last executing test programs: 1m5.180333848s ago: executing program 1 (id=22): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0x4004e502, &(0x7f0000000040)=0xc) getsockname(r0, &(0x7f0000000080)=@nl, &(0x7f0000000100)=0x80) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000140)={0xcc, 0x0, 0x1}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_mtu=0x100}}) (async) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000240)={[0xdddd0000, 0xdddd1000, 0xdddd1000, 0x1], 0x8000, 0x0, 0x2}) getsockname(r0, &(0x7f00000002c0)=@tipc, &(0x7f0000000340)=0x80) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x6}) (async) r3 = socket$netlink(0x10, 0x3, 0xf) read$FUSE(r0, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000002480)={{0x1, 0x1, 0x18, r2, {0x0}}, './file0\x00'}) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r0, &(0x7f0000002600)={&(0x7f00000003c0)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400), 0x0, &(0x7f0000002580)=[@rights={{0x24, 0x1, 0x1, [r3, r0, r2, r1, r2]}}, @rights={{0x28, 0x1, 0x1, [r3, r2, r1, r1, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}], 0x70, 0x4}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002640), 0xc8000, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002680)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000026c0)={0x8000000, 0xff}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r8, 0x40047211, &(0x7f0000002700)) (async) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000002740)=0xfffffff7) (async) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000002780)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000027c0)={"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"}) (async) utime(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x6, 0x7fff}) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000002c40)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) writev(r8, &(0x7f0000002cc0)=[{&(0x7f0000002c80)="235e40e69ceffa4722a511da12", 0xd}], 0x1) r9 = syz_open_dev$vcsn(&(0x7f0000002d00), 0x3f96, 0x400) connect$pppl2tp(r9, &(0x7f0000002d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x1, 0x3, 0x0, {0xa, 0x4e21, 0x7f, @mcast1}}}, 0x3a) openat$nvram(0xffffffffffffff9c, &(0x7f0000002d80), 0x24402, 0x0) (async) read$msr(r9, &(0x7f0000002dc0)=""/149, 0x95) (async) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000002ec0)={0x1, 0x101, 0x6, {0x3, 0x0, 0x400, 0x17}}) 1m5.175116728s ago: executing program 1 (id=24): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x8, 0x2, 0xa0363159, 0x5, 0xe, 0xd, 0xc, 0xf5e4, 0x0, 0x0, 0x2, 0x2}}) r1 = socket$inet6(0xa, 0x80002, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x103) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x8802, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) splice(r3, &(0x7f00000011c0)=0x3, r2, 0x0, 0x88000001, 0x0) setsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000000000)=0x84, 0x3a) 1m5.110776271s ago: executing program 1 (id=25): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000001c0)={0x1, 0x66}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e27c3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d749cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55bdd46e5bcb3330c7edefd31c33f61275e516"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0xb9}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = epoll_create1(0x80000) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0xa0000004}) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000180), 0x8) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@ifindex, r8, 0x2f, 0x0, 0x0, @void, @value}, 0x20) 1m4.949595913s ago: executing program 1 (id=33): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x77d543, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = dup(r3) read$FUSE(r4, 0x0, 0x0) ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000200)={0x51a6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1e, 0x800000000004, @thr={&(0x7f00000002c0)="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", &(0x7f00000012c0)="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"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x145ec1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f00000001c0)=0x9) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002540)={0x24, 0x140f, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x95}, 0x4000) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x2a4}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x800000}) 1m4.880477117s ago: executing program 1 (id=35): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r1, 0xedaa7000) r2 = io_uring_setup(0x4ee3, &(0x7f0000000880)={0x0, 0xd6c1, 0x9a20, 0x0, 0x20}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], &(0x7f0000000080)=[0x400000000000], 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0xfffd, 0x2, @loopback, 0x34c}, 0x1c, 0x0}}], 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r1, 0xedaa7000) (async) io_uring_setup(0x4ee3, &(0x7f0000000880)={0x0, 0xd6c1, 0x9a20, 0x0, 0x20}) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], &(0x7f0000000080)=[0x400000000000], 0x1}, 0x20) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) (async) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0xfffd, 0x2, @loopback, 0x34c}, 0x1c, 0x0}}], 0x1, 0x0) (async) 1m4.87992486s ago: executing program 1 (id=38): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x63, 0x66}, [@call={0x16}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0x1fffffffd, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000300)={@private0, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@getlink={0x88, 0x12, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x13004, 0x51000}, [@IFLA_VF_PORTS={0x68, 0x18, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff4}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x8, 0x2, '(.\\\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "e559cc27a77fd37e1782b26c6970c2e7"}, @IFLA_PORT_PROFILE={0x14, 0x2, '/dev/sequencer2\x00'}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000d5eef2dc5f9c152fe30000050011003d3e0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 49.480399977s ago: executing program 32 (id=38): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x63, 0x66}, [@call={0x16}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r1, 0x1fffffffd, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000300)={@private0, 0x0}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=@getlink={0x88, 0x12, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x13004, 0x51000}, [@IFLA_VF_PORTS={0x68, 0x18, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff4}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x8, 0x2, '(.\\\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "e559cc27a77fd37e1782b26c6970c2e7"}, @IFLA_PORT_PROFILE={0x14, 0x2, '/dev/sequencer2\x00'}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB="000000000000d5eef2dc5f9c152fe30000050011003d3e0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 37.307376547s ago: executing program 3 (id=514): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r4, 0x505, 0x0, 0x25dfdbfa}, 0x14}}, 0x10) write$binfmt_script(r2, &(0x7f0000000600), 0x4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r5, 0xfffffffffffffff7, 0x9af, 0x2) recvfrom$inet_nvme(r1, &(0x7f0000000300)=""/72, 0xfffffffffffffd86, 0x40000000, 0x0, 0x0) 36.42750174s ago: executing program 3 (id=541): syz_emit_vhci(&(0x7f0000000f00)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x406}}}, 0x7) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7, @none, 0x73, 0x1}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32, @ANYBLOB="20000100"], 0x38}, 0x1, 0xf00}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x4, 0xffffff1c}}, './file0\x00'}) r6 = eventfd(0xdb9f) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000040)={0x0, r6}) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 36.250439908s ago: executing program 3 (id=548): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xc00001, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000040)={0x1, 0xff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)={0x3, 'bond_slave_0\x00', {0x8001}, 0x93}) (async) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000000c0)) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000200)={0x1}, 0x4) (async) r3 = open(&(0x7f0000000240)='./file0\x00', 0x44000, 0x2) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000280)=0x8000000) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000680)={0x5, &(0x7f00000005c0)=[{0x4, 0x53, &(0x7f00000002c0)="7f0e11a7b1ebe1b8ce1677f6c3b60c52ccee4315e332578a4b4c8a9e91afb0c5b287f9dcf4242e031d5d3843187efdc999ea196af349c411f7341196a65d6215e1da7c5c555677860baa097041655b5ada572e", 0x0, 0x1}, {0x8, 0xaf, &(0x7f0000000340)="546a09612d74b7de124a5be86f47c60c8b9bbecefda7da43a26d29bc748a655e79cf7ae5973c103d0f7b64d9433ac1f3795e35b6a0adea6c05ac4938dda6a003cfa263a163b2b1dd80445aa71fedfa7a27606973a74d7a6d73734a33a5de016909f4b265d21c0d59151598b987aef87a328f372eac70687de818066499e9131c1cfa5492689504f21e1717e2e503de557e9873b5210adcabfd8064754c21283ecddc6243ca8ef217f4f920cfcdeba4"}, {0x326, 0x4, &(0x7f0000000400)="e9745edc", 0x1}, {0x3, 0x42, &(0x7f0000000440)="eda246d9f9d0b5ff7415db515b679c5d3878c8122006753e15eacb26c85b13edf13cf5ea63c78b720274c9aca70de9bdb7085d70489100064c613ffb23c4d18916aa", 0x0, 0x1}, {0x7fff, 0xcd, &(0x7f00000004c0)="5746ddff6abd87c1c64db676d6c91ed67a7f881190c2f9c67e035a4d7c63154084bebd1329a4192aafe6329b269b22d7ec354e77a0e4409eef90eec9a0fd508de3704f6abe45ff5ac7a36157e1a03e40924759709766522df67d46897563df60802fbe67dad647213917b66b4004bd4949f2cb3dd14a4cb1d9af879bff3bea9bf172378a8f17abaea34b50dcc868b7544873cb34d5a0dcc49730eb7560965e5189d0fd1acdd3c3915d28395ab81ba585f4d46f7f6c467fc37576cba54744166e69c7aa5c2f64074d1c2a49e139", 0x0, 0x1}]}) (async) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000007c0)={&(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x4, 0x6, 0x4}) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000800)={r4, 0x6, 0xfffffff9, 0x7, 0xfffffff5, 0x9, 0xf346}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000840)=0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r3) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000008c0)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000900)=0x5802) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000940)) r7 = open(&(0x7f0000000980)='./file0\x00', 0x24000, 0x0) (async) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$RTC_AIE_ON(r8, 0x7001) (async) ioctl$SOUND_MIXER_READ_CAPS(r7, 0x80044dfc, &(0x7f0000000a00)) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000a80)={&(0x7f0000000a40)="4331b1c235034a2397", 0x9, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000b00)={&(0x7f0000000ac0)=[r6, r5, r4, r9], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r10, 0xc01064bd, &(0x7f0000000bc0)={&(0x7f0000000b40)="1e0addf9f68bff640e607933d57ce5632b504d4ac52a983790fe2b52bf2ca77733f0e1b449f8022781956c62d86c052ae3be47447bed44eb79aa7406d2080001e4412b67070a07c7a689ee152eda0e5004ca660a71ac890ef5100ef42bfbd81f3cf5ad98a64a01a22f5f3f63d20a2240a29a5eab26302376", 0x78}) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000c00)={0x0, 0x1, 0x7fff}, &(0x7f0000000c40)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000d00)={r11, 0x68, &(0x7f0000000c80)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x2, @local, 0x2}, @in6={0xa, 0x4e23, 0x81, @loopback, 0x8}]}, &(0x7f0000000d40)=0x10) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000d80)={0x10, 0x0, "f8dec93abde5462794a3df2c36bd7ebf"}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r7, 0xc01064ac, &(0x7f0000000e40)={0x0, 0x7d, &(0x7f0000000dc0)=""/125}) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) 36.249520658s ago: executing program 3 (id=550): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) close(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000480)=0xfffeffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) close(r2) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e1209004000f8ff0700a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x45) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x484000, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x10000000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 36.183214821s ago: executing program 3 (id=555): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x0) 35.879773068s ago: executing program 3 (id=565): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYRESDEC=r1, @ANYBLOB="7874ed1170d9dbfe8aec836e8be49370f2c12fd9af1c1b30d50b78a4c3fb5abfeeea29cd1cd17590222a5dd580e53664a4bef566a0bdb835f77a8ff4e7", @ANYBLOB="a58257a262f034fe22eb3e9ed18731cdaeb14d0b18bdd479a053faa338ddc608a5d21ebc82b15fd2615bad84c35e431dc64e6409fc24678b82958c89c60a730f9458", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x40}, 0x1, 0x0, 0x0, 0x20004011}, 0x60000064) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYRESDEC=r1, @ANYBLOB="7874ed1170d9dbfe8aec836e8be49370f2c12fd9af1c1b30d50b78a4c3fb5abfeeea29cd1cd17590222a5dd580e53664a4bef566a0bdb835f77a8ff4e7", @ANYBLOB="a58257a262f034fe22eb3e9ed18731cdaeb14d0b18bdd479a053faa338ddc608a5d21ebc82b15fd2615bad84c35e431dc64e6409fc24678b82958c89c60a730f9458", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x40}, 0x1, 0x0, 0x0, 0x20004011}, 0x60000064) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000000000000590000000000000000020000", @ANYRES8, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000e2ff000000", @ANYRES32], 0x48) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="332718dfc8fabef9fafd63b21e7edf43d22a9e372ba755e67fdb120026e57ddb8e970261faf01d568835ffc8511581f0c997cdf135146de2ba0646c2185c8ef7b26eb15ff803d6c3cd00752e2b9164bd3121e8d836a6acb60e2c99c8479a00e00eaa9041316fd8afedefed62ef30ae71bb895e8568f7d05dfc61ad49da20486b49c56b289f9f440520772c7d01cb89d244d98a40f96f9bb6", @ANYRES16=r0, @ANYBLOB="20002bbd7000fbdbdf251300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000900000065000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004000) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{}]}) (async) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{}]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000880)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c00c62d0f3235008000003e0f01dfb80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x67}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x1, 0x2, 0x0, @generic=0x4, 0x0, 0xfa}) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/card0/oss_mixer\x00', 0x323200, 0x0) write$proc_mixer(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="4449474954414c31202753796e74682043617074757265132030303030303030303030303030303030"], 0x37) (async) write$proc_mixer(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="4449474954414c31202753796e74682043617074757265132030303030303030303030303030303030"], 0x37) close(r9) (async) close(r9) mmap$KVM_VCPU(&(0x7f0000fec000/0x4000)=nil, 0x0, 0x0, 0x20010, r7, 0x0) mincore(&(0x7f0000fe6000/0x4000)=nil, 0x4000, &(0x7f00000006c0)=""/232) syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) 35.865834821s ago: executing program 33 (id=565): syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYRESDEC=r1, @ANYBLOB="7874ed1170d9dbfe8aec836e8be49370f2c12fd9af1c1b30d50b78a4c3fb5abfeeea29cd1cd17590222a5dd580e53664a4bef566a0bdb835f77a8ff4e7", @ANYBLOB="a58257a262f034fe22eb3e9ed18731cdaeb14d0b18bdd479a053faa338ddc608a5d21ebc82b15fd2615bad84c35e431dc64e6409fc24678b82958c89c60a730f9458", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x40}, 0x1, 0x0, 0x0, 0x20004011}, 0x60000064) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYRESDEC=r1, @ANYBLOB="7874ed1170d9dbfe8aec836e8be49370f2c12fd9af1c1b30d50b78a4c3fb5abfeeea29cd1cd17590222a5dd580e53664a4bef566a0bdb835f77a8ff4e7", @ANYBLOB="a58257a262f034fe22eb3e9ed18731cdaeb14d0b18bdd479a053faa338ddc608a5d21ebc82b15fd2615bad84c35e431dc64e6409fc24678b82958c89c60a730f9458", @ANYRESDEC=r0, @ANYRESHEX=r0], 0x40}, 0x1, 0x0, 0x0, 0x20004011}, 0x60000064) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000000000000590000000000000000020000", @ANYRES8, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000e2ff000000", @ANYRES32], 0x48) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="332718dfc8fabef9fafd63b21e7edf43d22a9e372ba755e67fdb120026e57ddb8e970261faf01d568835ffc8511581f0c997cdf135146de2ba0646c2185c8ef7b26eb15ff803d6c3cd00752e2b9164bd3121e8d836a6acb60e2c99c8479a00e00eaa9041316fd8afedefed62ef30ae71bb895e8568f7d05dfc61ad49da20486b49c56b289f9f440520772c7d01cb89d244d98a40f96f9bb6", @ANYRES16=r0, @ANYBLOB="20002bbd7000fbdbdf251300000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000900000065000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004000) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x0, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x34000}], 0x8, 0x0, 0x0, 0x2044}, 0x60) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{}]}) (async) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{}]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000880)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c00c62d0f3235008000003e0f01dfb80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x67}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='\f', 0x1}], 0x1}, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x1, 0x2, 0x0, @generic=0x4, 0x0, 0xfa}) r9 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/card0/oss_mixer\x00', 0x323200, 0x0) write$proc_mixer(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="4449474954414c31202753796e74682043617074757265132030303030303030303030303030303030"], 0x37) (async) write$proc_mixer(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="4449474954414c31202753796e74682043617074757265132030303030303030303030303030303030"], 0x37) close(r9) (async) close(r9) mmap$KVM_VCPU(&(0x7f0000fec000/0x4000)=nil, 0x0, 0x0, 0x20010, r7, 0x0) mincore(&(0x7f0000fe6000/0x4000)=nil, 0x4000, &(0x7f00000006c0)=""/232) syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) 1.0589965s ago: executing program 0 (id=1388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0x1, 0x40000004}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x440c0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.058305918s ago: executing program 0 (id=1389): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000020001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000009900000000000000000000000000f500000081618f059019f900000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 980.293567ms ago: executing program 0 (id=1392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000071000040"]) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x800, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, r5, 0xf09, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8084) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffdfffc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xe}]}}}]}, 0x3c}}, 0x40) 979.758625ms ago: executing program 4 (id=1394): r0 = socket$inet6(0xa, 0x4, 0xfffffffe) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe22, 0x1004, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0182c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000000000000000000000100000e22009c90"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) bind$unix(r2, &(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e) 979.051109ms ago: executing program 0 (id=1395): bpf$MAP_CREATE(0x500000000000000, &(0x7f0000001480)=ANY=[], 0x48) timerfd_gettime(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000800), 