.6.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.939486][ T9869] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 147.942465][ T9869] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 148.060513][ T9875] netlink: 'syz.3.975': attribute type 3 has an invalid length. [ 148.063214][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 148.129174][ T5993] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 148.135926][ T35] usb 11-1: new full-speed USB device number 2 using dummy_hcd [ 148.163811][ T5993] usb 10-1: device descriptor read/8, error -71 [ 148.322808][ T35] usb 11-1: not running at top speed; connect to a high speed hub [ 148.325791][ T35] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 927, setting to 64 [ 148.330224][ T35] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.333031][ T35] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.335176][ T35] usb 11-1: Product: ᳫ퉛륈巋翚억섳ëƒá«•ì¤µá–‘íœä³å”½å‹’➑쯺좴ä‰èš½æ±¹ç©’후ﭹ㧘áŒî€²é—ゎ刣å¿âª“޵봻ë”ꦢ৯퓚ä¶ìŸ“署ּ먭熔촹뺕ퟓٻáˆçœì¡«ïŸˆî™ˆêŠ£ë²›î¥Ÿî¨§ë‘£ç·Œå£€æ„¯è­¨ï‚½å ‰æ©±ë¬³á­„핳ഫ褔é’ⵧì±á°°í‰¤ê¦¨í½èœŽë¡°ä²áŠ¤é¼å¼®à»œâƒ¢éŒŠè¡«ì…‡äŽ…⸺ï‹ë—·â‚¢è¦†î½¨è…®ï¸·è€¨í‡Ÿë«í‰ è§—ï¨ç’›ã¿ƒå ‘î™å®‚皺é½ê²‹ê›•éŠ¼dçࣦ [ 148.349731][ T63] Bluetooth: hci4: Frame reassembly failed (-84) [ 148.350192][ T35] usb 11-1: Manufacturer: à°š [ 148.353835][ T35] usb 11-1: SerialNumber: à°š [ 148.428534][ T5993] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 148.450002][ T5993] usb 10-1: device descriptor read/8, error -71 [ 148.567273][ T5993] usb usb10-port1: unable to enumerate USB device [ 148.789399][ T35] cdc_ncm 11-1:1.0: bind() failure [ 148.795514][ T35] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 148.797873][ T35] cdc_ncm 11-1:1.1: bind() failure [ 148.801896][ T35] usb 11-1: USB disconnect, device number 2 [ 149.668004][ T9911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.676475][ T9911] batadv_slave_1: entered promiscuous mode [ 149.795030][ T9917] ªªªªª»: renamed from bridge_slave_0 (while UP) [ 149.838708][ T9919] can: request_module (can-proto-0) failed. [ 150.121913][ T9928] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 150.130676][ T9928] netlink: 1280 bytes leftover after parsing attributes in process `syz.5.993'. [ 150.134145][ T9928] openvswitch: netlink: Flow actions attr not present in new flow. [ 150.185334][ T39] audit: type=1400 audit(1733311111.510:630): avc: denied { create } for pid=9929 comm="syz.5.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 150.523544][ T5936] Bluetooth: hci4: command 0x1003 tx timeout [ 150.526429][ T5938] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 150.591934][ T9935] netlink: 'syz.3.995': attribute type 11 has an invalid length. [ 150.710653][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.997'. [ 150.713900][ T9942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.997'. [ 150.812563][ T9948] rdma_op ffff88804df0e1f0 conn xmit_rdma 0000000000000000 [ 151.175592][ T9957] binder: 9956:9957 ioctl c0306201 200001c0 returned -22 [ 151.243542][ T9966] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1005'. [ 151.249398][ T9966] netem: invalid attributes len -16 [ 151.252399][ T9966] netem: change failed [ 151.307335][ T39] audit: type=1804 audit(1733311112.558:631): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1003" name="/newroot/241/file1" dev="fuse" ino=1 res=1 errno=0 [ 151.317231][ T39] audit: type=1800 audit(1733311112.558:632): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1003" name="/" dev="fuse" ino=1 res=0 errno=0 [ 151.469023][ T39] audit: type=1800 audit(1733311112.707:633): pid=9979 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1009" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 151.532570][ T9986] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1012'. [ 151.573746][ T833] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 151.603953][ T39] audit: type=1400 audit(1733311112.829:634): avc: denied { name_bind } for pid=9989 comm="syz.1.1014" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 151.611082][ T39] audit: type=1400 audit(1733311112.838:635): avc: denied { name_connect } for pid=9989 comm="syz.1.1014" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 151.686402][T10003] netlink: 'syz.3.1018': attribute type 3 has an invalid length. [ 151.753018][ T833] usb 10-1: Using ep0 maxpacket: 8 [ 151.756718][ T833] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 151.759819][ T833] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.764406][ T833] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.768232][ T833] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.771931][ T833] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.777040][ T833] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 151.780548][ T833] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.007134][ T833] usb 10-1: GET_CAPABILITIES returned 0 [ 152.009249][ T833] usbtmc 10-1:16.0: can't read capabilities [ 152.235746][ T30] usb 10-1: USB disconnect, device number 7 [ 152.666633][T10026] Attempt to restore checkpoint with obsolete wellknown handles [ 152.812735][T10038] PM: Enabling pm_trace changes system date and time during resume. [ 152.812735][T10038] PM: Correct system time has to be restored manually after resume. [ 152.858489][T10042] netlink: 'syz.5.1028': attribute type 1 has an invalid length. [ 152.861505][T10042] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1028'. [ 152.987863][T10057] loop2: detected capacity change from 0 to 456 [ 152.999587][T10057] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 153.002216][T10057] loop2: partition table partially beyond EOD, truncated [ 153.005118][T10057] loop2: p1 size 276741282 extends beyond EOD, truncated [ 153.010545][T10057] loop2: p2 start 579963744 is beyond EOD, truncated [ 153.016296][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 153.035771][T10069] tmpfs: Bad value for 'mpol' [ 153.075741][ T7040] loop2: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 153.078580][ T7040] loop2: partition table partially beyond EOD, truncated [ 153.081214][ T7040] loop2: p1 size 276741282 extends beyond EOD, truncated [ 153.085265][ T7040] loop2: p2 start 579963744 is beyond EOD, truncated [ 153.107256][ T39] audit: type=1400 audit(1733311114.241:636): avc: denied { setattr } for pid=10072 comm="syz.3.1036" name="audio" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 153.110062][T10073] Bluetooth: MGMT ver 1.23 [ 153.132989][ T7040] udevd[7040]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 153.227267][T10081] cgroup: fork rejected by pids controller in /syz5 [ 153.228214][ T8561] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 153.399958][ T8561] usb 6-1: Using ep0 maxpacket: 8 [ 153.411408][ T8561] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 153.414669][ T8561] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.418370][ T8561] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.422208][ T8561] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.425885][ T8561] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.430674][ T8561] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.434112][ T8561] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.669895][ T8561] usb 6-1: usb_control_msg returned -32 [ 153.672154][ T8561] usbtmc 6-1:16.0: can't read capabilities [ 153.768619][ T7633] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.848690][ T5936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.853159][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.856492][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.859662][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.863125][ T5936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.866764][ T5936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.891769][ T7633] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.905378][ T5938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.909348][ T5938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.913198][ T5938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.918537][ T5938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.921003][ T5938] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.924377][ T5938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.965228][ T7633] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.050748][ T7633] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.087908][T10092] chnl_net:caif_netlink_parms(): no params data found [ 154.170143][T10092] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.172165][T10092] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.174794][T10092] bridge_slave_0: entered allmulticast mode [ 154.177238][T10092] bridge_slave_0: entered promiscuous mode [ 154.180892][T10092] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.182931][T10092] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.184929][T10092] bridge_slave_1: entered allmulticast mode [ 154.187262][T10092] bridge_slave_1: entered promiscuous mode [ 154.257769][ T7633] bridge_slave_1: left allmulticast mode [ 154.259927][ T7633] bridge_slave_1: left promiscuous mode [ 154.262148][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.267268][ T7633] bridge_slave_0: left allmulticast mode [ 154.269371][ T7633] bridge_slave_0: left promiscuous mode [ 154.271564][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.526737][T10110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1044'. [ 154.529496][T10110] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1044'. [ 154.729217][ T7633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.733135][ T7633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.738600][ T7633] bond0 (unregistering): Released all slaves [ 154.743650][T10092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.764499][T10092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.791390][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1045'. [ 154.793873][T10117] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1045'. [ 154.807399][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1045'. [ 154.809894][T10118] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1045'. [ 154.826655][T10092] team0: Port device team_slave_0 added [ 154.830539][T10118] netlink: 'syz.6.1045': attribute type 5 has an invalid length. [ 154.842656][T10117] netlink: 'syz.6.1045': attribute type 5 has an invalid length. [ 154.848506][T10092] team0: Port device team_slave_1 added [ 154.944950][T10092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.947816][T10092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.958553][T10092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.965565][T10092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.968231][T10092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.980238][T10092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.037156][T10092] hsr_slave_0: entered promiscuous mode [ 155.040457][T10092] hsr_slave_1: entered promiscuous mode [ 155.043318][T10092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.046454][T10092] Cannot create hsr debugfs directory [ 155.147517][T10139] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.182838][ T39] audit: type=1400 audit(1733311116.178:637): avc: denied { shutdown } for pid=10138 comm="syz.6.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 155.243126][T10139] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.297224][ T7633] hsr_slave_0: left promiscuous mode [ 155.300586][ T7633] hsr_slave_1: left promiscuous mode [ 155.308024][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.310569][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.318635][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.321132][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.357286][ T7633] veth1_macvtap: left promiscuous mode [ 155.359022][ T7633] veth0_macvtap: left promiscuous mode [ 155.360518][ T7633] veth1_vlan: left promiscuous mode [ 155.362018][ T7633] veth0_vlan: left promiscuous mode [ 156.095484][ T5938] Bluetooth: hci1: command tx timeout [ 156.225020][ T8887] usb 6-1: USB disconnect, device number 14 [ 156.265615][ T39] audit: type=1400 audit(1733311117.188:638): avc: denied { bind } for pid=10148 comm="syz.1.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.287376][ T39] audit: type=1400 audit(1733311117.225:639): avc: denied { listen } for pid=10148 comm="syz.1.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 156.325467][ T7633] team0 (unregistering): Port device team_slave_1 removed [ 156.431766][ T7633] team0 (unregistering): Port device team_slave_0 removed [ 156.640055][ T8887] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 156.811941][ T8887] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 156.814632][ T8887] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 156.818785][ T8887] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.821352][ T8887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.823518][ T8887] usb 6-1: Product: syz [ 156.824669][ T8887] usb 6-1: Manufacturer: syz [ 156.825962][ T8887] usb 6-1: SerialNumber: syz [ 157.057714][ T39] audit: type=1400 audit(1733311117.945:640): avc: denied { accept } for pid=10148 comm="syz.1.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 157.075640][T10139] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.116475][ T8887] cdc_ncm 6-1:1.0: bind() failure [ 157.125350][ T8887] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 157.127159][ T8887] cdc_ncm 6-1:1.1: bind() failure [ 157.131612][ T8887] usb 6-1: USB disconnect, device number 15 [ 157.197761][T10139] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.351547][T10139] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.359725][T10139] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.364473][T10139] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.369166][T10139] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.452317][T10161] syzkaller1: entered promiscuous mode [ 157.453823][T10161] syzkaller1: entered allmulticast mode [ 157.579281][T10092] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 157.587990][T10092] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 157.595336][T10092] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.599954][T10092] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 157.636013][T10092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.644871][T10092] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.649930][ T7638] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.651856][ T7638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.658441][ T7638] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.660383][ T7638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.778090][T10092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.892415][T10092] veth0_vlan: entered promiscuous mode [ 157.897498][T10092] veth1_vlan: entered promiscuous mode [ 157.920869][T10092] veth0_macvtap: entered promiscuous mode [ 157.926045][T10092] veth1_macvtap: entered promiscuous mode [ 157.933186][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.936013][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.938533][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.941226][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.944881][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.948355][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.952652][T10092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.957741][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.961371][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.965744][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.969483][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.972855][T10092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.978448][T10092] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.980740][T10092] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.982985][T10092] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.985521][T10092] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.025974][ T7628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.029813][ T7628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.040719][ T7626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.042822][ T7626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.055646][ T39] audit: type=1400 audit(1733311118.871:641): avc: denied { mounton } for pid=10092 comm="syz-executor" path="/syzkaller.HHPwgM/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=34606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 158.149985][T10220] xt_hashlimit: size too large, truncated to 1048576 [ 158.306298][ T5938] Bluetooth: hci1: command tx timeout [ 158.328897][T10235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1064'. [ 158.336475][T10235] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1064'. [ 158.378124][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 158.409346][T10237] netlink: 'syz.1.1065': attribute type 5 has an invalid length. [ 158.413184][ T39] audit: type=1400 audit(1733311119.199:642): avc: denied { read append open } for pid=10236 comm="syz.1.1065" path="/296/file0/cpu.stat" dev="9p" ino=37618000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.596974][T10245] netlink: 'syz.3.1069': attribute type 19 has an invalid length. [ 158.599906][T10245] netlink: 'syz.3.1069': attribute type 2 has an invalid length. [ 158.602284][T10245] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 158.604743][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 158.781125][ T39] audit: type=1400 audit(1733311119.554:643): avc: denied { read } for pid=10262 comm="syz.1.