0x0, 0x2400) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xe8}, 0x1, 0x0, 0x0, 0x8882}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)={0x34, r2, 0x1, 0x70bd25, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth0\x00', 0x0}) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2008220}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r7, 0x605, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x18) r10 = socket$unix(0x1, 0x5, 0x0) bind$unix(r10, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r10, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@delrng={0x10, 0x14, 0x200, 0x70bd28, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200400c5}, 0x44) 974.297847ms ago: executing program 4 (id=1396): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0xae, 0x8000, 0xfffc, 0xf0, 0xfa}) (async) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) socket$packet(0x11, 0x3, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000200)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000b00", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0xeab, 0x3}}}}}}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r6 = io_uring_setup(0x1de0, &(0x7f00000003c0)={0x0, 0x16c9, 0x40, 0x20002, 0x3a3}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_required], 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="69a00000000000004e0a0000000000000700"/36], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) 913.011383ms ago: executing program 4 (id=1398): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000290000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0x80405600, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8400}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) 911.933366ms ago: executing program 4 (id=1401): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1714, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) write$binfmt_misc(r1, &(0x7f0000002000)="09782c58d49e", 0x6) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) 829.86652ms ago: executing program 4 (id=1402): ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r1 = semget(0x1, 0x0, 0x23) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000000)=""/179) semctl$GETZCNT(r1, 0x2, 0xf, &(0x7f00000000c0)=""/2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x8a2b, 0x1) ioctl$SNDRV_PCM_IOCTL_INFO(r2, 0x81204101, &(0x7f0000000140)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f00000002c0)={@local, 0x5}) r4 = fcntl$getown(r2, 0x9) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x2, 0x7f67, 0xfff, 0x7f, 0x0, r4}) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) r5 = dup3(r0, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0x1) semctl$SEM_STAT_ANY(0x0, 0x3, 0x14, &(0x7f00000003c0)=""/196) semctl$SEM_STAT_ANY(r1, 0x1, 0x14, &(0x7f00000004c0)=""/31) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000500)=[0x200, 0x3ff, 0x1, 0x5, 0xacfb, 0x9]) r6 = fsmount(r5, 0x1, 0x75) ioctl$SNDRV_PCM_IOCTL_STATUS32(r6, 0x806c4120, &(0x7f0000000540)) close_range(r2, r5, 0x0) close_range(r5, r0, 0x2) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000005c0)={[{0x7, 0x7, 0x10, 0x8, 0x9, 0x43, 0x1, 0x0, 0xb, 0x8, 0x4, 0x10, 0xffffffffffffffd7}, {0x93a, 0x2, 0x2, 0xff, 0x36, 0x24, 0x9, 0x5, 0x1, 0x0, 0x10, 0x7}, {0x4b41, 0x2, 0xe, 0x0, 0x88, 0x68, 0x7, 0x0, 0x10, 0x6, 0x3, 0x7f, 0x1}], 0x2f}) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000640)={0xfffffff9, 0x3, @value=0xd}) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000680)=0x1) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f00000006c0)={0x2, 0x101, {r4}, {0xee00}, 0x3, 0x1}) quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000302, r7, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r8, 0x4068aea3, &(0x7f0000000700)={0x74, 0x0, 0x30}) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) 829.288548ms ago: executing program 5 (id=1404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1e, 0x305, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x9, 0x0, 0x0, @uid=r2}]}, 0x24}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 828.654012ms ago: executing program 4 (id=1405): socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173"]) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) ppoll(&(0x7f0000000280)=[{r1, 0x44e8}], 0x1, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)={0x1, 0x1, 0x1000004, 0x0, 0xb, "0062ba7d820000a75e0000000000fcff00"}) r4 = syz_open_pts(r0, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000a000000000005000b", @ANYRESOCT=r5, @ANYRES64, @ANYRES8=r2], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r4], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 699.134815ms ago: executing program 5 (id=1407): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000340)={0x18, 0xfffffffffffffffe}, 0x18) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x1) ptrace$cont(0x20, r0, 0x0, 0x0) (async) ptrace$cont(0x20, r0, 0x0, 0x0) ptrace$getregs(0xc, r0, 0xb, &(0x7f0000000000)=""/5) 579.134986ms ago: executing program 5 (id=1411): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) migrate_pages(0x0, 0x6, 0x0, &(0x7f0000000100)=0x9) r6 = dup(r5) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='setgroups\x00') lseek(r7, 0xae7e, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4008014) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 510.022108ms ago: executing program 5 (id=1413): r0 = socket$packet(0x11, 0x3, 0x300) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x18}, 0x18) socket(0x22, 0x2, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f0000000040), 0x4000007) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000002c0)=0xe, 0x0) setsockopt$sock_int(r3, 0x1, 0x1e, &(0x7f0000000380)=0x9, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r6, r5], 0x2}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000080)=0x101, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r10, 0x1, 0x20, 0x6, @local}, 0x14) recvfrom$packet(r9, 0x0, 0x0, 0x2000, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r8}, 0x40) 289.979523ms ago: executing program 2 (id=1416): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000002040)={0x10, 0x0, r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000002080)={0x8, 'veth0\x00', {'veth0_virt_wifi\x00'}, 0x5}) getsockopt$inet6_mreq(r1, 0x29, 0x13, &(0x7f0000002100)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f0000002140)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000002240)={'syztnl0\x00', &(0x7f00000021c0)={'gre0\x00', 0x0, 0x7, 0x8000, 0xc88, 0xa, {{0x10, 0x4, 0x1, 0x1, 0x40, 0x64, 0x0, 0x5, 0x4, 0x0, @loopback, @local, {[@ssrr={0x89, 0x27, 0x7, [@empty, @local, @local, @local, @local, @remote, @remote, @local, @multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002280)={'wg1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)=@ipv4_newroute={0x7c, 0x18, 0x10, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x14, 0x2, 0xfd, 0x0, 0xfd, 0x5, 0x200}, [@RTA_MULTIPATH={0xc, 0x9, {0x8001, 0x6, 0x8, r2}}, @RTA_METRICS={0x34, 0x8, 0x0, 0x1, "9bbb0c3da9fb50cacd0f217d59b8347ae2ae622b31cb8598f0f0bfbe37e67605f8d5d03eb1e724f2d93c33f15280d99e"}, @RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_OIF={0x8, 0x4, r3}, @RTA_IIF={0x8, 0x3, r4}, @RTA_OIF={0x8, 0x4, r5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44080}, 0x800) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000023c0), 0x40000, 0x0) ioctl$CDROMPAUSE(r6, 0x5301) ioctl$HIDIOCGRDESC(r6, 0x90044802, &(0x7f0000002400)={0x4c6, "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"}) writev(r1, &(0x7f0000003cc0)=[{&(0x7f0000002900)="3a601fc115637f3b8d932bd291d2ccf5d3e38d031a50af7777f7f181ca7882e70204bf0df899856f1fd2ff570d96176efe0bbc100ace2528a3364321bc24adcccc410931893485dfbc094032e83d1b217d9360e9b73a3a9cb82970e5e6c0f8b5a4158d53707d438ac1943f8e96b25ae4a13bbee45f34ec37fd11cde3d393fbc3a3a429057f527a7f54b16cd532cd8c099d0339f5967863cda8abf4", 0x9b}, {&(0x7f00000029c0)="38e00847", 0x4}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000003a00)="fa67fe8ff93a59607b12552d67c577da0f8a9d0e3d3834b259766b65eed12f03b01aec1d05d0be0edda71c7f0baf990ea420fb291a117fdb5af2de80f18b2e99d5d9b62e179e4b9dda335121f767db3cdd28087a99bb7e5c4cf802620d9768b5500f6581e9b3c89ec66f5abf1abac581aa2e8d7ab5c155ad67e7ce0d2e", 0x7d}, {&(0x7f0000003a80)="3c020da6dcb276c22b89021517e05cb7c257e0a125d4e8", 0x17}, {&(0x7f0000003ac0)="fa48ccf0d9a1502ef6a005e4729766240b62d65efa346ec8701c927c04156ce83563b389434945570479e443821db66cfdf26e3d42ff327f8de5f6afce46425e6ea2d8e45446a61db859a64c7e0e864d734632fea4ed7ed227ef9b3d2feec49353545e877ac28806479c6e52b5c0779d57ead0c75b6ff5bc6ea2144715c734b6d898c85934a50cabfd513d82e6b315458a1002a75417e073e45883f1ec6e5e22fa3e0d83c63a1473f17194c85cbb52e4291474bc3b59db834896f13a1285dc1066a2cf1af12f5b0137dfb96d751843aa5236f32c1728e5908767d23feba71bf20f3accb61ad6376783379fdef32bcf2929a1668b1f98819584", 0xf9}, {&(0x7f0000003bc0)="538eecc9cdcaca950885b9440a17e91dd6256658e37ed4f75191896f968fef8b924276e2f0cf13b771725da54f9449e23b80ef695e9aae20c1ccfa89897d07a784d071064c7c5c10d88d7aad906faf02f9a6484925b293314d00fde6fe6c872604cd696534ef53a2115adbd3c7a4a69447753def1646abb40dd89e942d87b0bd47069a6d5654d2e3046dd1f4a7423465443e092a3b058beee1e326835c403acdb0713c3323cf14c29d457bca281c33602150fd24ecbedbfbf542a82618d89bd37c7ecad9d11a147f3935c1d91342d14b9a8d98323dce6846f501b9f9107518ed1fcf8eae0f41082230c743d1ad8d37904ec94e37721aea65", 0xf8}], 0x7) r7 = openat$cgroup_ro(r6, &(0x7f0000003d40)='memory.events\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r6, 0x5) landlock_create_ruleset(&(0x7f0000003d80)={0x1001, 0x2, 0x1}, 0x18, 0x1) r8 = syz_open_dev$vcsn(&(0x7f0000003dc0), 0x69, 0x200) bind$isdn(r8, &(0x7f0000003e00)={0x22, 0x5, 0x7, 0xf8, 0x7}, 0x6) ioctl$sock_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000003e40)) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000003f00)=[@text16={0x10, &(0x7f0000003e80)="0f38f696f63966b8010000000f01c13a580bdbe336dfe0640fc72a0f01df0f01c80f78bc00906766c74424000a0000006766c7442402a10000006766c744240600000000670f011c24", 0x49}], 0x1, 0x14, &(0x7f0000003f40), 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000003f80)={0x0, 0x1}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000004040)=[@textreal={0x8, &(0x7f0000003fc0)="64660f453966b9800000c00f326635010000000f30df9b7a00baa000b003ee0f768f0090660f38829af5fff0811d00000f011d26f3e03466b9800000c00f326635001000000f30", 0x47}], 0x1, 0x21, &(0x7f0000004080), 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f00000040c0)={0x0, 0x8}, &(0x7f0000004100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000004140)={r9}, 0xc) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000041c0)={@empty, 0x0}, &(0x7f0000004200)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000004300)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000042c0)={&(0x7f0000004240)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008004}, 0x40) openat$nvram(0xffffffffffffff9c, &(0x7f0000004340), 0x701000, 0x0) accept$inet6(r7, &(0x7f0000004380)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000043c0)=0x1c) socket$nl_generic(0x10, 0x3, 0x10) 229.946218ms ago: executing program 2 (id=1417): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000001c0)={0x3, {{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, {{0xa, 0x4e21, 0x7, @remote, 0x7}}}, 0x108) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x26c}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) 169.168468ms ago: executing program 2 (id=1418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x10, 0x27, 0x1}, 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\f\x05\x17\x99\x93\x86\x8a\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x82\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0xe4, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0xc4, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x10c}, 0x1, 0x0, 0x0, 0x24000050}, 0x20004080) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000140), &(0x7f0000000180)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r5, 0x0, 0x56, 0xa5, &(0x7f0000000280)="927bc8295e8a1a41f7af24e8ad7aaf736494f1a562a454fe4fd56670392b5c15967e32c6ed8eb540426d5782e98dba5dd48751b6626040a0d57ce84738dd6f001f54bccfd8a851cc4a286fd63f72d39f322713b9b377", &(0x7f0000000300)=""/165, 0x5fe, 0x0, 0x77, 0x26, &(0x7f00000003c0)="03368d4cb80b7e53ca17d88dcd280b2607b6c01e618d3e341d9f708e3aae19241f3f9fb798e60a3686d7db7f8722b7453319429cb9dd5aab4dbc377f9df9aec256b9af4260f79424d9413785c8ab70d294fdc80758c3e7cf51e0bbc0e681e184a9299784406e15ae99e28ca5903f1ccad6ece591a7d9ac", &(0x7f0000000440)="7444582cbb17a39c02f1c64f919e5cccac6625c7458e50f93a3d76d49c285ad5d549da476150", 0x0, 0x0, 0x80}, 0x50) 168.743534ms ago: executing program 5 (id=1419): mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x2000f5}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000203010800000000000000009e000008080005400000000108000100000000110800054006000014080005400000003260da1baa80cdfb041a45cdf31c80fbf690338f721f26264105866a46374e5ab51f8336a22ded5cbf5e6de96ce41ccfd09ed821cc125ec57c71bed6ee1c399649"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x8014) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x1d}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000580)={0x15, 0x110, 0xfa00, {r3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @broadcast}, @ib={0x1b, 0x9, 0x7, {"a75d3aab5d4dc08b1f9108b0733644d0"}, 0x5, 0x9, 0x38000000000}}}, 0x118) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2040084) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x1, r3, 0x10, 0x1, @in={0x2, 0x4e24, @multicast1}}}, 0xa0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe7d, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000030000a80390001800a00010071756575650000001c0002800600034000040000060001400000000006000240000400000900010073797a30000000000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0xc000040}, 0x20044091) 99.179311ms ago: executing program 2 (id=1420): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002ac0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0xd8}}, 0x4000000) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x174, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6ead791a70e7f4a5}]}, @NFTA_RULE_USERDATA={0xf5, 0x7, 0x1, 0x0, "e37682954044376023bdb07db654b87ade96243038680df9408cfa086ada1680fd7067b4ac413579c557d52d25fc859fcb1ea2872523b6b6c60737efd6bb5e2f497a5a602741436020b5bab9d3933160d61c3dc0fe9322e26787d282100c67223703fe66d6e311f7e60cc45ec0cd62c4ebb5b17959e0594cf682854faef47d8702c49bef78bf7383d1da28491c3f5c57bede475eb2ea6f0c0b527b2b581af8115ee659af1d456fafa55c5b2b81127807731ee44ade519e1454a30516e4d8df7dc98bcb4dcbf32200b1c460d8c181304e881f86e4da36acc2daf1afad02f42845ac0d7c1e5f98fb60683fffad02fbd0aa27"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x52, 0x7, 0x1, 0x0, "9339b9898541ff92cf9a6b98430035425f1822a9df814e635cdaaced27b9a85b511c9b0e95ff000c8e8cbaa78c39411bf76efa3ce5d88e410d40799b812ef42e5f062b0f8c2556b8197b72c5d758"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xd}}}, 0x19c}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 98.869443ms ago: executing program 0 (id=1421): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000016c0)) 98.548822ms ago: executing program 5 (id=1422): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e043d4e20"], 0x7) (async) r1 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) r2 = userfaultfd(0x80001) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x47d}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff2, 0x10}, {0xffff, 0xfff1}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0x8010aa01, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) (async, rerun: 64) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (rerun: 64) ioctl$VIDIOC_S_INPUT(r11, 0xc0045627, &(0x7f0000000100)=0x3) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r11, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x20000003, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) (rerun: 64) read$FUSE(r1, 0x0, 0x0) (async, rerun: 64) r12 = openat$vsock(0xffffffffffffff9c, 0x0, 0x40000, 0x0) (rerun: 64) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f00000001c0)={0x5813, 0x1}, 0x10) (async) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0xfffffff6, 0x0, {}, [@IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4c044) (async) write$selinux_load(r1, 0x0, 0x0) 85.289697ms ago: executing program 0 (id=1423): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001340)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x2, 0x0, 0x0, 0x0, 0x0, 0x2e}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map, 0x9, 0x0, 0x145c6cdb, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r0, r3, 0x15, 0x8, 0x0, @void, @value=r5, @void, @void, r4}, 0x20) close(r2) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}, 0x1, 0x4801000000000000}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000001780)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, '7t'}]}}}}}}}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x200, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x1}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0xfe80000000000000}}]}, 0x30}}, 0x0) 85.094509ms ago: executing program 2 (id=1424): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3, 0x30}, 0xc) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000100)='^', 0x34000}], 0x1c) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000700)='\b', 0x1}], 0x1) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) 0s ago: executing program 2 (id=1425): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000100005"], 0x48}}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) (async) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) kernel console output (not intermixed with test programs): tl, please convert it to SG_IO [ 55.341839][ T40] kauditd_printk_skb: 158 callbacks suppressed [ 55.341847][ T40] audit: type=1400 audit(1742914524.175:446): avc: denied { mount } for pid=6546 comm="syz.3.147" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 55.344220][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.354910][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.357840][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.360556][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.363171][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.365774][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.368313][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.370848][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.373986][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.376890][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.379451][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.382022][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.386851][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.389755][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.392672][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.395806][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.398573][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.401226][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.403983][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.406623][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.409252][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.411855][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.414893][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.417525][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.420126][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.422762][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.426826][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.429438][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.432032][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.434695][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.437562][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.440181][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.442835][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.445473][ T6543] program syz.2.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.478809][ C2] IPv4: Oversized IP packet from 172.20.20.10 [ 55.576281][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 55.607599][ T40] audit: type=1400 audit(1742914524.445:447): avc: denied { create } for pid=6567 comm="syz.0.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 55.722334][ T40] audit: type=1400 audit(1742914524.555:448): avc: denied { map_read map_write } for pid=6581 comm="syz.0.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 55.749600][ T40] audit: type=1400 audit(1742914524.585:449): avc: denied { name_bind } for pid=6583 comm="syz.0.157" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 55.829873][ T40] audit: type=1400 audit(1742914524.665:450): avc: denied { bind } for pid=6593 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 56.130820][ T40] audit: type=1400 audit(1742914524.965:451): avc: denied { bind } for pid=6605 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.137969][ T40] audit: type=1400 audit(1742914524.965:452): avc: denied { name_bind } for pid=6605 comm="syz.3.162" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 56.144653][ T40] audit: type=1400 audit(1742914524.965:453): avc: denied { node_bind } for pid=6605 comm="syz.3.162" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 56.150220][ T40] audit: type=1400 audit(1742914524.975:454): avc: denied { name_connect } for pid=6605 comm="syz.3.162" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 56.197526][ T40] audit: type=1400 audit(1742914525.035:455): avc: denied { create } for pid=6607 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 56.354603][ T1325] cfg80211: failed to load regulatory.db [ 56.502901][ T5961] Bluetooth: hci1: command tx timeout [ 56.526073][ T6620] process 'syz.3.167' launched './file0' with NULL argv: empty string added [ 56.992292][ T29] IPVS: starting estimator thread 0... [ 56.993561][ T6661] tipc: Started in network mode [ 56.995575][ T6661] tipc: Node identity ac1414aa, cluster identity 4711 [ 56.998018][ T6661] tipc: Enabled bearer , priority 10 [ 57.092985][ T6662] IPVS: using max 37 ests per chain, 88800 per kthread [ 57.282896][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.453768][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 57.456454][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.459633][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.462537][ T34] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 57.466600][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.469748][ T34] usb 7-1: config 0 descriptor?? [ 57.605109][ T6669] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 57.607918][ T6669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.880826][ T34] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 58.134113][ T29] tipc: Node number set to 2886997162 [ 58.145375][ T34] usb 7-1: USB disconnect, device number 2 [ 58.582945][ T5961] Bluetooth: hci1: command tx timeout [ 58.693937][ T6690] capability: warning: `syz.2.192' uses deprecated v2 capabilities in a way that may be insecure [ 58.710434][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.193'. [ 58.930480][ T6716] kvm: emulating exchange as write [ 58.980531][ T6731] netlink: 128 bytes leftover after parsing attributes in process `syz.0.202'. [ 59.076168][ T6744] fuse: Bad value for 'fd' [ 59.102146][ T6750] ipt_ECN: cannot use operation on non-tcp rule [ 59.113588][ T6752] erspan0: default FDB implementation only supports local addresses [ 59.121238][ T6752] netlink: 'syz.3.209': attribute type 4 has an invalid length. [ 59.183928][ T6755] IPVS: You probably need to specify IP address on multicast interface. [ 59.186668][ T6755] IPVS: Error connecting to the multicast addr [ 59.266494][ T6769] pim6reg: entered allmulticast mode [ 59.397876][ T6783] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 59.405999][ T6783] CIFS mount error: No usable UNC path provided in device string! [ 59.405999][ T6783] [ 59.409551][ T6783] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 59.476451][ T6795] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.478817][ T6795] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.481099][ T6795] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.483574][ T6795] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 59.486547][ T6795] geneve2: entered promiscuous mode [ 59.487875][ T6795] geneve2: entered allmulticast mode [ 59.634235][ T6812] overlayfs: failed to clone lowerpath [ 59.666661][ T6816] netlink: 48 bytes leftover after parsing attributes in process `syz.0.232'. [ 59.669424][ T6816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.232'. [ 59.672091][ T6816] netlink: 48 bytes leftover after parsing attributes in process `syz.0.232'. [ 59.674802][ T6816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.232'. [ 59.678368][ T6817] veth1_to_bond: entered allmulticast mode [ 59.688739][ T6816] veth1_to_bond: left allmulticast mode [ 59.786971][ T6827] overlayfs: failed to clone upperpath [ 59.936934][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 60.160590][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 60.386027][ T6893] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 60.415659][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 60.415670][ T40] audit: type=1400 audit(1742914529.255:529): avc: denied { name_bind } for pid=6894 comm="syz.0.254" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 60.432360][ T6895] xt_time: unknown flags 0xc [ 60.506684][ T6902] libceph: resolve ' [ 60.506684][ T6902] -&fYǝa2i [ 60.506684][ T6902] .?&*&' (ret=-3): failed [ 60.511821][ T40] audit: type=1400 audit(1742914529.345:530): avc: denied { bind } for pid=6901 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.517742][ T40] audit: type=1400 audit(1742914529.365:531): avc: denied { write } for pid=6901 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.602330][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 60.830063][ T40] audit: type=1400 audit(1742914529.665:532): avc: denied { setopt } for pid=6921 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.886149][ T40] audit: type=1400 audit(1742914529.725:533): avc: denied { create } for pid=6927 comm="syz.0.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 60.886655][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 60.951991][ T6932] program syz.3.267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.962838][ T40] audit: type=1400 audit(1742914529.795:534): avc: denied { bind } for pid=6931 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.993752][ T40] audit: type=1400 audit(1742914529.825:535): avc: denied { connect } for pid=6933 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.006593][ T40] audit: type=1400 audit(1742914529.845:536): avc: denied { nlmsg_read } for pid=6935 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 61.014035][ T40] audit: type=1400 audit(1742914529.845:537): avc: denied { getopt } for pid=6935 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 61.051594][ T40] audit: type=1400 audit(1742914529.885:538): avc: denied { mount } for pid=6939 comm="syz.3.271" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 61.246220][ T6966] netlink: 'syz.3.282': attribute type 11 has an invalid length. [ 61.266691][ T6966] /dev/sg0: Can't lookup blockdev [ 61.543655][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 61.692839][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 61.695399][ T10] usb 8-1: config 0 has an invalid interface number: 231 but max is 0 [ 61.697617][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.700385][ T10] usb 8-1: config 0 has no interface number 0 [ 61.702046][ T10] usb 8-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 61.704993][ T10] usb 8-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 61.710294][ T10] usb 8-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 61.712689][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.714968][ T10] usb 8-1: Product: syz [ 61.716064][ T10] usb 8-1: Manufacturer: syz [ 61.717287][ T10] usb 8-1: SerialNumber: syz [ 61.723143][ T10] usb 8-1: config 0 descriptor?? [ 61.725600][ T6966] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.728358][ T10] usb-storage 8-1:0.231: USB Mass Storage device detected [ 61.915698][ T6988] syz.0.288(6988): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 61.950366][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.953271][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.445529][ T6991] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 62.449367][ T6992] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 62.502002][ T6998] bond0: option ad_select: unable to set because the bond device is up [ 63.368352][ T7005] fuse: Bad value for 'fd' [ 63.431624][ T5952] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.452932][ T5952] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.484026][ T5952] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.489119][ T5952] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.494724][ T5952] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.497393][ T5952] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.255379][ T34] usb 8-1: USB disconnect, device number 7 [ 64.336348][ T7038] __nla_validate_parse: 2 callbacks suppressed [ 64.336365][ T7038] netlink: 56 bytes leftover after parsing attributes in process `syz.3.301'. [ 64.353792][ T7038] sctp: [Deprecated]: syz.3.301 (pid 7038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 64.353792][ T7038] Use struct sctp_sack_info instead [ 64.372029][ T7007] chnl_net:caif_netlink_parms(): no params data found [ 64.443350][ T7050] netlink: del zone limit has 4 unknown bytes [ 64.473994][ T7007] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.476266][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.478562][ T7007] bridge_slave_0: entered allmulticast mode [ 64.480665][ T7007] bridge_slave_0: entered promiscuous mode [ 64.483680][ T7007] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.485846][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.487793][ T7007] bridge_slave_1: entered allmulticast mode [ 64.489837][ T7007] bridge_slave_1: entered promiscuous mode [ 64.521717][ T1052] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.537285][ T7007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.541256][ T7007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.562482][ T7007] team0: Port device team_slave_0 added [ 64.568570][ T7007] team0: Port device team_slave_1 added [ 64.577078][ T1052] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.601140][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.603838][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.612016][ T7007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.616175][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.618091][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.624789][ T7007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.646956][ T7007] hsr_slave_0: entered promiscuous mode [ 64.648921][ T7007] hsr_slave_1: entered promiscuous mode [ 64.650573][ T7007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.652506][ T7007] Cannot create hsr debugfs directory [ 64.664484][ T1052] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.737410][ T1052] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.751060][ T7007] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.755421][ T7007] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.758575][ T7007] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.761675][ T7007] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.771029][ T7007] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.772933][ T7007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.774966][ T7007] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.777153][ T7007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.798463][ T7007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.805387][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.808352][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.818651][ T7007] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.824435][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.826337][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.832611][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.834767][ T6533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.889599][ T1052] bridge_slave_1: left allmulticast mode [ 64.892256][ T1052] bridge_slave_1: left promiscuous mode [ 64.895519][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.899652][ T1052] bridge_slave_0: left allmulticast mode [ 64.901194][ T1052] bridge_slave_0: left promiscuous mode [ 64.903228][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.143385][ T1052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.148288][ T1052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.152388][ T1052] bond0 (unregistering): Released all slaves [ 65.188424][ T7007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.321765][ T7007] veth0_vlan: entered promiscuous mode [ 65.329895][ T7007] veth1_vlan: entered promiscuous mode [ 65.356026][ T7007] veth0_macvtap: entered promiscuous mode [ 65.365998][ T7007] veth1_macvtap: entered promiscuous mode [ 65.407256][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.410102][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.412658][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.416748][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.419344][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.422096][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.424835][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.427589][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.430902][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.442617][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 65.442623][ T7107] tmpfs: Unknown parameter 'upol' [ 65.442626][ T40] audit: type=1400 audit(1742914534.275:572): avc: denied { mounton } for pid=7105 comm="syz.3.316" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 65.442952][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.457365][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.459861][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.462520][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.466860][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.469604][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.472120][ T7007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.477180][ T7007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.480374][ T7007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.483835][ T7007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.486222][ T7007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.488553][ T7007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.490964][ T7007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.517048][ T40] audit: type=1400 audit(1742914534.355:573): avc: denied { mount } for pid=7114 comm="syz.2.312" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 65.517433][ T1052] hsr_slave_0: left promiscuous mode [ 65.529972][ T7116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 65.531252][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 65.531665][ T1052] hsr_slave_1: left promiscuous mode [ 65.531974][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.532015][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.537531][ T40] audit: type=1400 audit(1742914534.375:574): avc: denied { execute } for pid=7114 comm="syz.2.312" name="file1" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.540502][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.540632][ T40] audit: type=1400 audit(1742914534.375:575): avc: denied { execute_no_trans } for pid=7114 comm="syz.2.312" path="/95/bus/file1" dev="overlay" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.546953][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.553023][ T5952] Bluetooth: hci4: command tx timeout [ 65.555609][ T40] audit: type=1400 audit(1742914534.395:576): avc: denied { create } for pid=7101 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 65.563484][ T40] audit: type=1400 audit(1742914534.395:577): avc: denied { write } for pid=7101 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 65.582029][ T1052] veth1_macvtap: left promiscuous mode [ 65.584668][ T1052] veth0_macvtap: left promiscuous mode [ 65.586212][ T40] audit: type=1400 audit(1742914534.425:578): avc: denied { unmount } for pid=5950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 65.586240][ T1052] veth1_vlan: left promiscuous mode [ 65.595062][ T1052] veth0_vlan: left promiscuous mode [ 65.618716][ T40] audit: type=1400 audit(1742914534.455:579): avc: denied { ioctl } for pid=7124 comm="syz.2.319" path="socket:[15116]" dev="sockfs" ino=15116 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 65.632853][ T40] audit: type=1400 audit(1742914534.455:580): avc: denied { read } for pid=7120 comm="syz.3.318" lport=52540 faddr=::ffff:10.1.1.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.635578][ T7130] netlink: 'syz.0.321': attribute type 16 has an invalid length. [ 65.641243][ T7130] netlink: 'syz.0.321': attribute type 3 has an invalid length. [ 65.643379][ T7130] netlink: 'syz.0.321': attribute type 1 has an invalid length. [ 65.645877][ T7130] netlink: 'syz.0.321': attribute type 2 has an invalid length. [ 65.647897][ T7130] netlink: 64022 bytes leftover after parsing attributes in process `syz.0.321'. [ 65.678165][ T7135] ip6t_REJECT: ECHOREPLY is not supported [ 65.680622][ T40] audit: type=1400 audit(1742914534.515:581): avc: denied { setopt } for pid=7133 comm="syz.0.