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 158.882925][T10270] bond0: entered promiscuous mode [ 158.884590][T10270] bond_slave_0: entered promiscuous mode [ 158.886082][T10270] bond_slave_1: entered promiscuous mode [ 159.007644][T10288] overlayfs: empty lowerdir [ 159.042230][T10292] trusted_key: encrypted_key: insufficient parameters specified [ 159.134498][T10297] qnx6: unable to set blocksize [ 159.138833][T10297] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.186675][T10304] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.190414][ T39] audit: type=1326 audit(1733311119.928:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10301 comm="syz.3.1086" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dee37ff19 code=0x0 [ 159.293117][ T39] audit: type=1400 audit(1733311120.031:645): avc: denied { mounton } for pid=10307 comm="syz.5.1088" path="mnt:[4026532880]" dev="nsfs" ino=4026532880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 159.310370][ T39] audit: type=1400 audit(1733311120.041:646): avc: denied { append } for pid=10307 comm="syz.5.1088" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 160.530202][ T5938] Bluetooth: hci1: command tx timeout [ 160.639401][T10361] __nla_validate_parse: 2 callbacks suppressed [ 160.639416][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1102'. [ 161.577758][T10417] sctp: [Deprecated]: syz.5.1109 (pid 10417) Use of int in maxseg socket option. [ 161.577758][T10417] Use struct sctp_assoc_value instead [ 161.610571][T10419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1110'. [ 161.669142][T10420] fuse: Bad value for 'fd' [ 161.965269][T10427] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 161.965447][T10428] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1113'. [ 161.988570][T10427] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1112'. [ 162.023408][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 162.023423][ T39] audit: type=1400 audit(1733311122.585:657): avc: denied { ioctl } for pid=10431 comm="syz.1.1115" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 162.191463][T10448] netlink: 'syz.5.1120': attribute type 10 has an invalid length. [ 162.199898][T10448] team0: Port device netdevsim0 added [ 162.201956][T10448] netlink: 'syz.5.1120': attribute type 10 has an invalid length. [ 162.209017][T10448] team0: Port device netdevsim0 removed [ 162.212067][T10448] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 162.227996][ T39] audit: type=1400 audit(1733311122.772:658): avc: denied { ioctl } for pid=10434 comm="syz.6.1116" path="socket:[36945]" dev="sockfs" ino=36945 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 162.318148][T10456] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1122'. [ 162.320568][T10456] netlink: zone id is out of range [ 162.321898][T10456] netlink: zone id is out of range [ 162.323225][T10456] netlink: get zone limit has 8 unknown bytes [ 162.753567][ T5938] Bluetooth: hci1: command tx timeout [ 162.801776][T10495] Unsupported ieee802154 address type: 0 [ 162.853245][T10500] iso9660: Unknown parameter 'GPL' [ 163.129901][T10512] xt_limit: Overflow, try lower: 1207959552/384 [ 163.298944][ T8561] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 163.381510][T10533] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1011 sclass=netlink_tcpdiag_socket pid=10533 comm=syz.3.1136 [ 163.481630][ T8561] usb 10-1: not running at top speed; connect to a high speed hub [ 163.484567][ T8561] usb 10-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 991, setting to 64 [ 163.487601][ T8561] usb 10-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.490966][ T8561] usb 10-1: config 1 interface 0 has no altsetting 0 [ 163.491959][ T39] audit: type=1400 audit(1733311123.951:659): avc: denied { map } for pid=10545 comm="syz.3.1140" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 163.495399][ T8561] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.40 [ 163.501455][ T8561] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.503991][ T8561] usb 10-1: Product: à°Š [ 163.505119][ T8561] usb 10-1: Manufacturer: à°„ [ 163.506355][ T8561] usb 10-1: SerialNumber: Ṟ涜âƒå–몆Ÿ♃㣊áሊ鵋 [ 163.512216][T10510] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 163.517694][T10546] cgroup: release_agent respecified [ 163.519382][T10547] Driver unsupported XDP return value 0 on prog (id 236) dev N/A, expect packet loss! [ 163.535647][T10546] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 163.592943][T10564] input: syz1 as /devices/virtual/input/input19 [ 163.623794][T10541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1139'. [ 163.658030][T10571] vivid-003: disconnect [ 163.659737][T10571] vivid-003: reconnect [ 163.708076][T10580] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 163.737564][T10510] netlink: 'syz.5.1128': attribute type 1 has an invalid length. [ 163.739688][T10510] netlink: 'syz.5.1128': attribute type 2 has an invalid length. [ 163.741699][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1128'. [ 163.750898][ T8561] usbhid 10-1:1.0: can't add hid device: -71 [ 163.752625][ T8561] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 163.758091][ T8561] usb 10-1: USB disconnect, device number 8 [ 163.782399][T10592] netlink: 'syz.1.1149': attribute type 11 has an invalid length. [ 163.891676][ T39] audit: type=1400 audit(1733311124.334:660): avc: denied { bind } for pid=10594 comm="syz.1.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 163.930319][ T39] audit: type=1400 audit(1733311124.372:661): avc: denied { create } for pid=10608 comm="syz.3.1153" name="#33" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 163.937041][ T39] audit: type=1400 audit(1733311124.372:662): avc: denied { link } for pid=10608 comm="syz.3.1153" name="#33" dev="tmpfs" ino=1567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 163.945135][ T39] audit: type=1400 audit(1733311124.372:663): avc: denied { rename } for pid=10608 comm="syz.3.1153" name="#34" dev="tmpfs" ino=1567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 164.086075][ T39] audit: type=1400 audit(1733311124.512:664): avc: denied { mounton } for pid=10624 comm="syz.6.1158" path="/85/file0" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 164.088566][T10625] bio_check_eod: 2 callbacks suppressed [ 164.088581][T10625] syz.6.1158: attempt to access beyond end of device [ 164.088581][T10625] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 164.104220][T10625] efs: cannot read volume header [ 164.146485][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 164.152635][T10627] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.176147][T10634] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 164.219595][ T39] audit: type=1400 audit(1733311124.643:665): avc: denied { accept } for pid=10626 comm="syz.1.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 164.701162][T10681] tls_set_device_offload: netdev not found [ 164.752391][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1176'. [ 164.958904][ T39] audit: type=1400 audit(1733311125.335:666): avc: denied { setopt } for pid=10698 comm="syz.6.