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.707801][ T7142] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.326'. [ 65.711140][ T7142] openvswitch: netlink: EtherType 0 is less than min 600 [ 65.737267][ T7147] random: crng reseeded on system resumption [ 65.789070][ T7153] syz.0.329: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 65.794220][ T7153] CPU: 2 UID: 0 PID: 7153 Comm: syz.0.329 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 65.794235][ T7153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.794241][ T7153] Call Trace: [ 65.794244][ T7153] [ 65.794248][ T7153] dump_stack_lvl+0x16c/0x1f0 [ 65.794281][ T7153] warn_alloc+0x24d/0x3a0 [ 65.794294][ T7153] ? __pfx_warn_alloc+0x10/0x10 [ 65.794303][ T7153] ? __pfx_stack_trace_save+0x10/0x10 [ 65.794314][ T7153] ? hlock_class+0x4e/0x130 [ 65.794329][ T7153] ? kasan_save_stack+0x42/0x60 [ 65.794353][ T7153] ? kasan_save_stack+0x33/0x60 [ 65.794362][ T7153] ? kasan_save_track+0x14/0x30 [ 65.794371][ T7153] ? __kasan_kmalloc+0xaa/0xb0 [ 65.794380][ T7153] ? xskq_create+0x52/0x1d0 [ 65.794389][ T7153] ? do_sock_setsockopt+0x222/0x480 [ 65.794404][ T7153] ? __sys_setsockopt+0x1a0/0x230 [ 65.794416][ T7153] ? __x64_sys_setsockopt+0xbd/0x160 [ 65.794431][ T7153] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 65.794452][ T7153] ? xskq_create+0xfb/0x1d0 [ 65.794464][ T7153] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 65.794483][ T7153] ? xskq_create+0xfb/0x1d0 [ 65.794493][ T7153] vmalloc_user_noprof+0x6b/0x90 [ 65.794508][ T7153] ? xskq_create+0xfb/0x1d0 [ 65.794517][ T7153] xskq_create+0xfb/0x1d0 [ 65.794527][ T7153] xsk_setsockopt+0x64a/0x850 [ 65.794543][ T7153] ? __pfx_xsk_setsockopt+0x10/0x10 [ 65.794562][ T7153] ? selinux_socket_setsockopt+0x6a/0x80 [ 65.794579][ T7153] ? __pfx_xsk_setsockopt+0x10/0x10 [ 65.794595][ T7153] do_sock_setsockopt+0x222/0x480 [ 65.794610][ T7153] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 65.794625][ T7153] ? lock_acquire+0x2f/0xb0 [ 65.794646][ T7153] __sys_setsockopt+0x1a0/0x230 [ 65.794661][ T7153] __x64_sys_setsockopt+0xbd/0x160 [ 65.794673][ T7153] ? do_syscall_64+0x91/0x250 [ 65.794686][ T7153] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.794699][ T7153] do_syscall_64+0xcd/0x250 [ 65.794713][ T7153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.794733][ T7153] RIP: 0033:0x7f813df8d169 [ 65.794741][ T7153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.794751][ T7153] RSP: 002b:00007f813ed3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 65.794760][ T7153] RAX: ffffffffffffffda RBX: 00007f813e1a5fa0 RCX: 00007f813df8d169 [ 65.794766][ T7153] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 65.794772][ T7153] RBP: 00007f813e00e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 65.794778][ T7153] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.794783][ T7153] R13: 0000000000000000 R14: 00007f813e1a5fa0 R15: 00007ffd28d7b9e8 [ 65.794796][ T7153] [ 65.794825][ T7153] Mem-Info: [ 65.868765][ T7153] active_anon:6417 inactive_anon:0 isolated_anon:0 [ 65.868765][ T7153] active_file:13786 inactive_file:38453 isolated_file:0 [ 65.868765][ T7153] unevictable:1768 dirty:30 writeback:0 [ 65.868765][ T7153] slab_reclaimable:11431 slab_unreclaimable:73758 [ 65.868765][ T7153] mapped:23766 shmem:2460 pagetables:829 [ 65.868765][ T7153] sec_pagetables:301 bounce:0 [ 65.868765][ T7153] kernel_misc_reclaimable:0 [ 65.868765][ T7153] free:472317 free_pcp:1428 free_cma:0 [ 65.880915][ T7153] Node 0 active_anon:25668kB inactive_anon:0kB active_file:55144kB inactive_file:153740kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:95064kB dirty:120kB writeback:0kB shmem:6304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12240kB pagetables:3316kB sec_pagetables:1204kB all_unreclaimable? no [ 65.891865][ T7153] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 65.900152][ T7153] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 65.907550][ T7153] lowmem_reserve[]: 0 1240 1240 1240 1240 [ 65.909135][ T7153] Node 0 DMA32 free:287436kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:25668kB inactive_anon:0kB active_file:55144kB inactive_file:153740kB unevictable:3536kB writepending:120kB present:2080628kB managed:1270112kB mlocked:0kB bounce:0kB free_pcp:2660kB local_pcp:904kB free_cma:0kB [ 65.917094][ T7153] lowmem_reserve[]: 0 0 0 0 0 [ 65.918472][ T7153] Node 1 Normal free:1589012kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:1336kB local_pcp:408kB free_cma:0kB [ 65.926149][ T7153] lowmem_reserve[]: 0 0 0 0 0 [ 65.927463][ T7153] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 65.932576][ T7153] Node 0 DMA32: 265*4kB (UME) 477*8kB (UME) 506*16kB (UME) 662*32kB (UME) 382*64kB (UME) 45*128kB (UME) 42*256kB (UM) 32*512kB (UM) 19*1024kB (UM) 6*2048kB (ME) 40*4096kB (UM) = 287084kB [ 65.937687][ T7153] Node 1 Normal: 5*4kB (UME) 32*8kB (UME) 6*16kB (UME) 93*32kB (UME) 56*64kB (UME) 24*128kB (UME) 8*256kB (UE) 8*512kB (UME) 2*1024kB (U) 5*2048kB (UME) 381*4096kB (UM) = 1589012kB [ 65.942531][ T7153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 65.945143][ T7153] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 65.947629][ T7153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 65.950200][ T7153] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 65.952722][ T7153] 54699 total pagecache pages [ 65.954118][ T7153] 0 pages in swap cache [ 65.955240][ T7153] Free swap = 124544kB [ 65.956370][ T7153] Total swap = 124996kB [ 65.957660][ T7153] 1048443 pages RAM [ 65.958712][ T7153] 0 pages HighMem/MovableOnly [ 65.960192][ T7153] 281594 pages reserved [ 65.961376][ T7153] 0 pages cma reserved [ 66.267496][ T1052] team0 (unregistering): Port device team_slave_1 removed [ 66.321133][ T1052] team0 (unregistering): Port device team_slave_0 removed [ 66.739996][ T7162] veth1_macvtap: left promiscuous mode [ 66.741565][ T7162] macsec0: entered promiscuous mode [ 66.743332][ T7162] macsec0: entered allmulticast mode [ 66.752062][ T7166] veth1_macvtap: entered promiscuous mode [ 66.755967][ T7166] veth1_macvtap: entered allmulticast mode [ 66.758398][ T7166] macsec0: left promiscuous mode [ 66.759920][ T7166] macsec0: left allmulticast mode [ 66.761341][ T7166] veth1_macvtap: left allmulticast mode [ 66.821369][ T7176] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 66.821847][ T7178] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 66.856054][ T7178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.867699][ T7176] bond2: (slave gretap1): making interface the new active one [ 66.870099][ T7176] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 66.891586][ T6533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.894011][ T6533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.907096][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.909195][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.981705][ T7211] trusted_key: encrypted_key: insufficient parameters specified [ 67.016951][ T7218] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 67.019091][ T7218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 67.041365][ T7220] netlink: 'syz.2.343': attribute type 4 has an invalid length. [ 67.048864][ T7220] netlink: 'syz.2.343': attribute type 4 has an invalid length. [ 67.086283][ T7233] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 67.088288][ T7233] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 67.091181][ T7233] vhci_hcd vhci_hcd.0: Device attached [ 67.096902][ T7234] vhci_hcd: connection closed [ 67.097290][ T6530] vhci_hcd: stop threads [ 67.099792][ T6530] vhci_hcd: release socket [ 67.101150][ T6530] vhci_hcd: disconnect device [ 67.112030][ T7239] netlink: 'syz.3.347': attribute type 142 has an invalid length. [ 67.146972][ T7243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 67.150482][ T7243] netlink: 7 bytes leftover after parsing attributes in process `syz.2.348'. [ 67.235497][ T7257] x_tables: duplicate underflow at hook 1 [ 67.446294][ T7280] ptrace attach of "/syz-executor exec"[5955] was attempted by "/syz-executor exec"[7280] [ 67.454422][ T7280] ptrace attach of "/syz-executor exec"[5955] was attempted by "/syz-executor exec"[7280] [ 67.508811][ T7286] tmpfs: Unknown parameter '' [ 67.557611][ T7297] netlink: 'syz.0.359': attribute type 4 has an invalid length. [ 67.624265][ T5952] Bluetooth: hci4: command tx timeout [ 67.733879][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 67.738361][ T7319] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.740882][ T7319] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.743394][ T7319] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.746445][ T7319] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 67.986362][ T7350] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 68.006524][ T7249] overlayfs: statfs failed on './file0' [ 68.022930][ T5952] Bluetooth: hci3: command tx timeout [ 68.082574][ T7370] ./bus: Can't lookup blockdev [ 68.085108][ T7370] tmpfs: Bad value for 'mpol' [ 68.326055][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 68.352886][ T6008] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 68.462918][ T9] usb 7-1: device descriptor read/64, error -71 [ 68.527232][ T6008] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.531154][ T6008] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.534848][ T6008] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.539303][ T6008] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.542479][ T6008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.548575][ T6008] usb 8-1: config 0 descriptor?? [ 68.608245][ T7323] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 68.610712][ T7323] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 68.628486][ T7323] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 68.630612][ T7323] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 68.637400][ T7323] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.639484][ T7323] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 68.700158][ T7323] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 68.702025][ T7323] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 68.714521][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 68.799769][ T7398] overlayfs: failed to resolve './file1': -2 [ 68.853030][ T9] usb 7-1: device descriptor read/64, error -71 [ 68.957915][ T6008] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 68.965509][ T9] usb usb7-port1: attempt power cycle [ 68.969393][ T6008] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 69.063035][ T5996] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 69.133145][ T7405] netlink: 'syz.0.382': attribute type 11 has an invalid length. [ 69.223341][ T5996] usb 9-1: Using ep0 maxpacket: 8 [ 69.225897][ T5996] usb 9-1: config 232 has an invalid descriptor of length 124, skipping remainder of the config [ 69.227676][ T7376] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.377'. [ 69.228744][ T5996] usb 9-1: config 232 has 0 interfaces, different from the descriptor's value: 2 [ 69.238432][ T5996] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.240826][ T5996] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.243099][ T5996] usb 9-1: Product: syz [ 69.244260][ T5996] usb 9-1: Manufacturer: ч [ 69.245567][ T5996] usb 9-1: SerialNumber: syz [ 69.323144][ T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 69.343666][ T9] usb 7-1: device descriptor read/8, error -71 [ 69.343867][ T1325] usb 8-1: USB disconnect, device number 8 [ 69.454835][ T5996] usb 9-1: USB disconnect, device number 2 [ 69.592929][ T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 69.625366][ T9] usb 7-1: device descriptor read/8, error -71 [ 69.743115][ T9] usb usb7-port1: unable to enumerate USB device [ 70.057194][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 70.106865][ T7450] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.152863][ T5996] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 70.273773][ T7454] netlink: 132 bytes leftover after parsing attributes in process `syz.4.396'. [ 70.312998][ T5996] usb 8-1: Using ep0 maxpacket: 32 [ 70.315596][ T5996] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 70.317825][ T5996] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 70.320725][ T5996] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 70.324607][ T5996] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 70.328190][ T5996] usb 8-1: config 0 interface 0 has no altsetting 0 [ 70.331431][ T5996] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 70.333962][ T5996] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 70.336200][ T5996] usb 8-1: Product: syz [ 70.337344][ T5996] usb 8-1: Manufacturer: syz [ 70.338617][ T5996] usb 8-1: SerialNumber: syz [ 70.345802][ T5996] usb 8-1: config 0 descriptor?? [ 70.348744][ T5996] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 70.354133][ T5996] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 70.463244][ T5291] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 70.476044][ T7456] dlm: no local IP address has been set [ 70.477854][ T7456] dlm: cannot start dlm midcomms -107 [ 70.508490][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 70.508501][ T40] audit: type=1400 audit(1742914539.345:628): avc: denied { watch } for pid=7460 comm="syz.4.399" path="/17/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.573496][ T40] audit: type=1400 audit(1742914539.415:629): avc: denied { unmount } for pid=7007 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 70.603383][ T7478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.605754][ T7478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.608472][ T7478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.610684][ T7478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.618908][ T7421] ldusb 8-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 70.623863][ T6008] usb 8-1: USB disconnect, device number 9 [ 70.625476][ C0] ldusb 8-1:0.0: usb_submit_urb failed (-19) [ 70.629749][ T7421] netlink: 32 bytes leftover after parsing attributes in process `syz.3.389'. [ 70.631043][ T6008] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 70.632660][ T7421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.389'. [ 70.714714][ T40] audit: type=1400 audit(1742914539.555:630): avc: denied { listen } for pid=7482 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.719852][ T40] audit: type=1400 audit(1742914539.555:631): avc: denied { accept } for pid=7482 comm="syz.4.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.145953][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.148152][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.458553][ T40] audit: type=1400 audit(1742914540.295:632): avc: denied { create } for pid=7493 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.464110][ T40] audit: type=1400 audit(1742914540.295:633): avc: denied { ioctl } for pid=7493 comm="syz.0.405" path="socket:[16619]" dev="sockfs" ino=16619 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.470685][ T40] audit: type=1400 audit(1742914540.295:634): avc: denied { write } for pid=7491 comm="syz.2.406" name="unix" dev="proc" ino=4026533197 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 71.482112][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 71.494940][ T40] audit: type=1400 audit(1742914540.335:635): avc: denied { connect } for pid=7498 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.499939][ T40] audit: type=1400 audit(1742914540.335:636): avc: denied { write } for pid=7498 comm="syz.0.408" laddr=172.20.20.10 lport=1 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.512137][ T7495] can0: slcan on ptm0. [ 71.514222][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 71.516608][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 71.518916][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 71.521209][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 71.524260][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 71.531821][ T7501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7501 comm=syz.0.409 [ 71.620194][ T40] audit: type=1400 audit(1742914540.455:637): avc: denied { write } for pid=7505 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.704472][ T7491] can0 (unregistered): slcan off ptm0. [ 71.775420][ T7546] program syz.2.419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.801850][ T7546] program syz.2.419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.893180][ T7560] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 72.101425][ T7595] validate_nla: 4 callbacks suppressed [ 72.101436][ T7595] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 72.109130][ T7595] IPVS: Error joining to the multicast group [ 72.425850][ T7617] xt_hashlimit: size too large, truncated to 1048576 [ 72.611361][ T7636] openvswitch: netlink: IPv4 tun info is not correct [ 72.620961][ T7638] SELinux: ebitmap: empty map [ 72.623795][ T7638] SELinux: failed to load policy [ 72.677011][ T7651] tipc: Started in network mode [ 72.678597][ T7651] tipc: Node identity 400000000000000008, cluster identity 4711 [ 72.807446][ T7660] sd 0:0:0:0: PR command failed: 1026 [ 72.809072][ T7660] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 72.810900][ T7660] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 73.120922][ T7687] nbd: must specify at least one socket [ 73.200056][ T7699] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 73.204652][ T7701] overlayfs: workdir and upperdir must be separate subtrees [ 73.418365][ T7730] bridge0: port 3(syz_tun) entered blocking state [ 73.420284][ T7730] bridge0: port 3(syz_tun) entered disabled state [ 73.422154][ T7730] syz_tun: entered allmulticast mode [ 73.425031][ T7730] syz_tun: entered promiscuous mode [ 73.427393][ T7730] bridge0: port 3(syz_tun) entered blocking state [ 73.429295][ T7730] bridge0: port 3(syz_tun) entered forwarding state [ 73.582404][ T7748] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.585518][ T7748] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.588349][ T7748] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.590984][ T7748] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 73.594508][ T7748] geneve3: entered promiscuous mode [ 73.595942][ T7748] geneve3: entered allmulticast mode [ 73.656252][ T7754] kvm: Disabled LAPIC found during irq injection [ 73.673557][ T7756] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 73.756044][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.922403][ T7768] program syz.4.486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.926340][ T7768] IPVS: length: 243 != 24 [ 74.210542][ T7781] program syz.3.491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.278581][ T5989] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 74.439222][ T5989] usb 9-1: not running at top speed; connect to a high speed hub [ 74.442164][ T5989] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 74.445137][ T5989] usb 9-1: config 1 has no interface number 1 [ 74.449031][ T5989] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 74.451516][ T5989] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.454189][ T5989] usb 9-1: Product: syz [ 74.455360][ T5989] usb 9-1: Manufacturer: syz [ 74.456663][ T5989] usb 9-1: SerialNumber: syz [ 74.695997][ T7807] ucma_write: process 346 (syz.3.499) changed security contexts after opening file descriptor, this is not allowed. [ 74.752504][ T5989] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 74.765699][ T5989] usb 9-1: USB disconnect, device number 3 [ 74.933420][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.935873][ T7819] ubi31: attaching mtd0 [ 74.940176][ T7819] ubi31: scanning is finished [ 74.941459][ T7819] ubi31: empty MTD device detected [ 75.010489][ T7819] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 75.012599][ T7819] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 75.014746][ T7819] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 75.016621][ T7819] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 75.018668][ T7819] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 75.020539][ T7819] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 75.022758][ T7819] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 930980180 [ 75.025603][ T7819] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 75.029336][ T7820] ubi31: background thread "ubi_bgt31d" started, PID 7820 [ 75.503950][ T7843] __nla_validate_parse: 75 callbacks suppressed [ 75.503960][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 75.532717][ T7850] netlink: 448 bytes leftover after parsing attributes in process `syz.4.513'. [ 75.537804][ T7850] unsupported nla_type 14345 [ 75.596226][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 75.596236][ T40] audit: type=1400 audit(1742914544.435:699): avc: denied { module_load } for pid=7858 comm="syz.4.516" path="/sys/kernel/address_bits" dev="sysfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 75.624462][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 75.626933][ T7866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.517'. [ 75.633370][ T7866] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 75.635744][ T7866] overlayfs: missing 'lowerdir' [ 75.655063][ T7868] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 75.657098][ T7868] PKCS7: Only support pkcs7_signedData type [ 75.697819][ T40] audit: type=1400 audit(1742914544.535:700): avc: denied { remount } for pid=7878 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.804290][ T40] audit: type=1400 audit(1742914544.645:701): avc: denied { watch_sb } for pid=7883 comm="syz.0.523" path="/189" dev="tmpfs" ino=1033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.810077][ T7891] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 75.813318][ T7891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.817650][ T7891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.524'. [ 75.823038][ T7891] syz.4.524 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 75.827717][ T40] audit: type=1400 audit(1742914544.665:702): avc: denied { read } for pid=7888 comm="syz.4.524" name="btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 75.834308][ T40] audit: type=1400 audit(1742914544.665:703): avc: denied { open } for pid=7888 comm="syz.4.524" path="/dev/btrfs-control" dev="devtmpfs" ino=1337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 75.931578][ T7898] xt_hashlimit: max too large, truncated to 1048576 [ 75.935020][ T7898] xt_bpf: check failed: parse error [ 76.115127][ T7910] overlayfs: failed to clone upperpath [ 76.121268][ T7910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7910 comm=syz.0.530 [ 76.126614][ T40] audit: type=1400 audit(1742914544.965:704): avc: denied { read } for pid=7909 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 76.135002][ T7912] openvswitch: netlink: IP tunnel dst address not specified [ 76.159981][ T40] audit: type=1400 audit(1742914544.995:705): avc: denied { read } for pid=7913 comm="syz.0.532" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.196443][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.535'. [ 76.201277][ T40] audit: type=1400 audit(1742914545.035:706): avc: denied { map } for pid=7919 comm="syz.2.535" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 76.207815][ T40] audit: type=1400 audit(1742914545.035:707): avc: denied { execute } for pid=7919 comm="syz.2.535" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 76.336990][ T7931] xt_recent: Unsupported userspace flags (00000042) [ 76.409518][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 76.475890][ T7940] team0 (unregistering): Port device team_slave_0 removed [ 76.479630][ T7940] team0 (unregistering): Port device team_slave_1 removed [ 76.489296][ T7943] tipc: Enabling of bearer rejected, failed to enable media [ 76.569245][ T7965] tmpfs: Unknown parameter 'hu' [ 76.573436][ T40] audit: type=1800 audit(1742914545.405:708): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.549" name="bus" dev="tmpfs" ino=1116 res=0 errno=0 [ 76.627856][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.552'. [ 76.630360][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.552'. [ 76.642168][ T7977] program syz.2.554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.778549][ T8005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.561'. [ 76.803074][ T8007] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 76.939903][ T1052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.033998][ T1052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.077613][ T5961] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.081121][ T5961] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.085086][ T5961] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.093814][ T5961] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.093840][ T1052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.096111][ T5961] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.100576][ T5961] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.108703][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.112294][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.115458][ T5952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.118457][ T5952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.123243][ T5952] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.125660][ T5952] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.152218][ T1052] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.206397][ T8018] chnl_net:caif_netlink_parms(): no params data found [ 77.248630][ T8018] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.250660][ T8018] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.252594][ T8018] bridge_slave_0: entered allmulticast mode [ 77.255127][ T8018] bridge_slave_0: entered promiscuous mode [ 77.257844][ T8018] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.259774][ T8018] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.261699][ T8018] bridge_slave_1: entered allmulticast mode [ 77.264280][ T8018] bridge_slave_1: entered promiscuous mode [ 77.305463][ T8018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.309892][ T8018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.313333][ T1052] bridge_slave_1: left allmulticast mode [ 77.314894][ T1052] bridge_slave_1: left promiscuous mode [ 77.316432][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.320550][ T1052] bridge_slave_0: left allmulticast mode [ 77.322133][ T1052] bridge_slave_0: left promiscuous mode [ 77.324507][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.600559][ T1052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.606733][ T1052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.613640][ T1052] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 77.616592][ T1052] bond0 (unregistering): Released all slaves [ 77.640146][ T8030] bridge_slave_0: left allmulticast mode [ 77.641778][ T8030] bridge_slave_0: left promiscuous mode [ 77.649714][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.654076][ T8030] bridge_slave_1: left allmulticast mode [ 77.655624][ T8030] bridge_slave_1: left promiscuous mode [ 77.655935][ T8031] netlink: 'syz.4.568': attribute type 10 has an invalid length. [ 77.657573][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.672123][ T8030] bond0: (slave bond_slave_0): Releasing backup interface [ 77.689136][ T8030] bond0: (slave bond_slave_1): Releasing backup interface [ 77.702257][ T8030] team0: Port device team_slave_0 removed [ 77.706482][ T8030] team0: Port device team_slave_1 removed [ 77.708312][ T8030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.710381][ T8030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.714748][ T8030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.716734][ T8030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.731759][ T8031] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 77.738439][ T1052] tipc: Left network mode [ 77.750511][ T8018] team0: Port device team_slave_0 added [ 77.765105][ T8018] team0: Port device team_slave_1 added [ 77.825484][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.827503][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.836693][ T8018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.841735][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.847055][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.855186][ T8018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.869237][ T8058] overlayfs: conflicting options: userxattr,redirect_dir=on [ 77.898412][ T8018] hsr_slave_0: entered promiscuous mode [ 77.900255][ T8018] hsr_slave_1: entered promiscuous mode [ 78.016140][ T8018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.019523][ T8018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.024057][ T8018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.029954][ T8018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.040501][ T1052] hsr_slave_0: left promiscuous mode [ 78.042362][ T1052] hsr_slave_1: left promiscuous mode [ 78.046619][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.048922][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.051628][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.053979][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.070335][ T1052] veth1_macvtap: left promiscuous mode [ 78.071888][ T1052] veth0_macvtap: left promiscuous mode [ 78.073719][ T1052] veth1_vlan: left promiscuous mode [ 78.075179][ T1052] veth0_vlan: left promiscuous mode [ 79.117902][ T8095] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 79.124780][ T8095] bridge_slave_0: left allmulticast mode [ 79.126409][ T8095] bridge_slave_0: left promiscuous mode [ 79.128064][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.132198][ T8095] bridge_slave_1: left promiscuous mode [ 79.135011][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.138869][ T8095] bond0: (slave bond_slave_0): Releasing backup interface [ 79.143407][ T8095] bond0: (slave bond_slave_1): Releasing backup interface [ 79.145566][ T5952] Bluetooth: hci0: command tx timeout [ 79.154300][ T8095] team0: Port device team_slave_0 removed [ 79.158788][ T8095] team0: Port device team_slave_1 removed [ 79.160683][ T8095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.163544][ T8095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.166290][ T8095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.168313][ T8095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.174483][ T8103] netlink: 'syz.0.582': attribute type 10 has an invalid length. [ 79.176403][ T8018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.208409][ T8103] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 79.218442][ T8103] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 79.225944][ T8018] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.232231][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.232275][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.232946][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.232971][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.262411][ T8018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.321769][ T8132] erofs (device loop4): cannot find valid erofs superblock [ 79.356872][ T8018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.504652][ T8018] veth0_vlan: entered promiscuous mode [ 79.508483][ T8018] veth1_vlan: entered promiscuous mode [ 79.528453][ T8018] veth0_macvtap: entered promiscuous mode [ 79.534969][ T8018] veth1_macvtap: entered promiscuous mode [ 79.541999][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.545498][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.549331][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.554324][ T8174] syz.2.596 (8174) used greatest stack depth: 20112 bytes left [ 79.557578][ T8018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.560429][ T8018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.566264][ T8018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.570496][ T8018] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.575452][ T8018] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.577838][ T8018] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.580208][ T8018] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.622935][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.625164][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.644699][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.649068][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.707411][ T8191] IPv6: NLM_F_CREATE should be specified when creating new route [ 80.204610][ T8233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=8233 comm=syz.4.602 [ 80.208025][ T8233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8233 comm=syz.4.602 [ 80.211345][ T8233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8233 comm=syz.4.602 [ 80.966956][ T8289] x_tables: duplicate underflow at hook 2 [ 80.969553][ T8289] netlink: 'syz.0.611': attribute type 32 has an invalid length. [ 81.028005][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 81.028017][ T40] audit: type=1804 audit(1742914549.865:727): pid=8293 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.613" name="file0" dev="tmpfs" ino=1261 res=1 errno=0 [ 81.037321][ T40] audit: type=1804 audit(1742914549.865:728): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.613" name="file0" dev="tmpfs" ino=1261 res=1 errno=0 [ 81.072232][ T40] audit: type=1400 audit(1742914549.905:729): avc: denied { lock } for pid=8295 comm="syz.0.614" path="socket:[19427]" dev="sockfs" ino=19427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 81.783093][ T5952] Bluetooth: hci0: command 0x040f tx timeout [ 81.783226][ T8184] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 81.820662][ T40] audit: type=1400 audit(1742914550.655:730): avc: denied { accept } for pid=8335 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 81.844745][ T8336] __nla_validate_parse: 5 callbacks suppressed [ 81.844755][ T8336] netlink: 830 bytes leftover after parsing attributes in process `syz.0.626'. [ 81.947677][ T40] audit: type=1326 audit(1742914550.785:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.0.629" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f813df8d169 code=0x0 [ 81.999709][ T40] audit: type=1326 audit(1742914550.835:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8346 comm="syz.0.629" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f813df8d169 code=0x0 [ 82.251983][ T8367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.634'. [ 82.309061][ T8374] overlayfs: failed to clone upperpath [ 82.475982][ T40] audit: type=1400 audit(1742914551.315:733): avc: denied { create } for pid=8388 comm="syz.0.640" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.481576][ T40] audit: type=1400 audit(1742914551.315:734): avc: denied { unlink } for pid=8388 comm="syz.0.640" name="file0" dev="tmpfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 82.483377][ T8389] /dev/nbd0: Can't lookup blockdev [ 82.514064][ T8391] netlink: 7 bytes leftover after parsing attributes in process `syz.0.641'. [ 82.539902][ T8393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.642'. [ 82.591801][ C3] IPv4: Oversized IP packet from 172.20.20.10 [ 82.664660][ T8184] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 82.688652][ T8184] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 82.707213][ T8225] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 82.841544][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.649'. [ 82.845825][ T40] audit: type=1400 audit(1742914551.685:735): avc: denied { setopt } for pid=8417 comm="syz.4.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 82.907520][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 82.909952][ T8423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.655'. [ 82.936751][ T8434] netlink: 'syz.0.658': attribute type 16 has an invalid length. [ 82.938990][ T8434] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.658'. [ 83.011653][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 83.016260][ T8441] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 83.021412][ T8441] netlink: 112 bytes leftover after parsing attributes in process `syz.4.659'. [ 83.249222][ T40] audit: type=1400 audit(1742914552.085:736): avc: denied { connect } for pid=8463 comm="syz.4.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 83.382947][ T8510] netlink: 'syz.5.680': attribute type 10 has an invalid length. [ 83.389256][ T8510] team0: Device hsr_slave_0 failed to register rx_handler [ 83.572003][ T8527] dlm: Unknown command passed to DLM device : 8 [ 83.572003][ T8527] [ 83.743325][ T8548] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 83.746183][ T8548] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 83.873287][ T5952] Bluetooth: hci0: command 0x040f tx timeout [ 83.903478][ T8573] bond2 (unregistering): Released all slaves [ 84.258587][ T8595] mkiss: ax0: crc mode is auto. [ 84.260516][ T8596] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 84.483665][ T8606] netlink: 'syz.4.710': attribute type 10 has an invalid length. [ 84.487764][ T8606] syz_tun: entered promiscuous mode [ 84.493022][ T8606] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 84.575893][ T8611] RDS: rds_bind could not find a transport for fe80::41, load rds_tcp or rds_rdma? [ 84.579965][ T8611] netlink: 'syz.5.712': attribute type 10 has an invalid length. [ 84.582744][ T8611] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 84.587030][ T8611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.591902][ T8611] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 84.610386][ T8617] random: crng reseeded on system resumption [ 84.769610][ T8617] Unrecognized hibernate image header format! [ 84.772239][ T8617] PM: hibernation: Image mismatch: architecture specific data [ 84.774866][ T8617] netlink: 'syz.4.713': attribute type 1 has an invalid length. [ 85.213304][ T8600] block nbd2: shutting down sockets [ 85.252347][ T8670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.415530][ T8679] netlink: 'syz.2.732': attribute type 1 has an invalid length. [ 85.431914][ T8679] 8021q: adding VLAN 0 to HW filter on device bond4 [ 85.435640][ T8679] bond0: (slave bond4): Enslaving as an active interface with an up link [ 85.888157][ T8746] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 85.900797][ T8746] warning: `syz.5.752' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.945727][ T8757] Bluetooth: MGMT ver 1.23 [ 85.953082][ T5952] Bluetooth: hci0: command 0x040f tx timeout [ 86.285777][ T8790] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 86.354644][ T8792] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 86.358176][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 86.358186][ T40] audit: type=1400 audit(1742914555.195:752): avc: denied { relabelto } for pid=8791 comm="syz.5.767" name="file0" dev="tmpfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 86.367884][ T40] audit: type=1400 audit(1742914555.195:753): avc: denied { associate } for pid=8791 comm="syz.5.767" name="file0" dev="tmpfs" ino=215 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 86.393922][ T40] audit: type=1400 audit(1742914555.225:754): avc: denied { read append } for pid=8794 comm="syz.5.768" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 86.402440][ T40] audit: type=1400 audit(1742914555.225:755): avc: denied { open } for pid=8794 comm="syz.5.768" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 86.412937][ T40] audit: type=1400 audit(1742914555.235:756): avc: denied { ioctl } for pid=8794 comm="syz.5.768" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 86.867108][ T8810] 9p: Unknown access argument 18446744073709551615: -34 [ 86.918439][ T40] audit: type=1400 audit(1742914555.755:757): avc: denied { ioctl } for pid=8809 comm="syz.2.772" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 87.236501][ T8841] tipc: Enabling of bearer rejected, failed to enable media [ 87.453030][ T833] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 87.602872][ T833] usb 10-1: Using ep0 maxpacket: 16 [ 87.606768][ T833] usb 10-1: config 4 has an invalid interface number: 184 but max is 0 [ 87.609072][ T833] usb 10-1: config 4 has no interface number 0 [ 87.610837][ T833] usb 10-1: config 4 interface 184 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 87.610852][ T833] usb 10-1: config 4 interface 184 has no altsetting 0 [ 87.612318][ T833] usb 10-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=94.68 [ 87.619548][ T833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.619562][ T833] usb 10-1: Product: syz [ 87.619570][ T833] usb 10-1: Manufacturer: syz [ 87.619578][ T833] usb 10-1: SerialNumber: syz [ 87.703736][ T40] audit: type=1400 audit(1742914556.545:758): avc: denied { getopt } for pid=8854 comm="syz.4.784" lport=55172 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 87.710852][ T40] audit: type=1400 audit(1742914556.545:759): avc: denied { ioctl } for pid=8854 comm="syz.4.784" path="socket:[24966]" dev="sockfs" ino=24966 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 87.751544][ T40] audit: type=1400 audit(1742914556.585:760): avc: denied { getattr } for pid=8854 comm="syz.4.784" lport=55172 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 87.823512][ T8838] __nla_validate_parse: 9 callbacks suppressed [ 87.823523][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.780'. [ 87.832982][ T8838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8838 comm=syz.5.780 [ 87.838190][ T8839] bridge2: port 1(ip6gretap1) entered blocking state [ 87.840068][ T8839] bridge2: port 1(ip6gretap1) entered disabled state [ 87.842426][ T8839] ip6gretap1: entered allmulticast mode [ 87.847242][ T8839] ip6gretap1: entered promiscuous mode [ 87.861332][ T8860] veth5: entered promiscuous mode [ 87.862962][ T8860] bridge2: port 2(veth5) entered blocking state [ 87.864707][ T8860] bridge2: port 2(veth5) entered disabled state [ 87.866531][ T8860] veth5: entered allmulticast mode [ 87.879523][ T833] gspca_main: sunplus-2.14.0 probing 08ca:0104 [ 87.881695][ T833] gspca_sunplus: reg_r err -71 [ 87.883612][ T833] sunplus 10-1:4.184: probe with driver sunplus failed with error -71 [ 87.891407][ T833] usb 10-1: USB disconnect, device number 2 [ 87.937991][ T40] audit: type=1400 audit(1742914556.775:761): avc: denied { ioctl } for pid=8871 comm="syz.4.789" path="socket:[24338]" dev="sockfs" ino=24338 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.018926][ T8870] bridge_slave_1: left allmulticast mode [ 88.022945][ T5952] Bluetooth: hci0: command 0x040f tx timeout [ 88.098795][ T8870] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.102878][ T8870] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.105457][ T8870] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.108579][ T8870] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.115083][ T8870] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 88.132335][ T8870] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.135110][ T8870] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.137713][ T8870] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.140186][ T8870] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.143144][ T8870] geneve2: left promiscuous mode [ 88.144617][ T8870] geneve2: left allmulticast mode [ 88.161900][ T8872] team0: Device veth0_vlan failed to register rx_handler [ 88.242337][ T8883] /dev/sg0: Can't lookup blockdev [ 88.347586][ T8895] netlink: 9 bytes leftover after parsing attributes in process `syz.0.798'. [ 88.350630][ T8895] 0: renamed from hsr_slave_1 [ 88.351134][ T8897] netlink: 'syz.4.799': attribute type 3 has an invalid length. [ 88.354276][ T8897] netlink: 'syz.4.799': attribute type 1 has an invalid length. [ 88.354901][ T8895] 0: entered allmulticast mode [ 88.356395][ T8897] netlink: 216 bytes leftover after parsing attributes in process `syz.4.799'. [ 88.358006][ T8895] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 88.458709][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'. [ 88.764658][ T8892] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 89.211397][ T8962] netlink: 'syz.0.816': attribute type 21 has an invalid length. [ 89.214121][ T8962] netlink: 128 bytes leftover after parsing attributes in process `syz.0.816'. [ 89.216739][ T8962] netlink: 'syz.0.816': attribute type 5 has an invalid length. [ 89.218926][ T8962] netlink: 'syz.0.816': attribute type 6 has an invalid length. [ 89.221133][ T8962] netlink: 3 bytes leftover after parsing attributes in process `syz.0.816'. [ 89.525159][ T5952] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 89.555657][ T9014] netlink: 48 bytes leftover after parsing attributes in process `syz.5.829'. [ 89.660370][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'. [ 89.818645][ T9037] netlink: 28 bytes leftover after parsing attributes in process `syz.4.836'. [ 89.821210][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 90.009010][ T9021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.021412][ T9060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.055942][ T9063] overlayfs: failed to clone upperpath [ 90.172370][ T9079] QAT: Device 7 not found [ 90.176818][ T9079] overlayfs: missing 'workdir' [ 90.253836][ T5990] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 90.323671][ T9103] ext2: Unknown parameter 'discard'7ڡ#A(/'oh' [ 90.329653][ T9103] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 90.395201][ T9114] /dev/sg0: Can't lookup blockdev [ 90.415635][ T5990] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 90.417817][ T5990] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 90.420792][ T5990] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 90.424362][ T5990] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.428621][ T5990] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.431663][ T5990] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.435318][ T5990] usb 10-1: config 0 descriptor?? [ 90.437250][ T9033] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 90.519596][ T9127] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.578506][ T9132] tmpfs: Bad value for 'mpol' [ 90.691273][ T9138] netfs: Couldn't get user pages (rc=-14) [ 91.069441][ T5990] usbhid 10-1:0.0: can't add hid device: -71 [ 91.071182][ T5990] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 91.074561][ T5990] usb 10-1: USB disconnect, device number 3 [ 91.086700][ T9167] Failed to initialize the IGMP autojoin socket (err -2) [ 91.104090][ T9173] netlink: 'syz.0.882': attribute type 10 has an invalid length. [ 91.173089][ T9181] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.209138][ T9184] netlink: 'syz.4.886': attribute type 1 has an invalid length. [ 91.359905][ T9205] new mount options do not match the existing superblock, will be ignored [ 91.402443][ T9214] netlink: 'syz.0.897': attribute type 2 has an invalid length. [ 91.462530][ T9235] Invalid source name [ 91.463794][ T9235] UBIFS error (pid: 9235): cannot open "ubifs", error -22 [ 91.476623][ T9238] bridge4: port 1(ip6gretap1) entered blocking state [ 91.480290][ T9238] bridge4: port 1(ip6gretap1) entered disabled state [ 91.482139][ T9238] ip6gretap1: entered allmulticast mode [ 91.485136][ T9238] ip6gretap1: entered promiscuous mode [ 91.500136][ T9238] veth3: entered promiscuous mode [ 91.501650][ T9238] bridge4: port 2(veth3) entered blocking state [ 91.503987][ T9238] bridge4: port 2(veth3) entered disabled state [ 91.505791][ T9238] veth3: entered allmulticast mode [ 91.520450][ T9242] syzkaller0: entered promiscuous mode [ 91.521980][ T9242] syzkaller0: entered allmulticast mode [ 91.605096][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 91.605108][ T40] audit: type=1400 audit(1742914560.435:780): avc: denied { execmod } for pid=9259 comm="syz.0.908" path="/359/blkio.bfq.io_service_bytes_recursive" dev="tmpfs" ino=1949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.610009][ T9264] netlink: 'syz.5.909': attribute type 4 has an invalid length. [ 91.713027][ T5952] Bluetooth: hci0: command 0x040f tx timeout [ 92.593961][ T9275] : renamed from bond0 (while UP) [ 92.594936][ T9278] tmpfs: Unknown parameter '' [ 92.734007][ T9307] omfs: Invalid superblock (0) [ 92.757793][ T9307] gre0: Master is either lo or non-ether device [ 92.778970][ T40] audit: type=1400 audit(1742914561.615:781): avc: denied { ioctl } for pid=9312 comm="syz.2.918" path="socket:[26090]" dev="sockfs" ino=26090 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.843484][ T9323] __nla_validate_parse: 20 callbacks suppressed [ 92.843495][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.922'. [ 92.860777][ T9327] bad cache= option: none [ 92.860777][ T9327] [ 92.862717][ T9327] CIFS: VFS: bad cache= option: none [ 92.941109][ T9343] program syz.2.930 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.946401][ T9343] netlink: 68 bytes leftover after parsing attributes in process `syz.2.930'. [ 92.957249][ T40] audit: type=1400 audit(1742914561.795:782): avc: denied { setattr } for pid=9346 comm="syz.5.931" name="SCO" dev="sockfs" ino=27946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.985294][ T40] audit: type=1400 audit(1742914561.825:783): avc: denied { map } for pid=9355 comm="syz.5.934" path="socket:[26112]" dev="sockfs" ino=26112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.993381][ T40] audit: type=1400 audit(1742914561.825:784): avc: denied { read } for pid=9355 comm="syz.5.934" path="socket:[26112]" dev="sockfs" ino=26112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.003612][ T9362] tmpfs: Unknown parameter 'usyi"Tx06' [ 93.012000][ T40] audit: type=1400 audit(1742914561.845:785): avc: denied { setcurrent } for pid=9363 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 93.017938][ T40] audit: type=1401 audit(1742914561.845:786): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 93.029157][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.937'. [ 93.031575][ T9368] netlink: 28 bytes leftover after parsing attributes in process `syz.5.937'. [ 93.062689][ T40] audit: type=1400 audit(1742914561.895:787): avc: denied { mount } for pid=9376 comm="syz.5.940" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 93.091577][ T9380] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 93.120975][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 93.123418][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.938'. [ 93.952905][ T5989] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 94.062323][ T9417] validate_nla: 4 callbacks suppressed [ 94.062338][ T9417] netlink: 'syz.5.951': attribute type 12 has an invalid length. [ 94.067312][ T9417] netlink: 32 bytes leftover after parsing attributes in process `syz.5.951'. [ 94.070593][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.951'. [ 94.075520][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.951'. [ 94.103123][ T5989] usb 9-1: Using ep0 maxpacket: 16 [ 94.106541][ T5989] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 94.110497][ T5989] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 94.114395][ T9423] SELinux: policydb version -967202518 does not match my version range 15-34 [ 94.114434][ T9423] SELinux: failed to load policy [ 94.121203][ T5989] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 94.124494][ T5989] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.126685][ T5989] usb 9-1: Product: syz [ 94.127826][ T5989] usb 9-1: Manufacturer: syz [ 94.129080][ T5989] usb 9-1: SerialNumber: syz [ 94.131585][ T5989] usb 9-1: config 0 descriptor?? [ 94.152751][ T9426] netlink: 36 bytes leftover after parsing attributes in process `syz.5.954'. [ 94.208621][ T40] audit: type=1400 audit(1742914563.045:788): avc: denied { append } for pid=9429 comm="syz.5.956" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 94.336751][ T40] audit: type=1400 audit(1742914563.175:789): avc: denied { ioctl } for pid=9398 comm="syz.4.946" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0xae88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 94.395155][ T5989] appledisplay 9-1:0.0: Error while getting initial brightness: -110 [ 94.397382][ T5989] appledisplay 9-1:0.0: probe with driver appledisplay failed with error -110 [ 94.409838][ T5989] usb 9-1: USB disconnect, device number 4 [ 94.949139][ T9470] Failed to initialize the IGMP autojoin socket (err -2) [ 95.062930][ T5952] Bluetooth: hci0: command 0x040f tx timeout [ 95.068334][ T9487] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 95.120596][ T9496] bridge_slave_0: left allmulticast mode [ 95.122156][ T9496] bridge_slave_0: left promiscuous mode [ 95.123993][ T9496] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.128421][ T9496] bridge_slave_1: left allmulticast mode [ 95.130051][ T9496] bridge_slave_1: left promiscuous mode [ 95.131631][ T9496] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.138011][ T9496] bond0: (slave bond_slave_0): Releasing backup interface [ 95.148856][ T9496] bond0: (slave bond_slave_1): Releasing backup interface [ 95.165160][ T9496] team0: Port device team_slave_0 removed [ 95.171346][ T9496] team0: Port device team_slave_1 removed [ 95.173595][ T9496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.175667][ T9496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.178568][ T9496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.180643][ T9496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.186544][ T9496] ip6gretap1: left allmulticast mode [ 95.188123][ T9496] ip6gretap1: left promiscuous mode [ 95.189665][ T9496] bridge2: port 1(ip6gretap1) entered disabled state [ 95.193659][ T9496] veth5: left allmulticast mode [ 95.195704][ T9496] bridge2: port 2(veth5) entered disabled state [ 95.242478][ T9511] netlink: 'syz.0.981': attribute type 4 has an invalid length. [ 95.246524][ T9511] netlink: 'syz.0.981': attribute type 4 has an invalid length. [ 95.336293][ T9523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.563193][ T9562] random: crng reseeded on system resumption [ 95.598028][ T9567] netlink: 'syz.0.1000': attribute type 1 has an invalid length. [ 95.653484][ T1118] sr 2:0:0:0: [sr0] tag#10 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 95.656611][ T1118] sr 2:0:0:0: [sr0] tag#10 Sense Key : Illegal Request [current] [ 95.659067][ T1118] sr 2:0:0:0: [sr0] tag#10 Add. Sense: Invalid command operation code [ 95.661543][ T1118] sr 2:0:0:0: [sr0] tag#10 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 95.664866][ T1118] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 95.668432][ T1118] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 95.748189][ T9583] lo: entered allmulticast mode [ 95.750793][ T9583] tunl0: entered allmulticast mode [ 95.752458][ T9583] gre0: entered allmulticast mode [ 95.754039][ T9583] gretap0: entered allmulticast mode [ 95.755651][ T9583] erspan0: entered allmulticast mode [ 95.757295][ T9583] ip_vti0: entered allmulticast mode [ 95.758888][ T9583] ip6_vti0: entered allmulticast mode [ 95.760478][ T9583] sit0: entered allmulticast mode [ 95.761945][ T9583] ip6tnl0: entered allmulticast mode [ 95.764234][ T9583] ip6gre0: entered allmulticast mode [ 95.766237][ T9583] syz_tun: entered allmulticast mode [ 95.767810][ T9583] ip6gretap0: entered allmulticast mode [ 95.769421][ T9583] bridge0: entered allmulticast mode [ 95.770967][ T9583] bond0: entered allmulticast mode [ 95.772419][ T9583] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 95.774414][ T9583] dummy0: entered allmulticast mode [ 95.775925][ T9583] nlmon0: entered allmulticast mode [ 95.777457][ T9583] caif0: entered allmulticast mode [ 95.778946][ T9583] batadv0: entered allmulticast mode [ 95.780461][ T9583] veth0: entered allmulticast mode [ 95.782310][ T9583] veth1: entered allmulticast mode [ 95.783887][ T9583] wg0: entered allmulticast mode [ 95.785264][ T9583] wg1: entered allmulticast mode [ 95.786604][ T9583] wg2: entered allmulticast mode [ 95.787940][ T9583] veth0_to_bridge: entered allmulticast mode [ 95.789585][ T9583] bridge_slave_0: entered allmulticast mode [ 95.791157][ T9583] veth1_to_bridge: entered allmulticast mode [ 95.792826][ T9583] bridge_slave_1: entered allmulticast mode [ 95.794459][ T9583] veth0_to_bond: entered allmulticast mode [ 95.796128][ T9583] bond_slave_0: entered allmulticast mode [ 95.798082][ T9583] veth1_to_bond: entered allmulticast mode [ 95.800183][ T9583] bond_slave_1: entered allmulticast mode [ 95.801779][ T9583] veth0_to_team: entered allmulticast mode [ 95.803468][ T9583] team_slave_0: entered allmulticast mode [ 95.805044][ T9583] veth1_to_team: entered allmulticast mode [ 95.806710][ T9583] team_slave_1: entered allmulticast mode [ 95.808292][ T9583] veth0_to_batadv: entered allmulticast mode [ 95.809967][ T9583] batadv_slave_0: entered allmulticast mode [ 95.811615][ T9583] veth1_to_batadv: entered allmulticast mode [ 95.813859][ T9583] batadv_slave_1: entered allmulticast mode [ 95.815560][ T9583] xfrm0: entered allmulticast mode [ 95.817041][ T9583] veth0_to_hsr: entered allmulticast mode [ 95.818680][ T9583] hsr_slave_0: entered allmulticast mode [ 95.820783][ T9583] veth1_to_hsr: entered allmulticast mode [ 95.823856][ T9583] hsr0: entered allmulticast mode [ 95.825288][ T9583] veth1_virt_wifi: entered allmulticast mode [ 95.826892][ T9583] veth0_virt_wifi: entered allmulticast mode [ 95.828902][ T9583] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 95.830893][ T9583] veth1_macvtap: entered allmulticast mode [ 95.832522][ T9583] veth0_macvtap: entered allmulticast mode [ 95.834215][ T9583] macvtap0: entered allmulticast mode [ 95.835752][ T9583] macsec0: entered allmulticast mode [ 95.837208][ T9583] geneve0: entered allmulticast mode [ 95.838647][ T9583] geneve1: entered allmulticast mode [ 95.840144][ T9583] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 95.842136][ T9583] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 95.844587][ T9583] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 95.846629][ T9583] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 95.848626][ T9583] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 95.850565][ T9583] ip6erspan0: entered allmulticast mode [ 95.852091][ T9583] ip6tnl1: entered allmulticast mode [ 95.853590][ T9583] bond1: entered allmulticast mode [ 95.855008][ T9583] bridge1: entered allmulticast mode [ 95.856465][ T9583] gretap1: entered allmulticast mode [ 95.857969][ T9583] geneve2: entered allmulticast mode [ 95.859753][ T9583] vxlan0: entered allmulticast mode [ 95.861208][ T9583] bridge2: entered allmulticast mode [ 95.862688][ T9583] bridge3: entered allmulticast mode [ 95.864188][ T9583] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 95.866189][ T9583] batadv1: entered allmulticast mode [ 95.867666][ T9583] batadv2: entered allmulticast mode [ 95.869580][ T9583] bridge4: entered allmulticast mode [ 95.873532][ T9583] veth2: entered allmulticast mode [ 95.875425][ T9583] vxlan1: entered allmulticast mode [ 96.029497][ T9595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1551 sclass=netlink_route_socket pid=9595 comm=syz.0.1010 [ 96.398927][ T9638] overlayfs: failed to resolve './file1': -2 [ 96.401904][ T833] libceph: mon0 (1)[c::]:6789 connect error [ 96.407145][ T833] libceph: mon0 (1)[c::]:6789 connect error [ 96.415333][ T9635] team0: Device veth0_vlan failed to register rx_handler [ 96.430702][ T9640] netlink: 'syz.2.1027': attribute type 18 has an invalid length. [ 96.443045][ T9632] ceph: No mds server is up or the cluster is laggy [ 96.446132][ T9644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9644 comm=syz.4.1024 [ 96.508310][ T9655] bridge0: port 1(syz_tun) entered blocking state [ 96.510139][ T9655] bridge0: port 1(syz_tun) entered disabled state [ 96.511971][ T9655] syz_tun: entered allmulticast mode [ 96.514124][ T9655] syz_tun: entered promiscuous mode [ 96.517542][ T9655] bridge0: port 1(syz_tun) entered blocking state [ 96.519299][ T9655] bridge0: port 1(syz_tun) entered forwarding state [ 96.657249][ T9678] Failed to initialize the IGMP autojoin socket (err -2) [ 96.665925][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 96.665935][ T40] audit: type=1400 audit(1742914565.505:801): avc: denied { ioctl } for pid=9679 comm="syz.2.1039" path="/263/file0/file0" dev="9p" ino=36831365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.680439][ T40] audit: type=1400 audit(1742914565.515:802): avc: denied { watch_mount } for pid=9679 comm="syz.2.1039" path="/263/file0" dev="9p" ino=36831294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.897723][ T9697] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 96.899995][ T9697] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 96.902554][ T9697] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 96.905409][ T9697] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 97.073282][ T40] audit: type=1400 audit(1742914565.915:803): avc: denied { read } for pid=9718 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 97.085933][ T9721] dlm: no local IP address has been set [ 97.087484][ T9721] dlm: cannot start dlm midcomms -107 [ 97.145390][ T40] audit: type=1400 audit(1742914565.985:804): avc: denied { create } for pid=9734 comm="syz.0.