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 165.056170][T10703] 9pnet: Could not find request transport: 0xffffffffffffffff [ 165.195323][T10714] netlink: 'syz.3.1185': attribute type 7 has an invalid length. [ 165.244941][T10724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1187'. [ 165.340086][T10739] ubi0: attaching mtd0 [ 165.342943][T10739] ubi0: scanning is finished [ 165.344497][T10739] ubi0: empty MTD device detected [ 165.387003][T10676] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 165.389152][T10676] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 165.435067][T10739] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 165.437714][T10739] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 165.440420][T10739] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 165.442843][T10739] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 165.447529][T10739] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 165.449426][T10739] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 165.451572][T10739] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2327605062 [ 165.455115][T10739] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 165.457797][T10744] ubi0: background thread "ubi_bgt0d" started, PID 10744 [ 165.504506][ T5938] block nbd0: Receive control failed (result -107) [ 165.555013][T10730] nbd0: detected capacity change from 0 to 256 [ 165.559822][T10750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=10750 comm=syz.5.1195 [ 165.565661][ T7040] block nbd0: Dead connection, failed to find a fallback [ 165.567675][ T7040] block nbd0: shutting down sockets [ 165.569135][ T7040] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.583019][ T7040] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.585171][ T7040] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.588173][ T7040] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.593720][ T7040] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.596095][ T7040] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.600384][ T7040] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.602794][ T7040] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.604967][ T7040] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.607328][ T7040] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.609895][ T7040] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.612255][ T7040] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.614509][ T7040] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.619292][ T7040] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.621623][ T7040] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.623977][ T7040] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.627498][ T7040] ldm_validate_partition_table(): Disk read failed. [ 165.630344][ T7040] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.632724][ T7040] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.634990][ T7040] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.635913][T10760] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 165.637439][ T7040] Buffer I/O error on dev nbd0, logical block 0, async page read [ 165.642538][ T7040] Dev nbd0: unable to read RDB block 0 [ 165.644273][ T7040] nbd0: unable to read partition table [ 165.652149][ T7040] ldm_validate_partition_table(): Disk read failed. [ 165.654111][ T7040] Dev nbd0: unable to read RDB block 0 [ 165.656356][ T7040] nbd0: unable to read partition table [ 165.737464][T10774] sg_read: process 1071 (syz.1.1202) changed security contexts after opening file descriptor, this is not allowed. [ 165.745645][T10774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.895647][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.978005][ T30] IPVS: starting estimator thread 0... [ 166.067888][T10803] IPVS: using max 42 ests per chain, 100800 per kthread [ 166.356275][ T35] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 166.385725][ T5938] block nbd1: Receive control failed (result -107) [ 166.474530][T10840] nbd1: detected capacity change from 0 to 20 [ 166.482416][T10847] block nbd1: Dead connection, failed to find a fallback [ 166.484589][T10847] block nbd1: shutting down sockets [ 166.487383][T10847] ldm_validate_partition_table(): Disk read failed. [ 166.489566][T10847] Dev nbd1: unable to read RDB block 0 [ 166.491130][T10847] nbd1: unable to read partition table [ 166.492627][T10847] nbd1: partition table beyond EOD, truncated [ 166.499219][T10847] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 166.502748][T10847] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=9, location=9 [ 166.506253][T10847] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8, location=8 [ 166.508737][T10847] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=7, location=7 [ 166.508998][T10861] smc: net device wg0 applied user defined pnetid SYZ0 [ 166.511122][T10847] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 166.514472][T10861] netlink: 'syz.5.1232': attribute type 39 has an invalid length. [ 166.516788][ T7040] ldm_validate_partition_table(): Disk read failed. [ 166.517086][ T7040] Dev nbd1: unable to read RDB block 0 [ 166.517822][T10847] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 166.517967][T10847] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=4, location=4 [ 166.518083][T10847] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3, location=3 [ 166.518158][T10847] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2, location=2 [ 166.518248][T10847] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 166.518590][T10847] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 166.518703][T10847] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 166.518843][T10847] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 166.518905][T10847] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 166.518921][T10847] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 166.527455][ T35] usb 11-1: Using ep0 maxpacket: 8 [ 166.531293][ T7040] nbd1: unable to read partition table [ 166.537576][ T35] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 166.540239][ T7040] nbd1: partition table beyond EOD, [ 166.541827][ T35] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 166.544983][ T7040] truncated [ 166.546618][ T35] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.564343][ T7040] ldm_validate_partition_table(): Disk read failed. [ 166.565721][ T35] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.568158][ T7040] Dev nbd1: unable to read RDB block 0 [ 166.573663][ T35] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.574265][ T7040] nbd1: unable to read partition table [ 166.577200][ T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.578757][ T7040] nbd1: partition table beyond EOD, truncated [ 166.593618][T10861] smc: removing net device wg0 with user defined pnetid SYZ0 [ 166.666484][T10873] __nla_validate_parse: 5 callbacks suppressed [ 166.666494][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 166.670683][T10873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.737688][T10873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.800372][ T35] usb 11-1: GET_CAPABILITIES returned 0 [ 166.801902][ T35] usbtmc 11-1:16.0: can't read capabilities [ 166.928588][T10892] jfs: Unknown parameter '/dev/kvm' [ 167.077889][ C0] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 167.080477][T10902] usbtmc 11-1:16.0: Unable to send data, error -71 [ 167.083452][ T35] usb 11-1: USB disconnect, device number 3 [ 167.149088][ T8561] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 167.156486][T10906] ERROR: device name not specified. [ 167.207436][T10906] kvm: MONITOR instruction emulated as NOP! [ 167.212765][T10906] Bluetooth: hci4: Frame reassembly failed (-84) [ 167.218462][ T7634] Bluetooth: hci4: Frame reassembly failed (-84) [ 167.321082][ T8561] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.323581][ T8561] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.325805][ T8561] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 167.328073][ T8561] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.331300][ T8561] usb 10-1: config 0 descriptor?? [ 167.334917][ T8561] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 167.336875][ T8561] dvb-usb: bulk message failed: -22 (3/0) [ 167.344210][ T8561] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 167.346814][ T8561] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 167.348919][ T8561] usb 10-1: media controller created [ 167.352044][ T8561] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.361890][ T8561] dvb-usb: bulk message failed: -22 (6/0) [ 167.363742][ T8561] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 167.366743][ T8561] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb10/10-1/input/input20 [ 167.372791][ T8561] dvb-usb: schedule remote query interval to 150 msecs. [ 167.374757][ T8561] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 167.462824][T10917] batadv_slave_1: entered promiscuous mode [ 167.464701][T10917] batadv_slave_1: left promiscuous mode [ 167.544847][ T8561] dvb-usb: bulk message failed: -22 (1/0) [ 167.546636][ T8561] dvb-usb: error while querying for an remote control event. [ 167.556277][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 167.556286][ T39] audit: type=1400 audit(1733311127.758:675): avc: denied { mount } for pid=10889 comm="syz.5.1241" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 167.558709][ T5993] usb 10-1: USB disconnect, device number 9 [ 167.563479][ T39] audit: type=1400 audit(1733311127.758:676): avc: denied { mounton } for pid=10889 comm="syz.5.1241" path="/51/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 167.584496][ T5993] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 167.701081][ T39] audit: type=1400 audit(1733311127.889:677): avc: denied { create } for pid=10928 comm="syz.6.1252" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 167.707014][ T39] audit: type=1400 audit(1733311127.898:678): avc: denied { ioctl } for pid=10928 comm="syz.6.1252" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37569 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 167.744785][ T39] audit: type=1400 audit(1733311127.935:679): avc: denied { map } for pid=10928 comm="syz.6.1252" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 167.751347][ T39] audit: type=1400 audit(1733311127.935:680): avc: denied { read write } for pid=10928 comm="syz.6.1252" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=37572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 168.106779][ T39] audit: type=1400 audit(1733311128.272:681): avc: denied { unmount } for pid=10092 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 168.387470][ T35] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 168.537141][ T35] usb 10-1: device descriptor read/64, error -71 [ 168.686508][ T39] audit: type=1400 audit(1733311128.815:682): avc: denied { ioctl } for pid=10942 comm="syz.6.1256" path="socket:[39955]" dev="sockfs" ino=39955 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 168.773069][T10946] netlink: 'syz.1.1257': attribute type 30 has an invalid length. [ 168.825943][ T35] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 168.850508][ T39] audit: type=1400 audit(1733311128.974:683): avc: denied { create } for pid=10952 comm="syz.1.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 168.855467][ T39] audit: type=1400 audit(1733311128.974:684): avc: denied { bind } for pid=10952 comm="syz.1.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 168.911943][ T1108] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 168.913816][ T1108] ata1: failed to read log page 10h (errno=-5) [ 168.915411][ T1108] ata1.00: exception Emask 0x1 SAct 0x200000 SErr 0x0 action 0x0 [ 168.917410][ T1108] ata1.00: irq_stat 0x40000000 [ 168.918677][ T1108] ata1.00: failed command: WRITE FPDMA QUEUED [ 168.920337][ T1108] ata1.00: cmd 61/18:a8:7a:09:10/00:00:00:00:00/40 tag 21 ncq dma 12288 out [ 168.920337][ T1108] res 50/00:00:00:00:00/00:00:00:00:00/a0 Emask 0x1 (device error) [ 168.925099][ T1108] ata1.00: status: { DRDY } [ 168.927053][ T1108] ata1.00: configured for UDMA/100 [ 168.928663][ T1108] ata1: EH complete [ 168.964743][ T35] usb 10-1: device descriptor read/64, error -71 [ 169.083195][ T35] usb usb10-port1: attempt power cycle [ 169.103756][ T8887] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 169.242714][ T8887] usb 6-1: device descriptor read/64, error -71 [ 169.424527][ T5936] Bluetooth: hci4: command 0xfc11 tx timeout [ 169.424835][ T5938] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 169.456655][ T35] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 169.478475][ T35] usb 10-1: device descriptor read/8, error -71 [ 169.499333][ T8887] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 169.552254][T10957] ufs: You didn't specify the type of your ufs filesystem [ 169.552254][T10957] [ 169.552254][T10957] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 169.552254][T10957] [ 169.552254][T10957] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 169.559991][T10957] ufs: failed to set blocksize [ 169.638484][ T8887] usb 6-1: device descriptor read/64, error -71 [ 169.745324][ T35] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 169.756454][ T8887] usb usb6-port1: attempt power cycle [ 169.767610][ T35] usb 10-1: device descriptor read/8, error -71 [ 169.836680][T10984] ISOFS: Unable to identify CD-ROM format. [ 169.850990][T10984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1271'. [ 169.895752][ T35] usb usb10-port1: unable to enumerate USB device [ 170.008606][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1274'. [ 170.115131][T11000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1276'. [ 170.119349][ T8887] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 170.141927][ T8887] usb 6-1: device descriptor read/8, error -71 [ 170.408063][ T8887] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 170.430750][ T8887] usb 6-1: device descriptor read/8, error -71 [ 170.558151][ T8887] usb usb6-port1: unable to enumerate USB device [ 170.789347][T11027] netlink: 'syz.6.1284': attribute type 10 has an invalid length. [ 170.791629][T11027] netlink: 'syz.6.1284': attribute type 10 has an invalid length. [ 171.415489][T11081] syz.3.1300: attempt to access beyond end of device [ 171.415489][T11081] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 171.419240][T11081] syz.3.1300: attempt to access beyond end of device [ 171.419240][T11081] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 171.421690][T11083] netlink: 'syz.5.1301': attribute type 30 has an invalid length. [ 171.425217][T11081] syz.3.1300: attempt to access beyond end of device [ 171.425217][T11081] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 171.425752][T11083] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 171.428974][T11081] syz.3.1300: attempt to access beyond end of device [ 171.428974][T11081] nbd3: rw=0, sector=18, nr_sectors = 2 limit=0 [ 171.431395][T11083] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 171.435746][T11081] syz.3.1300: attempt to access beyond end of device [ 171.435746][T11081] nbd3: rw=0, sector=30, nr_sectors = 2 limit=0 [ 171.441119][T11081] syz.3.1300: attempt to access beyond end of device [ 171.441119][T11081] nbd3: rw=0, sector=36, nr_sectors = 2 limit=0 [ 171.444426][T11081] VFS: unable to find oldfs superblock on device nbd3 [ 182.268238][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 182.268253][ T39] audit: type=1400 audit(1733311141.517:700): avc: denied { bind } for pid=11089 comm="syz.5.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.278180][ T39] audit: type=1400 audit(1733311141.517:701): avc: denied { getopt } for pid=11089 comm="syz.5.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 182.308508][ T39] audit: type=1400 audit(1733311141.564:702): avc: denied { map } for pid=11088 comm="syz.6.1303" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 182.367224][T11103] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 182.373413][ T39] audit: type=1400 audit(1733311141.620:703): avc: denied { mount } for pid=11102 comm="syz.3.1307" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 182.478678][T11115] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1312'. [ 182.607022][T11126] loop2: detected capacity change from 0 to 7 [ 182.609986][T11126] Dev loop2: unable to read RDB block 7 [ 182.611577][T11126] loop2: AHDI p1 p2 [ 182.612605][T11126] loop2: partition table partially beyond EOD, truncated [ 182.614498][T11126] loop2: p1 size 150995200 extends beyond EOD, truncated [ 182.659645][ T39] audit: type=1400 audit(1733311141.892:704): avc: denied { map } for pid=11139 comm="syz.1.1319" path="socket:[39665]" dev="sockfs" ino=39665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.659760][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1319'. [ 182.665021][ T39] audit: type=1400 audit(1733311141.892:705): avc: denied { read } for pid=11139 comm="syz.1.1319" path="socket:[39665]" dev="sockfs" ino=39665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.681431][ T8] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 182.684653][ T39] audit: type=1400 audit(1733311141.910:706): avc: denied { ioctl } for pid=11139 comm="syz.1.1319" path="socket:[39665]" dev="sockfs" ino=39665 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 182.734430][ T30] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 182.794663][T11155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1322'. [ 182.797532][T11155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1322'. [ 182.800638][T11155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1322'. [ 182.803507][T11155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1322'. [ 182.842261][ T8] usb 11-1: Using ep0 maxpacket: 32 [ 182.855275][ T8] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 182.860001][ T8] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 182.862223][ T8] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 182.865219][ T8] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.868215][ T8] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.870593][ T8] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 182.874618][ T8] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 182.876979][ T8] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.880130][ T8] usb 11-1: config 0 descriptor?? [ 182.896040][ T30] usb 10-1: Using ep0 maxpacket: 8 [ 182.898665][ T30] usb 10-1: config 1 has an invalid descriptor of length 219, skipping remainder of the config [ 182.901300][ T30] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 182.903529][ T30] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 35075, setting to 64 [ 182.905008][T11159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1324'. [ 182.905451][T11162] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1326'. [ 182.906846][ T30] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 182.913194][ T30] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.918865][ T30] hub 10-1:1.0: bad descriptor, ignoring hub [ 182.920856][ T30] hub 10-1:1.0: probe with driver hub failed with error -5 [ 182.924060][ T30] cdc_wdm 10-1:1.0: skipping garbage [ 182.933941][ T30] cdc_wdm 10-1:1.0: skipping garbage [ 182.935373][ T30] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 182.935519][T11164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1327'. [ 183.010482][T11177] dccp_invalid_packet: P.Data Offset(4) too small [ 183.042710][T11182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1333'. [ 183.064459][T11184] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 183.099102][T11108] overlayfs: cannot append lower layer [ 183.100633][ T8] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 183.326527][ T39] audit: type=1400 audit(1733311142.509:707): avc: denied { ioctl } for pid=11107 comm="syz.6.1309" path="/dev/usb/lp0" dev="devtmpfs" ino=3015 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 183.382154][ T8] usb 10-1: USB disconnect, device number 14 [ 183.408480][ T64] usb 11-1: USB disconnect, device number 4 [ 183.411724][ T64] usblp0: removed [ 183.760636][ T8] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 183.910209][ T8] usb 10-1: device descriptor read/64, error -71 [ 183.966753][ T39] audit: type=1400 audit(1733311143.108:708): avc: denied { write } for pid=11211 comm="syz.1.1341" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 184.011821][T11217] input: syz0 as /devices/virtual/input/input21 [ 184.013509][T11217] input: failed to attach handler leds to device input21, error: -6 [ 184.032602][T11217] tmpfs: Unknown parameter 'usrquotaXPWRBN:00/input/input0 [ 184.032602][T11217] U: Uniq' [ 184.035620][T11217] cgroup: subsys name conflicts with all [ 184.177485][ T8] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 184.211367][ T39] audit: type=1400 audit(1733311143.342:709): avc: denied { name_bind } for pid=11222 comm="syz.1.1345" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 184.327307][ T8] usb 10-1: device descriptor read/64, error -71 [ 184.444914][ T8] usb usb10-port1: attempt power cycle [ 184.819046][ T8] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 184.851675][ T8] usb 10-1: device descriptor read/8, error -71 [ 185.139717][ T8] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 185.161739][ T8] usb 10-1: device descriptor read/8, error -71 [ 185.290165][ T8] usb usb10-port1: unable to enumerate USB device [ 185.465018][T11250] Unsupported ieee802154 address type: 0 [ 185.489452][T11254] overlayfs: failed to resolve './bus/file0': -2 [ 185.555342][T11259] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.782832][T11275] SELinux: Context system_u:object_r:netlabel_mgmt_exec_t:s0 is not valid (left unmapped). [ 185.903185][T11283] ubi0: detaching mtd0 [ 185.912357][T11283] ubi0: mtd0 is detached [ 185.941727][T11272] xt_hashlimit: max too large, truncated to 1048576 [ 186.103530][T11294] ptrace attach of "/syz-executor exec"[11295] was attempted by "/syz-executor exec"[11294] [ 186.138083][T11300] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 186.207062][T11307] netlink: 'syz.6.1372': attribute type 1 has an invalid length. [ 186.398767][T11322] overlayfs: failed to resolve './file1': -2 [ 186.467402][T11332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=11332 comm=syz.6.1381 [ 186.469666][T11334] netlink: 'syz.6.1381': attribute type 10 has an invalid length. [ 186.472998][T11334] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 186.474871][T11334] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 186.480057][T11334] bond0: (slave wlan1): Opening slave failed [ 186.795230][T11367] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 186.804048][T11369] e1000 0000:00:06.0 eth0: Unsupported Speed/Duplex configuration [ 187.019904][T11384] TCP: TCP_TX_DELAY enabled [ 187.027223][T11384] SELinux: security_context_str_to_sid (syst) failed with errno=-22 [ 187.029618][T11384] afs: Unknown parameter '' [ 187.266902][T11414] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 187.277756][ T35] usb 11-1: new low-speed USB device number 5 using dummy_hcd [ 187.322712][T11430] input: syz0 as /devices/virtual/input/input22 [ 187.324730][T11430] input: failed to attach handler leds to device input22, error: -6 [ 187.439589][ T35] usb 11-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 187.442314][ T35] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.446560][ T35] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.449185][ T35] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.451372][ T35] usb 11-1: Product: 퀗ï€äµ‡æº‰è®ºìº¥â£…䭳䊉ॠ쀕솀厧䕓㎧í‡ë¼·â•‡âŠ­èª¸î–€åš»ì±µé¢¾ê¯žã¶˜å½¡è¶¿ëº…䎑⢺é»ë´”Ὧ鑨랪褴憺ﴂ㣱欈䡬嫨ા꣢凪딴è¢ë»“ᨊ笣뽻⃫璉㲣顭煰튨㋾匔殕홞촢⿴⭓馹툸웙å®ê¿¢æ«€â›ã¯™á„ ê§¹éƒ»á—‡ë¹²å“‹é¾Šì·ªí—¨î€‰éŽ [ 187.458557][ T35] usb 11-1: Manufacturer: ä€ [ 187.460268][ T35] usb 11-1: SerialNumber:  [ 187.609321][ T8] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 187.682081][T11391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.685710][T11391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.780283][ T8] usb 10-1: Using ep0 maxpacket: 16 [ 187.782848][ T8] usb 10-1: config 0 has no interfaces? [ 187.784966][ T8] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.788397][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.792288][ T8] usb 10-1: config 0 descriptor?? [ 188.028689][ T5935] usb 10-1: USB disconnect, device number 19 [ 188.240965][ T35] usb 11-1: 0:2 : does not exist [ 188.257109][ T35] usb 11-1: USB disconnect, device number 5 [ 188.373038][T11456] IPv6: addrconf: prefix option has invalid lifetime [ 188.433410][T11109] udevd[11109]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.482960][T11466] ALSA: seq fatal error: cannot create timer (-22) [ 188.640714][ T39] kauditd_printk_skb: 48 callbacks suppressed [ 188.640724][ T39] audit: type=1400 audit(1733311147.485:758): avc: denied { transfer } for pid=11478 comm="syz.6.