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 97.152459][ T9735] netlink: 'syz.0.1060': attribute type 2 has an invalid length. [ 97.218393][ T9749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.220942][ T9750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.224529][ T40] audit: type=1400 audit(1742914566.065:805): avc: denied { read } for pid=9747 comm="syz.2.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 97.346183][ T9754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=9754 comm=syz.0.1068 [ 97.384974][ T9781] Invalid option length (1047906) for dns_resolver key [ 97.492056][ T9787] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 98.245323][ T40] audit: type=1400 audit(1742914567.085:806): avc: denied { create } for pid=9794 comm="syz.0.1078" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 98.280916][ T9795] __nla_validate_parse: 14 callbacks suppressed [ 98.280927][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 98.286250][ T40] audit: type=1400 audit(1742914567.125:807): avc: denied { bind } for pid=9800 comm="syz.2.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.287886][ T9801] netlink: 432 bytes leftover after parsing attributes in process `syz.2.1080'. [ 98.325829][ T40] audit: type=1400 audit(1742914567.165:808): avc: denied { shutdown } for pid=9802 comm="syz.0.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.598222][ T9809] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1083'. [ 98.601755][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1083'. [ 98.653345][ T9810] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1083'. [ 98.656590][ T40] audit: type=1400 audit(1742914567.495:809): avc: denied { append } for pid=9808 comm="syz.2.1083" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 98.817837][ T9825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.981497][ T9842] SELinux: failed to load policy [ 98.986201][ T9841] SELinux: failed to load policy [ 99.077800][ T9854] netlink: 'syz.0.1097': attribute type 1 has an invalid length. [ 99.116711][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1099'. [ 99.119318][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1099'. [ 99.164566][ T5996] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 99.191261][ T40] audit: type=1400 audit(1742914568.025:810): avc: denied { getopt } for pid=9871 comm="syz.0.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.232132][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1104'. [ 99.312940][ T5996] usb 10-1: Using ep0 maxpacket: 8 [ 99.317243][ T5996] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 99.320174][ T5996] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 99.323738][ T5996] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.327972][ T5996] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 244, changing to 11 [ 99.332125][ T5996] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.336702][ T5996] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 99.339948][ T5996] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 99.343361][ T5996] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.346694][ T5996] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 244, changing to 11 [ 99.349887][ T5996] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.354494][ T5996] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 99.362884][ T5996] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 99.366011][ T5996] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.369227][ T5996] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 244, changing to 11 [ 99.372340][ T5996] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.377875][ T5996] usb 10-1: string descriptor 0 read error: -22 [ 99.379818][ T5996] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 99.382349][ T5996] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.391146][ T5996] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 99.592660][ T29] usb 10-1: USB disconnect, device number 4 [ 99.626725][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1109'. [ 99.634162][ T833] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 99.652040][ T9899] Option ''MO' to dns_resolver key: bad/missing value [ 99.782728][ T9912] openvswitch: netlink: Actions may not be safe on all matching packets [ 99.783044][ T833] usb 9-1: Using ep0 maxpacket: 32 [ 99.787889][ T833] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 99.790332][ T833] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 99.792871][ T833] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 99.795340][ T833] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.798540][ T833] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.801229][ T833] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.804995][ T833] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 99.807524][ T833] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.810822][ T833] usb 9-1: config 0 descriptor?? [ 100.016726][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.021358][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.026746][ T833] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 100.231968][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 100.250542][ C0] usblp0: nonzero read bulk status received: -71 [ 100.253789][ T833] usb 9-1: USB disconnect, device number 5 [ 100.332180][ T9952] cgroup2: Unknown parameter 'euid' [ 100.505781][ T9960] usblp0: removed [ 100.762911][ T5953] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 100.892892][ T5953] usb 9-1: device descriptor read/64, error -71 [ 101.142983][ T5953] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 101.238610][T10014] loop9: detected capacity change from 0 to 7 [ 101.240666][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.246078][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.248399][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.250598][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.254908][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.257252][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.260415][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.262612][T10014] ldm_validate_partition_table(): Disk read failed. [ 101.265514][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.268098][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.270603][T10014] Buffer I/O error on dev loop9, logical block 0, async page read [ 101.272730][T10014] Dev loop9: unable to read RDB block 0 [ 101.274676][T10014] loop9: unable to read partition table [ 101.276401][T10014] loop9: partition table beyond EOD, truncated [ 101.278166][T10014] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 101.278166][T10014] U) failed (rc=-5) [ 101.293174][ T5953] usb 9-1: device descriptor read/64, error -71 [ 101.405697][ T5953] usb usb9-port1: attempt power cycle [ 101.467328][T10028] kvm: MWAIT instruction emulated as NOP! [ 101.742927][ T5953] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 101.763832][ T5953] usb 9-1: device descriptor read/8, error -71 [ 102.012896][ T5953] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 102.043318][ T5953] usb 9-1: device descriptor read/8, error -71 [ 102.153822][ T5953] usb usb9-port1: unable to enumerate USB device [ 102.174253][ T833] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 102.303077][ T833] usb 7-1: device descriptor read/64, error -71 [ 102.306008][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 102.306057][ T40] audit: type=1400 audit(1742914571.145:822): avc: denied { mount } for pid=10096 comm="syz.0.1171" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 102.338025][T10102] openvswitch: netlink: Actions may not be safe on all matching packets [ 102.449321][ T40] audit: type=1400 audit(1742914571.285:823): avc: denied { setopt } for pid=10104 comm="syz.4.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.543119][ T833] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 102.673367][ T833] usb 7-1: device descriptor read/64, error -71 [ 102.783015][ T833] usb usb7-port1: attempt power cycle [ 103.133547][ T833] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 103.154326][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.163615][ T833] usb 7-1: device descriptor read/8, error -71 [ 103.204974][T10170] XFS (nullb0): Invalid superblock magic number [ 103.244363][T10188] vlan2: entered allmulticast mode [ 103.245965][T10188] macsec0: entered allmulticast mode [ 103.247510][T10188] veth1_macvtap: entered allmulticast mode [ 103.274386][T10190] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 103.320689][T10194] evm: overlay not supported [ 103.369203][T10204] __nla_validate_parse: 5 callbacks suppressed [ 103.369213][T10204] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1198'. [ 103.376139][T10208] Failed to initialize the IGMP autojoin socket (err -2) [ 103.412920][ T833] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 103.433265][ T833] usb 7-1: device descriptor read/8, error -71 [ 103.554415][ T833] usb usb7-port1: unable to enumerate USB device [ 103.572824][ T40] audit: type=1400 audit(1742914572.405:824): avc: denied { watch } for pid=10218 comm="syz.5.1201" path="/136/file0/file0" dev="9p" ino=36831365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.601908][T10230] overlayfs: failed to clone upperpath [ 103.625597][ T40] audit: type=1400 audit(1742914572.465:825): avc: denied { remount } for pid=10218 comm="syz.5.1201" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 103.833117][ T833] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 103.963015][ T833] usb 9-1: device descriptor read/64, error -71 [ 104.202877][ T833] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 104.343071][ T833] usb 9-1: device descriptor read/64, error -71 [ 104.461161][T10264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10264 comm=syz.5.1212 [ 104.463512][ T833] usb usb9-port1: attempt power cycle [ 104.475800][T10270] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 104.478695][ T40] audit: type=1400 audit(1742914573.321:826): avc: denied { listen } for pid=10269 comm="syz.0.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 104.577960][T10275] block device autoloading is deprecated and will be removed. [ 104.582104][ T40] audit: type=1400 audit(1742914573.421:827): avc: denied { write } for pid=10273 comm="syz.5.1218" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 104.583707][T10274] syz.5.1218: attempt to access beyond end of device [ 104.583707][T10274] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 104.591618][T10274] vxfs: unable to read disk superblock at 1 [ 104.594165][T10274] syz.5.1218: attempt to access beyond end of device [ 104.594165][T10274] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 104.597721][T10274] vxfs: unable to read disk superblock at 8 [ 104.599373][T10274] vxfs: can't find superblock. [ 104.699218][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1219'. [ 104.703341][T10277] netlink: 'syz.5.1219': attribute type 1 has an invalid length. [ 104.705673][T10277] netlink: 'syz.5.1219': attribute type 2 has an invalid length. [ 104.731585][ T40] audit: type=1400 audit(1742914573.571:828): avc: denied { accept } for pid=10278 comm="syz.5.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.823115][ T833] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 104.853899][ T833] usb 9-1: device descriptor read/8, error -71 [ 104.855799][ T40] audit: type=1400 audit(1742914573.701:829): avc: denied { ioctl } for pid=10292 comm="syz.5.1225" path="socket:[29664]" dev="sockfs" ino=29664 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.965378][T10307] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1231'. [ 105.027459][T10313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1233'. [ 105.032376][T10316] overlayfs: failed to clone upperpath [ 105.063244][ T5961] Bluetooth: hci0: command 0x040f tx timeout [ 105.102864][ T833] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 105.123436][ T833] usb 9-1: device descriptor read/8, error -71 [ 105.125817][T10328] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1237'. [ 105.184173][T10356] random: crng reseeded on system resumption [ 105.233390][ T833] usb usb9-port1: unable to enumerate USB device [ 105.400622][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1246'. [ 105.403212][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1246'. [ 105.534919][T10386] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1247'. [ 106.160915][T10388] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1248'. [ 106.246299][ T40] audit: type=1400 audit(1742914575.091:830): avc: denied { getopt } for pid=10390 comm="syz.2.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 106.286197][ T40] audit: type=1400 audit(1742914575.131:831): avc: denied { getopt } for pid=10396 comm="syz.5.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 106.294790][T10397] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1250'. [ 106.323822][T10407] netlink: 'syz.5.1253': attribute type 1 has an invalid length. [ 106.334111][T10408] bond2: (slave geneve2): Opening slave failed [ 106.376927][T10407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.618908][T10438] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 106.621314][T10438] netlink: 'syz.4.1261': attribute type 1 has an invalid length. [ 106.747477][T10444] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.752699][T10444] vivid-001: disconnect [ 106.755810][T10444] veth1_to_bond: entered allmulticast mode [ 106.758421][T10443] veth1_to_bond: left allmulticast mode [ 106.760768][T10443] vivid-001: reconnect [ 107.142898][ T5961] Bluetooth: hci0: command 0x040f tx timeout [ 107.144661][T10459] jfs: Unknown parameter 'grpuwota' [ 107.393647][T10469] Failed to initialize the IGMP autojoin socket (err -2) [ 107.708038][T10487] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 107.725108][T10489] dns_resolver: Unsupported server list version (0) [ 107.754287][ T40] audit: type=1400 audit(1742914576.601:832): avc: denied { write } for pid=10490 comm="syz.4.1279" path="socket:[32150]" dev="sockfs" ino=32150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 107.797095][T10493] /dev/nullb0: Can't open blockdev [ 107.894834][ T40] audit: type=1400 audit(1742914576.741:833): avc: denied { mount } for pid=10509 comm="syz.2.1285" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 107.901172][T10514] overlayfs: missing 'lowerdir' [ 107.942157][T10520] overlayfs: conflicting lowerdir path [ 107.946712][T10520] CUSE: unknown device info "#" [ 107.948171][T10520] CUSE: unknown device info "" [ 107.949553][T10520] CUSE: unknown device info "*" [ 107.951153][T10520] CUSE: unknown device info "" [ 107.952620][T10520] CUSE: DEVNAME unspecified [ 108.031364][T10533] netlink: 'syz.5.1291': attribute type 7 has an invalid length. [ 108.067903][T10533] syzkaller0: entered promiscuous mode [ 108.069563][T10533] syzkaller0: entered allmulticast mode [ 108.087472][T10533] syzkaller0: tun_net_xmit 192 [ 108.089642][T10533] syzkaller0: create flow: hash 2755211077 index 1 [ 108.142451][T10532] syzkaller0: delete flow: hash 2755211077 index 1 [ 108.330634][T10548] Failed to initialize the IGMP autojoin socket (err -2) [ 108.404419][ T40] audit: type=1400 audit(1742914577.251:834): avc: denied { watch } for pid=10543 comm="syz.2.1295" path="anon_inode:bpf-map" dev="anon_inodefs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:anon_inodefs_t tclass=filesystem permissive=1 [ 108.533026][ T40] audit: type=1400 audit(1742914577.381:835): avc: denied { read } for pid=5339 comm="acpid" name="event5" dev="devtmpfs" ino=2880 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 108.539100][ T40] audit: type=1400 audit(1742914577.381:836): avc: denied { open } for pid=5339 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=2880 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 108.546217][ T40] audit: type=1400 audit(1742914577.381:837): avc: denied { ioctl } for pid=5339 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=2880 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 109.403209][T10581] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 109.421552][T10584] : entered promiscuous mode [ 109.447149][T10592] __nla_validate_parse: 20 callbacks suppressed [ 109.447160][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 109.464617][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1310'. [ 109.467909][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1310'. [ 109.470472][T10593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1310'. [ 109.474468][T10592] Failed to initialize the IGMP autojoin socket (err -2) [ 109.525373][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 109.528447][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 109.595009][ T40] audit: type=1326 audit(1742914578.441:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.0.1314" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f813df8d169 code=0x0 [ 109.729427][ T40] audit: type=1400 audit(1742914578.571:839): avc: denied { unmount } for pid=7007 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 109.754934][T10626] netlink: 'syz.0.1316': attribute type 29 has an invalid length. [ 109.913767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.916956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.929597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.050700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.070946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.073568][ T5996] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 110.116981][T10599] syz.5.1303 (10599): drop_caches: 2 [ 110.216756][T10630] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1319'. [ 110.224139][ T5996] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.227252][ T5996] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.230012][ T5996] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.233714][ T5996] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.236244][ T5996] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.239399][ T5996] usb 9-1: config 0 descriptor?? [ 110.338332][T10638] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1321'. [ 110.348447][T10638] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 110.424603][T10640] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 110.427700][T10640] bridge0: port 4(erspan0) entered blocking state [ 110.429554][T10640] bridge0: port 4(erspan0) entered disabled state [ 110.431534][T10640] erspan0: entered allmulticast mode [ 110.434699][T10640] erspan0: entered promiscuous mode [ 110.436511][T10640] bridge0: port 4(erspan0) entered blocking state [ 110.438353][T10640] bridge0: port 4(erspan0) entered forwarding state [ 110.455150][ T5996] usbhid 9-1:0.0: can't add hid device: -71 [ 110.456930][ T5996] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 110.463485][ T5996] usb 9-1: USB disconnect, device number 14 [ 110.550324][ T40] audit: type=1400 audit(1742914579.391:840): avc: denied { setopt } for pid=10659 comm="syz.2.