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 188.667243][ T39] audit: type=1400 audit(1733311147.504:759): avc: denied { setattr } for pid=11478 comm="syz.6.1425" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 188.709092][T11486] kvm: user requested TSC rate below hardware speed [ 188.711575][T11486] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2248643489 (17989147912 ns) > initial count (11631199424 ns). Using initial count to start timer. [ 188.718737][ T39] audit: type=1400 audit(1733311147.551:760): avc: denied { ioctl } for pid=11488 comm="syz.6.1429" path="socket:[43288]" dev="sockfs" ino=43288 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 188.744221][ T39] audit: type=1400 audit(1733311147.579:761): avc: denied { connect } for pid=11492 comm="syz.5.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.746771][T11493] __nla_validate_parse: 10 callbacks suppressed [ 188.746785][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1430'. [ 188.756029][T11493] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1430'. [ 188.763579][T11489] netlink: 'syz.6.1429': attribute type 12 has an invalid length. [ 188.811052][ T39] audit: type=1400 audit(1733311147.644:762): avc: denied { watch watch_reads } for pid=11497 comm="syz.6.1432" path="/proc/469" dev="proc" ino=42630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 188.817790][T11496] Process accounting resumed [ 188.885990][ T39] audit: type=1400 audit(1733311147.710:763): avc: denied { write } for pid=11516 comm="syz.1.1437" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 189.005145][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1442'. [ 189.839226][T11542] syz.1.1444(11542): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 189.988293][T11568] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 190.010632][ T1143] Bluetooth: hci4: Frame reassembly failed (-84) [ 190.012713][T11570] Bluetooth: hci4: Frame reassembly failed (-84) [ 190.113262][T11573] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 190.130481][T11573] bridge: RTM_NEWNEIGH with invalid ether address [ 190.232252][T11565] [ 190.232935][T11565] ====================================================== [ 190.234823][T11565] WARNING: possible circular locking dependency detected [ 190.236626][T11565] 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 Not tainted [ 190.238654][T11565] ------------------------------------------------------ [ 190.241590][T11565] syz.6.1450/11565 is trying to acquire lock: [ 190.243225][T11565] ffff88802619d0b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_disable+0xb5/0x490 [ 190.245743][T11565] [ 190.245743][T11565] but task is already holding lock: [ 190.247653][T11565] ffff8880259aacf8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 190.250338][T11565] [ 190.250338][T11565] which lock already depends on the new lock. [ 190.250338][T11565] [ 190.253023][T11565] [ 190.253023][T11565] the existing dependency chain (in reverse order) is: [ 190.255367][T11565] [ 190.255367][T11565] -> #5 (&q->sysfs_lock){+.+.}-{4:4}: [ 190.257323][T11565] __mutex_lock+0x19b/0xa60 [ 190.258658][T11565] __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 190.260343][T11565] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 190.261920][T11565] nbd_start_device+0x15b/0xd70 [ 190.263353][T11565] nbd_ioctl+0x21a/0xfd0 [ 190.264634][T11565] blkdev_ioctl+0x276/0x6d0 [ 190.265947][T11565] __x64_sys_ioctl+0x190/0x200 [ 190.267331][T11565] do_syscall_64+0xcd/0x250 [ 190.268649][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.270334][T11565] [ 190.270334][T11565] -> #4 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 190.272596][T11565] blk_mq_submit_bio+0x1fb6/0x24c0 [ 190.274084][T11565] __submit_bio+0x384/0x540 [ 190.275400][T11565] submit_bio_noacct_nocheck+0x698/0xd70 [ 190.276989][T11565] submit_bio_noacct+0x93a/0x1e20 [ 190.278421][T11565] block_read_full_folio+0x812/0xa50 [ 190.279934][T11565] filemap_read_folio+0xc6/0x2a0 [ 190.281341][T11565] filemap_get_pages+0x155f/0x1be0 [ 190.282857][T11565] filemap_read+0x3ca/0xd70 [ 190.284199][T11565] blkdev_read_iter+0x187/0x480 [ 190.285649][T11565] vfs_read+0x87f/0xbe0 [ 190.286901][T11565] ksys_read+0x12b/0x250 [ 190.288147][T11565] do_syscall_64+0xcd/0x250 [ 190.289486][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.291155][T11565] [ 190.291155][T11565] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 190.293331][T11565] down_read+0x9a/0x330 [ 190.294569][T11565] filemap_fault+0x2e0/0x2820 [ 190.296312][T11565] __do_fault+0x10a/0x490 [ 190.298078][T11565] do_pte_missing+0x9a4/0x3e70 [ 190.300000][T11565] __handle_mm_fault+0x103c/0x2a40 [ 190.302013][T11565] handle_mm_fault+0x3fa/0xaa0 [ 190.303897][T11565] __get_user_pages+0x8d9/0x3b50 [ 190.305741][T11565] populate_vma_page_range+0x27f/0x3a0 [ 190.307815][T11565] mprotect_fixup+0x9a7/0xbe0 [ 190.309539][T11565] do_mprotect_pkey+0x981/0xcf0 [ 190.311337][T11565] __x64_sys_mprotect+0x78/0xc0 [ 190.313150][T11565] do_syscall_64+0xcd/0x250 [ 190.314926][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.317112][T11565] [ 190.317112][T11565] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 190.319274][T11565] __might_fault+0x11b/0x190 [ 190.320622][T11565] _copy_from_user+0x29/0xd0 [ 190.322382][T11565] __blk_trace_setup+0xa8/0x180 [ 190.324324][T11565] blk_trace_setup+0x47/0x70 [ 190.326206][T11565] sg_ioctl+0x65e/0x2750 [ 190.327967][T11565] __x64_sys_ioctl+0x190/0x200 [ 190.329978][T11565] do_syscall_64+0xcd/0x250 [ 190.331585][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.333246][T11565] [ 190.333246][T11565] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 190.335501][T11565] __mutex_lock+0x19b/0xa60 [ 190.336801][T11565] blk_mq_exit_sched+0xd1/0x310 [ 190.338192][T11565] elevator_disable+0xc0/0x490 [ 190.339570][T11565] __blk_mq_update_nr_hw_queues+0x3bb/0x14e0 [ 190.341289][T11565] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 190.342929][T11565] nbd_start_device+0x15b/0xd70 [ 190.344334][T11565] nbd_ioctl+0x21a/0xfd0 [ 190.345624][T11565] blkdev_ioctl+0x276/0x6d0 [ 190.346932][T11565] __x64_sys_ioctl+0x190/0x200 [ 190.348308][T11565] do_syscall_64+0xcd/0x250 [ 190.349685][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.351488][T11565] [ 190.351488][T11565] -> #0 (&eq->sysfs_lock){+.+.}-{4:4}: [ 190.353442][T11565] __lock_acquire+0x249e/0x3c40 [ 190.354836][T11565] lock_acquire.part.0+0x11b/0x380 [ 190.356516][T11565] __mutex_lock+0x19b/0xa60 [ 190.357816][T11565] elevator_disable+0xb5/0x490 [ 190.359216][T11565] __blk_mq_update_nr_hw_queues+0x3bb/0x14e0 [ 190.360985][T11565] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 190.362569][T11565] nbd_start_device+0x15b/0xd70 [ 190.364019][T11565] nbd_ioctl+0x21a/0xfd0 [ 190.365373][T11565] blkdev_ioctl+0x276/0x6d0 [ 190.366675][T11565] __x64_sys_ioctl+0x190/0x200 [ 190.368030][T11565] do_syscall_64+0xcd/0x250 [ 190.369726][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.371484][T11565] [ 190.371484][T11565] other info that might help us debug this: [ 190.371484][T11565] [ 190.374145][T11565] Chain exists of: [ 190.374145][T11565] &eq->sysfs_lock --> &q->q_usage_counter(io)#49 --> &q->sysfs_lock [ 190.374145][T11565] [ 190.378469][T11565] Possible unsafe locking scenario: [ 190.378469][T11565] [ 190.380833][T11565] CPU0 CPU1 [ 190.382226][T11565] ---- ---- [ 190.383598][T11565] lock(&q->sysfs_lock); [ 190.385011][T11565] lock(&q->q_usage_counter(io)#49); [ 190.387720][T11565] lock(&q->sysfs_lock); [ 190.389968][T11565] lock(&eq->sysfs_lock); [ 190.391290][T11565] [ 190.391290][T11565] *** DEADLOCK *** [ 190.391290][T11565] [ 190.393356][T11565] 5 locks held by syz.6.1450/11565: [ 190.394867][T11565] #0: ffff888026187998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 190.397990][T11565] #1: ffff8880261878d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 190.401574][T11565] #2: ffff8880259aa7c8 (&q->q_usage_counter(io)#55){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 190.405387][T11565] #3: ffff8880259aa800 (&q->q_usage_counter(queue)#39){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x1fc/0x14e0 [ 190.409403][T11565] #4: ffff8880259aacf8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x446/0x14e0 [ 190.412995][T11565] [ 190.412995][T11565] stack backtrace: [ 190.415006][T11565] CPU: 3 UID: 0 PID: 11565 Comm: syz.6.1450 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 190.418103][T11565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.421276][T11565] Call Trace: [ 190.422498][T11565] [ 190.423571][T11565] dump_stack_lvl+0x116/0x1f0 [ 190.425265][T11565] print_circular_bug+0x419/0x5d0 [ 190.426613][T11565] check_noncircular+0x31a/0x400 [ 190.427896][T11565] ? __pfx_check_noncircular+0x10/0x10 [ 190.429316][T11565] ? lockdep_lock+0xc6/0x200 [ 190.430604][T11565] ? __pfx_lockdep_lock+0x10/0x10 [ 190.432114][T11565] ? __lock_acquire+0xcc5/0x3c40 [ 190.433394][T11565] __lock_acquire+0x249e/0x3c40 [ 190.434671][T11565] ? __pfx___lock_acquire+0x10/0x10 [ 190.436245][T11565] ? find_held_lock+0x2d/0x110 [ 190.437433][T11565] lock_acquire.part.0+0x11b/0x380 [ 190.438762][T11565] ? elevator_disable+0xb5/0x490 [ 190.440046][T11565] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 190.441504][T11565] ? rcu_is_watching+0x12/0xc0 [ 190.442726][T11565] ? trace_lock_acquire+0x14e/0x1f0 [ 190.444046][T11565] ? elevator_disable+0xb5/0x490 [ 190.445445][T11565] ? lock_acquire+0x2f/0xb0 [ 190.447000][T11565] ? elevator_disable+0xb5/0x490 [ 190.448515][T11565] __mutex_lock+0x19b/0xa60 [ 190.449794][T11565] ? elevator_disable+0xb5/0x490 [ 190.451089][T11565] ? elevator_disable+0xb5/0x490 [ 190.452374][T11565] ? __pfx___mutex_lock+0x10/0x10 [ 190.453781][T11565] ? __pfx_blk_mq_sched_free_rqs+0x10/0x10 [ 190.455829][T11565] ? mark_held_locks+0x9f/0xe0 [ 190.457317][T11565] ? elevator_disable+0xb5/0x490 [ 190.458601][T11565] elevator_disable+0xb5/0x490 [ 190.459887][T11565] __blk_mq_update_nr_hw_queues+0x3bb/0x14e0 [ 190.461783][T11565] ? __mutex_trylock_common+0xea/0x250 [ 190.463312][T11565] ? __pfx___mutex_trylock_common+0x10/0x10 [ 190.464840][T11565] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 190.466605][T11565] ? rcu_is_watching+0x12/0xc0 [ 190.467975][T11565] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 190.469638][T11565] ? __pfx___mutex_trylock_common+0x10/0x10 [ 190.471289][T11565] ? avc_has_perm_noaudit+0x61/0x3a0 [ 190.472966][T11565] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 190.474448][T11565] ? __pfx___mutex_lock+0x10/0x10 [ 190.475806][T11565] ? trace_contention_end+0xee/0x140 [ 190.477631][T11565] ? __mutex_lock+0x1cc/0xa60 [ 190.479337][T11565] ? nbd_ioctl+0x151/0xfd0 [ 190.480936][T11565] ? __pfx___mutex_lock+0x10/0x10 [ 190.482498][T11565] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 190.484110][T11565] nbd_start_device+0x15b/0xd70 [ 190.485391][T11565] ? bpf_lsm_capable+0x9/0x10 [ 190.486623][T11565] nbd_ioctl+0x21a/0xfd0 [ 190.487892][T11565] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 190.489650][T11565] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 190.491346][T11565] ? __pfx_nbd_ioctl+0x10/0x10 [ 190.492879][T11565] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 190.494783][T11565] ? __pfx_lock_release+0x10/0x10 [ 190.495937][T11565] ? __pfx_nbd_ioctl+0x10/0x10 [ 190.497176][T11565] blkdev_ioctl+0x276/0x6d0 [ 190.498712][T11565] ? __pfx_blkdev_ioctl+0x10/0x10 [ 190.500071][T11565] ? selinux_file_ioctl+0x180/0x270 [ 190.501407][T11565] ? selinux_file_ioctl+0xb4/0x270 [ 190.502924][T11565] ? __pfx_blkdev_ioctl+0x10/0x10 [ 190.504219][T11565] __x64_sys_ioctl+0x190/0x200 [ 190.505468][T11565] do_syscall_64+0xcd/0x250 [ 190.506735][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.508377][T11565] RIP: 0033:0x7f7e75b7ff19 [ 190.509548][T11565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.514885][T11565] RSP: 002b:00007f7e739f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.517401][T11565] RAX: ffffffffffffffda RBX: 00007f7e75d45fa0 RCX: 00007f7e75b7ff19 [ 190.519478][T11565] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 000000000000000b [ 190.521944][T11565] RBP: 00007f7e75bf3986 R08: 0000000000000000 R09: 0000000000000000 [ 190.524169][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.526425][T11565] R13: 0000000000000000 R14: 00007f7e75d45fa0 R15: 00007ffc017e7428 [ 190.528497][T11565] [ 190.529384][ C3] vkms_vblank_simulate: vblank timer overrun [ 190.571730][T11578] block nbd6: shutting down sockets [ 192.184732][ T66] Bluetooth: hci4: command 0x1003 tx timeout [ 192.184757][ T5938] Bluetooth: hci4: Opcode 0x1003 failed: -110 VM DIAGNOSIS: 11:19:18 Registers: info registers vcpu 0 CPU#0 RAX=0000000000168ffc RBX=0000000000000000 RCX=ffffffff8b29c759 RDX=ffffed100d4c6fee RSI=ffffffff8bd1b3e0 RDI=ffffffff817086b9 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f0410 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555574aa808 CR3=0000000031fa4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffe000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff83101e80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2ef5f4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2ef5f483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2ef5f4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2ef5f484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2ef5f48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc2ef5f49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000178d2c RBX=0000000000000001 RCX=ffffffff8b29c759 RDX=ffffed100d4e6fee RSI=ffffffff8bd1b3e0 RDI=ffffffff817086b9 RBP=ffffed10039df910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000044d00 R12=0000000000000001 R13=ffff88801cefc880 R14=ffffffff905f0410 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc2ef565cc0 CR3=0000000025740000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555816fdbed 00005555816fd4b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79fb510d00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6ab89724 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002860304020002 84033c0400028003 2008000610002010 0006014be8000800 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040100000a080606 0101b80208000298 0300080002900301 8408000288030502 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1380040680030680 0412a00300080012 900303ffffffff04 1280032010000280 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 014a08138c030100 0008040613880300 0000300808138003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100012800401 000006080606013a ae2080080012e003 00100012d0030010 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0012c00302100012 b003601000069003 2100070000000000 9200058000000480 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002048022000c00 00001a0000000000 00000000014a0813 8c03010000080406 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1388030000003008 0813800313800406 800306800412a003 00080012900303ff ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000130344 RBX=0000000000000002 RCX=ffffffff8b29c759 RDX=ffffed100d506fee RSI=ffffffff8bd1b3e0 RDI=ffffffff817086b9 RBP=ffffed1003ad1000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d506fed R10=ffff88806a837f6b R11=0000000000000000 R12=0000000000000002 R13=ffff88801d688000 R14=ffffffff905f0410 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3713e7 CR3=0000000040dbe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc017e77b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e75bf4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e75bf483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e75bf4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e75bf484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e75bf48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7e75bf49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c9955 RDI=ffffffff9ab10be0 RBP=ffffffff9ab10ba0 RSP=ffffc9000c49eff8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff851c98f0 R15=0000000000000000 RIP=ffffffff851c997f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7e739f66c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020004000 CR3=000000005b686000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000fc000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd1364e690 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7dee3f4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7dee3f483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7dee3f4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7dee3f484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7dee3f48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7dee3f49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000