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 110.616568][ T40] audit: type=1400 audit(1742914579.461:841): avc: denied { lock } for pid=10676 comm="syz.0.1334" path="socket:[30566]" dev="sockfs" ino=30566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 110.671049][T10684] netlink: 'syz.2.1336': attribute type 4 has an invalid length. [ 110.748463][T10710] input: syz0 as /devices/virtual/input/input11 [ 110.836897][T10724] program syz.5.1345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.838868][T10714] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 110.932535][T10747] futex_wake_op: syz.4.1351 tries to shift op by -1; fix this program [ 110.946056][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1347'. [ 110.968018][T10753] openvswitch: netlink: Key type 29 is not supported [ 111.056402][T10720] macvlan0: entered promiscuous mode [ 111.060384][T10720] batadv_slave_1: entered promiscuous mode [ 111.109538][T10767] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1357'. [ 111.112411][T10767] bridge0: left allmulticast mode [ 111.115900][T10720] syz.2.1344: attempt to access beyond end of device [ 111.115900][T10720] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 111.119747][T10720] (syz.2.1344,10720,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 111.121937][T10720] (syz.2.1344,10720,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 111.126076][T10720] (syz.2.1344,10720,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 111.128997][T10720] (syz.2.1344,10720,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 111.158562][T10770] dlm: no locking on control device [ 111.405152][T10815] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 111.407322][T10815] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 111.409688][T10815] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 111.411847][T10815] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 111.416843][T10816] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 111.420849][T10816] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 111.423649][T10816] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 111.426012][T10816] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 111.477210][T10827] overlay: Bad value for 'workdir' [ 111.500478][T10830] netlink: 'syz.2.1376': attribute type 3 has an invalid length. [ 111.575340][T10842] overlayfs: failed to clone upperpath [ 111.621222][T10845] netlink: 'syz.2.1381': attribute type 1 has an invalid length. [ 111.729772][T10857] overlayfs: failed to clone upperpath [ 111.729786][T10858] overlayfs: failed to clone upperpath [ 111.772875][T10873] wg2: left allmulticast mode [ 111.786740][T10873] wireguard: wg2: Could not create IPv4 socket [ 111.788801][T10873] wg2: entered promiscuous mode [ 111.792649][T10873] wg2: entered allmulticast mode [ 111.903200][T10897] nftables ruleset with unbound chain [ 112.016318][T10910] netlink: 'syz.2.1403': attribute type 29 has an invalid length. [ 112.045944][T10910] netlink: 'syz.2.1403': attribute type 29 has an invalid length. [ 112.433325][ T833] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 112.604116][ T833] usb 9-1: config 0 has no interfaces? [ 112.607508][ T833] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.610194][ T833] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.616976][ T833] usb 9-1: Product: syz [ 112.618331][ T833] usb 9-1: Manufacturer: syz [ 112.621905][ T833] usb 9-1: SerialNumber: syz [ 112.629783][ T833] usb 9-1: config 0 descriptor?? [ 112.721425][T10963] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10963 comm=syz.2.1420 [ 112.761000][ T5952] Bluetooth: hci0: unexpected event for opcode 0x204e [ 112.804704][T10966] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.823045][ T5953] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 112.825043][ T5953] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 112.834306][ T833] usb 9-1: USB disconnect, device number 15 [ 112.845779][ T5953] ================================================================== [ 112.848055][ T5953] BUG: KASAN: slab-use-after-free in sco_conn_put+0x471/0x4c0 [ 112.850161][ T5953] Write of size 8 at addr ffff8880285445a0 by task kworker/3:2/5953 [ 112.853178][ T5953] [ 112.854314][ T5953] CPU: 3 UID: 0 PID: 5953 Comm: kworker/3:2 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 112.854327][ T5953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.854334][ T5953] Workqueue: events rfkill_op_handler [ 112.854352][ T5953] Call Trace: [ 112.854356][ T5953] [ 112.854360][ T5953] dump_stack_lvl+0x116/0x1f0 [ 112.854376][ T5953] print_report+0xc3/0x670 [ 112.854387][ T5953] ? __virt_addr_valid+0x5e/0x590 [ 112.854398][ T5953] ? __phys_addr+0xc6/0x150 [ 112.854412][ T5953] kasan_report+0xd9/0x110 [ 112.854427][ T5953] ? sco_conn_put+0x471/0x4c0 [ 112.854446][ T5953] ? sco_conn_put+0x471/0x4c0 [ 112.854465][ T5953] sco_conn_put+0x471/0x4c0 [ 112.854483][ T5953] sco_conn_del+0x26f/0x2e0 [ 112.854502][ T5953] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 112.854520][ T5953] sco_disconn_cfm+0x76/0xb0 [ 112.854539][ T5953] hci_conn_hash_flush+0x10b/0x260 [ 112.854557][ T5953] hci_dev_close_sync+0x603/0x11a0 [ 112.854572][ T5953] ? __pfx_bt_err+0x10/0x10 [ 112.854592][ T5953] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 112.854606][ T5953] ? __pfx_lock_release+0x10/0x10 [ 112.854630][ T5953] hci_dev_do_close+0x2e/0x90 [ 112.854645][ T5953] hci_rfkill_set_block+0x225/0x360 [ 112.854659][ T5953] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.854678][ T5953] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 112.854688][ T5953] rfkill_set_block+0x203/0x560 [ 112.854703][ T5953] rfkill_epo+0x8e/0x1d0 [ 112.854718][ T5953] rfkill_op_handler+0x262/0x280 [ 112.854733][ T5953] process_one_work+0x9c5/0x1ba0 [ 112.854749][ T5953] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 112.854764][ T5953] ? __pfx_process_one_work+0x10/0x10 [ 112.854779][ T5953] ? assign_work+0x1a0/0x250 [ 112.854792][ T5953] worker_thread+0x6c8/0xf00 [ 112.854806][ T5953] ? __kthread_parkme+0x148/0x220 [ 112.854817][ T5953] ? __pfx_worker_thread+0x10/0x10 [ 112.854831][ T5953] kthread+0x3af/0x750 [ 112.854843][ T5953] ? __pfx_kthread+0x10/0x10 [ 112.854854][ T5953] ? lock_acquire+0x2f/0xb0 [ 112.854869][ T5953] ? __pfx_kthread+0x10/0x10 [ 112.854881][ T5953] ret_from_fork+0x45/0x80 [ 112.854894][ T5953] ? __pfx_kthread+0x10/0x10 [ 112.854906][ T5953] ret_from_fork_asm+0x1a/0x30 [ 112.854921][ T5953] [ 112.854924][ T5953] [ 112.915192][ T5953] Allocated by task 10658: [ 112.916450][ T5953] kasan_save_stack+0x33/0x60 [ 112.917793][ T5953] kasan_save_track+0x14/0x30 [ 112.919110][ T5953] __kasan_kmalloc+0xaa/0xb0 [ 112.920437][ T5953] copy_verifier_state+0xad7/0xe70 [ 112.921875][ T5953] do_check_common+0x459e/0xb960 [ 112.923296][ T5953] bpf_check+0x7801/0xb8c0 [ 112.924605][ T5953] bpf_prog_load+0xe3c/0x2480 [ 112.925932][ T5953] __sys_bpf+0x478f/0x49f0 [ 112.927154][ T5953] __x64_sys_bpf+0x78/0xc0 [ 112.928380][ T5953] do_syscall_64+0xcd/0x250 [ 112.929623][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.931226][ T5953] [ 112.931907][ T5953] Freed by task 10658: [ 112.932996][ T5953] kasan_save_stack+0x33/0x60 [ 112.934293][ T5953] kasan_save_track+0x14/0x30 [ 112.935650][ T5953] kasan_save_free_info+0x3b/0x60 [ 112.937071][ T5953] __kasan_slab_free+0x51/0x70 [ 112.938412][ T5953] kfree+0x2c4/0x4d0 [ 112.939519][ T5953] free_verifier_state+0xa3/0x1c0 [ 112.940931][ T5953] do_check_common+0x1eef/0xb960 [ 112.942326][ T5953] bpf_check+0x7801/0xb8c0 [ 112.943576][ T5953] bpf_prog_load+0xe3c/0x2480 [ 112.944931][ T5953] __sys_bpf+0x478f/0x49f0 [ 112.946206][ T5953] __x64_sys_bpf+0x78/0xc0 [ 112.947467][ T5953] do_syscall_64+0xcd/0x250 [ 112.948757][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.950402][ T5953] [ 112.951100][ T5953] The buggy address belongs to the object at ffff888028544000 [ 112.951100][ T5953] which belongs to the cache kmalloc-2k of size 2048 [ 112.954894][ T5953] The buggy address is located 1440 bytes inside of [ 112.954894][ T5953] freed 2048-byte region [ffff888028544000, ffff888028544800) [ 112.958622][ T5953] [ 112.959301][ T5953] The buggy address belongs to the physical page: [ 112.961076][ T5953] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028544000 pfn:0x28540 [ 112.963818][ T5953] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 112.966207][ T5953] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 112.968499][ T5953] page_type: f5(slab) [ 112.969583][ T5953] raw: 00fff00000000240 ffff88801b042f00 ffffea0000bf0210 ffffea0000d0f810 [ 112.971919][ T5953] raw: ffff888028544000 0000000000080004 00000000f5000000 0000000000000000 [ 112.974196][ T5953] head: 00fff00000000240 ffff88801b042f00 ffffea0000bf0210 ffffea0000d0f810 [ 112.976985][ T5953] head: ffff888028544000 0000000000080004 00000000f5000000 0000000000000000 [ 112.979303][ T5953] head: 00fff00000000003 ffffea0000a15001 ffffffffffffffff 0000000000000000 [ 112.981596][ T5953] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 112.983913][ T5953] page dumped because: kasan: bad access detected [ 112.985667][ T5953] page_owner tracks the page as allocated [ 112.987212][ T5953] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5950, tgid 5950 (syz-executor), ts 45670216168, free_ts 45665838890 [ 112.992824][ T5953] post_alloc_hook+0x181/0x1b0 [ 112.994165][ T5953] get_page_from_freelist+0xfce/0x2f80 [ 112.995676][ T5953] __alloc_frozen_pages_noprof+0x221/0x2470 [ 112.997330][ T5953] alloc_pages_mpol+0x1fc/0x540 [ 112.998719][ T5953] new_slab+0x23d/0x330 [ 112.999890][ T5953] ___slab_alloc+0xc37/0x1640 [ 113.001215][ T5953] __slab_alloc.constprop.0+0x56/0xb0 [ 113.002713][ T5953] __kmalloc_node_track_caller_noprof+0x2f1/0x510 [ 113.004530][ T5953] kmalloc_reserve+0xef/0x2c0 [ 113.005876][ T5953] pskb_expand_head+0x237/0x1050 [ 113.007265][ T5953] netlink_trim+0x22d/0x310 [ 113.008555][ T5953] netlink_broadcast_filtered+0xc7/0xef0 [ 113.010120][ T5953] nlmsg_notify+0x9e/0x220 [ 113.011381][ T5953] rtnetlink_event+0x177/0x1f0 [ 113.012734][ T5953] notifier_call_chain+0xb7/0x410 [ 113.014153][ T5953] call_netdevice_notifiers_info+0xbe/0x140 [ 113.015802][ T5953] page last free pid 5950 tgid 5950 stack trace: [ 113.017575][ T5953] free_frozen_pages+0x6db/0xfb0 [ 113.018964][ T5953] __put_partials+0x14c/0x170 [ 113.020291][ T5953] qlist_free_all+0x4e/0x120 [ 113.021592][ T5953] kasan_quarantine_reduce+0x195/0x1e0 [ 113.023110][ T5953] __kasan_slab_alloc+0x69/0x90 [ 113.024496][ T5953] __kmalloc_cache_noprof+0x243/0x410 [ 113.026030][ T5953] ref_tracker_alloc+0x17c/0x5b0 [ 113.027420][ T5953] register_netdevice+0x166a/0x1eb0 [ 113.028882][ T5953] veth_newlink+0x3c2/0x8f0 [ 113.030157][ T5953] rtnl_newlink+0xb95/0x1d60 [ 113.031453][ T5953] rtnetlink_rcv_msg+0x95b/0xea0 [ 113.032843][ T5953] netlink_rcv_skb+0x16b/0x440 [ 113.034182][ T5953] netlink_unicast+0x53c/0x7f0 [ 113.035516][ T5953] netlink_sendmsg+0x8cb/0xd70 [ 113.036861][ T5953] __sys_sendto+0x488/0x4f0 [ 113.038139][ T5953] __x64_sys_sendto+0xe0/0x1c0 [ 113.039485][ T5953] [ 113.040166][ T5953] Memory state around the buggy address: [ 113.041726][ T5953] ffff888028544480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.043914][ T5953] ffff888028544500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.046159][ T5953] >ffff888028544580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.048277][ T5953] ^ [ 113.049696][ T5953] ffff888028544600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.051893][ T5953] ffff888028544680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.054097][ T5953] ================================================================== [ 113.066528][ T5953] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 113.068580][ T5953] CPU: 3 UID: 0 PID: 5953 Comm: kworker/3:2 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 113.071445][ T5953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.074411][ T5953] Workqueue: events rfkill_op_handler [ 113.075948][ T5953] Call Trace: [ 113.076912][ T5953] [ 113.077756][ T5953] dump_stack_lvl+0x3d/0x1f0 [ 113.079061][ T5953] panic+0x71d/0x800 [ 113.080178][ T5953] ? __pfx_panic+0x10/0x10 [ 113.081452][ T5953] ? preempt_schedule_thunk+0x1a/0x30 [ 113.082960][ T5953] ? preempt_schedule_common+0x44/0xc0 [ 113.084525][ T5953] ? check_panic_on_warn+0x1f/0xb0 [ 113.085971][ T5953] check_panic_on_warn+0xab/0xb0 [ 113.087356][ T5953] end_report+0x117/0x180 [ 113.088571][ T5953] kasan_report+0xe9/0x110 [ 113.089825][ T5953] ? sco_conn_put+0x471/0x4c0 [ 113.091150][ T5953] ? sco_conn_put+0x471/0x4c0 [ 113.092473][ T5953] sco_conn_put+0x471/0x4c0 [ 113.093761][ T5953] sco_conn_del+0x26f/0x2e0 [ 113.095039][ T5953] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 113.096529][ T5953] sco_disconn_cfm+0x76/0xb0 [ 113.097827][ T5953] hci_conn_hash_flush+0x10b/0x260 [ 113.099255][ T5953] hci_dev_close_sync+0x603/0x11a0 [ 113.100685][ T5953] ? __pfx_bt_err+0x10/0x10 [ 113.101956][ T5953] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 113.103490][ T5953] ? __pfx_lock_release+0x10/0x10 [ 113.104899][ T5953] hci_dev_do_close+0x2e/0x90 [ 113.106226][ T5953] hci_rfkill_set_block+0x225/0x360 [ 113.107689][ T5953] ? lockdep_hardirqs_on+0x7c/0x110 [ 113.109141][ T5953] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 113.110721][ T5953] rfkill_set_block+0x203/0x560 [ 113.112087][ T5953] rfkill_epo+0x8e/0x1d0 [ 113.113286][ T5953] rfkill_op_handler+0x262/0x280 [ 113.114676][ T5953] process_one_work+0x9c5/0x1ba0 [ 113.116063][ T5953] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 113.117647][ T5953] ? __pfx_process_one_work+0x10/0x10 [ 113.119148][ T5953] ? assign_work+0x1a0/0x250 [ 113.120446][ T5953] worker_thread+0x6c8/0xf00 [ 113.121755][ T5953] ? __kthread_parkme+0x148/0x220 [ 113.123171][ T5953] ? __pfx_worker_thread+0x10/0x10 [ 113.124615][ T5953] kthread+0x3af/0x750 [ 113.125779][ T5953] ? __pfx_kthread+0x10/0x10 [ 113.127082][ T5953] ? lock_acquire+0x2f/0xb0 [ 113.128312][ T5953] ? __pfx_kthread+0x10/0x10 [ 113.129601][ T5953] ret_from_fork+0x45/0x80 [ 113.130852][ T5953] ? __pfx_kthread+0x10/0x10 [ 113.132146][ T5953] ret_from_fork_asm+0x1a/0x30 [ 113.133509][ T5953] [ 113.134929][ T5953] Kernel Offset: disabled [ 113.136089][ T5953] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:56:21 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff8880562134d8 RCX=dffffc0000000000 RDX=1ffff920007b7eb7 RSI=ffffffff8b513d83 RDI=0000000000000005 RBP=ffffc90003dbf580 RSP=ffffc90003dbf4e8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffffffffffff R13=ffffc90003dbf5b8 R14=ffff888032197100 R15=0000562cc496b000 RIP=ffffffff81b9fc70 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f70ceb1c108 CR3=0000000046ca6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000000 RBX=0000000000000001 RCX=ffffffff82021e3e RDX=ffff888028b92440 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900042871b0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000003 R12=ffff888031907b90 R13=0000000000000001 R14=000000000000000e R15=ffff88804d0ee5d0 RIP=ffffffff81b9fc83 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f7cf069c6c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f813e1a7bac CR3=0000000050c3a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000040000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd71b2a6b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f331f80f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f331f80f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f331f80f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f331f80f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f331f80f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f331f80f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a9468e0 RCX=ffffffff81adf53a RDX=ffff888035e0c880 RSI=ffffffff81adf514 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006a5f928 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006 R12=ffffed100d528d1d R13=0000000000000001 R14=ffff88806a83fe80 R15=ffff88806a9468e8 RIP=ffffffff81adf516 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc89c9b348 CR3=000000000df80000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=9633deed2fc37902 4f82e1d5762c9e82 9633deed2fc37902 4f82e1d5762c9e82 9633deed2fc37902 4f82e1d5762c9e82 9633deed2fc37902 4f82e1d5762c9e82 ZMM18=090742efb8b2b253 291689d70919f8de 090742efb8b2b253 291689d70919f8de 090742efb8b2b253 291689d70919f8de 090742efb8b2b253 291689d70919f8de ZMM19=5608000000000000 000000000000000f 5608000000000000 000000000000000e 5608000000000000 000000000000000d 5608000000000000 000000000000000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=4f82e1d54f82e1d5 4f82e1d54f82e1d5 4f82e1d54f82e1d5 4f82e1d54f82e1d5 4f82e1d54f82e1d5 4f82e1d54f82e1d5 4f82e1d54f82e1d5 4f82e1d54f82e1d5 ZMM22=2fc379022fc37902 2fc379022fc37902 2fc379022fc37902 2fc379022fc37902 2fc379022fc37902 2fc379022fc37902 2fc379022fc37902 2fc379022fc37902 ZMM23=9633deed9633deed 9633deed9633deed 9633deed9633deed 9633deed9633deed 9633deed9633deed 9633deed9633deed 9633deed9633deed 9633deed9633deed ZMM24=0919f8de0919f8de 0919f8de0919f8de 0919f8de0919f8de 0919f8de0919f8de 0919f8de0919f8de 0919f8de0919f8de 0919f8de0919f8de 0919f8de0919f8de ZMM25=291689d7291689d7 291689d7291689d7 291689d7291689d7 291689d7291689d7 291689d7291689d7 291689d7291689d7 291689d7291689d7 291689d7291689d7 ZMM26=b8b2b253b8b2b253 b8b2b253b8b2b253 b8b2b253b8b2b253 b8b2b253b8b2b253 b8b2b253b8b2b253 b8b2b253b8b2b253 b8b2b253b8b2b253 b8b2b253b8b2b253 ZMM27=090742ef090742ef 090742ef090742ef 090742ef090742ef 090742ef090742ef 090742ef090742ef 090742ef090742ef 090742ef090742ef 090742ef090742ef ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5608000056080000 5608000056080000 5608000056080000 5608000056080000 5608000056080000 5608000056080000 5608000056080000 5608000056080000 info registers vcpu 3 CPU#3 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85408d15 RDI=ffffffff9ab846c0 RBP=ffffffff9ab84680 RSP=ffffc9000399f428 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000035393554 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9ab84680 R15=0000000000000000 RIP=ffffffff85408d3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055556bbda808 CR3=0000000033538000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000040000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd28d7bd70 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f813e00f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f813e00f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f813e00f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f813e00f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f813e00f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f813e00f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000