last executing test programs: 17.446810564s ago: executing program 0 (id=673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@updpolicy={0xc0, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x8000, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x400, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x1}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3ffd, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 16.506490123s ago: executing program 0 (id=689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}}], 0x2, 0x10) 16.431929672s ago: executing program 0 (id=690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') 16.42735976s ago: executing program 0 (id=691): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x3, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MAP={0x24, 0xe, {0x0, 0x3, 0x3, 0x2, 0x4, 0x8}}]}, 0x58}, 0x1, 0x2, 0x0, 0x2000c811}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x1) listen(r3, 0x1ff) sendto$inet(r3, &(0x7f00000004c0)="ab", 0xffffffffffffff1a, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) sendto$inet(r3, &(0x7f00000004c0)="ab", 0xffffffffffffff1a, 0x20c0, &(0x7f00000001c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 16.426913915s ago: executing program 0 (id=692): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket(0x2a, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="03"], 0xfd1, 0x800) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x1, r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000e400"/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000300000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x2}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000300)="baf80c66b890ae398766efbafc0c66edb883000f00d0bad004edb848008ed80f01c50f350f221abaa10066ed0f01cbba6100b000ee", 0x35}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={r3, 0xa4, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x7, @local, 0x7fff}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e21, 0xd3, @private1, 0x639d}, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @remote}]}, &(0x7f00000001c0)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001d00010000000000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="080006000a00fc850ca57fd6872b00040600050001000000"], 0x30}}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000002c0)='wg1\x00') getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x200, 0x8c, 0xc74b, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r8, 0xffff0000, 0xdc}, 0xc) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000540)) 16.344360949s ago: executing program 0 (id=693): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) socket(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c001000000fae0090f000000000000a2bc5603ca0000327f89000000200000004a2c71083e09001778581acb6c0101ff00000003", 0x47}], 0x1) socket(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a01040000000000000000030000000900020073797a31000000000900010073797a30000000000800054000000023200015800e000100636f6e6e6c696d69740000000c0002800850d3e47b000000140000001000010000000000000000000000000a"], 0xa4}}, 0x4) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r4, 0x0, r4) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x60) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) syz_usb_connect$cdc_ecm(0x269d3ecfe34c7087, 0x57, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x9, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "e57eeb9479"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x4, 0xe}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xa, 0x8, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x7e, 0x81}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xfe, 0x0, 0xd, 0x10, 0xfb}, 0x1ff, &(0x7f0000000800)={0x5, 0xf, 0x1ff, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x3, 0xf0f, 0x8, [0xc0]}, @generic={0xd5, 0x10, 0x4, "84b220576d66c6821e18eb9a575e56ec57b73fb724c0f7e8f0d12aca0de7483eee8fe6e415965b279fbbff2ca28c740e98a5a14d0dd46ba89d899298ed4f74b6b84b8c12e0d0b100781cdb3556cd2a3ef9951e133ee92d0fc557897c6c4a4b0937f76cd818c704b160b7a5d631a7cc175ecf2832a0f20ea4d816284ae5800123b490ad75be2890ed06d63cdecc5210436a707414496f870e5ffa0252be60657695c559e7442eb63cbbc6682b971093176d18e9744d08e67f2a258d6d64969021601473cf6e38413804743579988e73933d7f"}, @generic={0xb, 0x10, 0xa, "331b2672f121ee7f"}, @generic={0x103, 0x10, 0x4, "5581fc6512efa05b3db415e9d8fc7dc4b9179abf5cbb82e5e301711b3bb75b5245c83beecf71f01350fc812444a3ee063b44e7a3a6d241b516a678832817039813d5fe1e3d7c826c2ff5538123d29c62101b62c86325273422f820d788a531f459f5050e245456328a3ef4d81b7283ab14b09f85c517fb2d725f530e12a8f36281dcb889a170fc6a9aebb367b00156d2e5dde26c0019eba8a678ea28342bd9f5c60bfadc4db7325e15a41eecb7b6de4696225cb7e68ac9e90acd27821b470bf7cf7d5ae62fab71baff3a17720680350fdaedc7a820674fca8b8b92785ba335fd9205cb8ace21eabf21052cb742a75e33437184f8678605d150f015e4aaa6b0e9"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x2, 0x2d}]}}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newchain={0x24, 0x64, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0x4}, {0x9, 0xb}, {0xd, 0x4}}}, 0x24}}, 0x4000000) 16.311401769s ago: executing program 32 (id=693): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) socket(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c001000000fae0090f000000000000a2bc5603ca0000327f89000000200000004a2c71083e09001778581acb6c0101ff00000003", 0x47}], 0x1) socket(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a01040000000000000000030000000900020073797a31000000000900010073797a30000000000800054000000023200015800e000100636f6e6e6c696d69740000000c0002800850d3e47b000000140000001000010000000000000000000000000a"], 0xa4}}, 0x4) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r4, 0x0, r4) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x60) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) syz_usb_connect$cdc_ecm(0x269d3ecfe34c7087, 0x57, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x9, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "e57eeb9479"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x0, 0x4, 0xe}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xa, 0x8, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x7e, 0x81}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0xfe, 0x0, 0xd, 0x10, 0xfb}, 0x1ff, &(0x7f0000000800)={0x5, 0xf, 0x1ff, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x3, 0xf0f, 0x8, [0xc0]}, @generic={0xd5, 0x10, 0x4, "84b220576d66c6821e18eb9a575e56ec57b73fb724c0f7e8f0d12aca0de7483eee8fe6e415965b279fbbff2ca28c740e98a5a14d0dd46ba89d899298ed4f74b6b84b8c12e0d0b100781cdb3556cd2a3ef9951e133ee92d0fc557897c6c4a4b0937f76cd818c704b160b7a5d631a7cc175ecf2832a0f20ea4d816284ae5800123b490ad75be2890ed06d63cdecc5210436a707414496f870e5ffa0252be60657695c559e7442eb63cbbc6682b971093176d18e9744d08e67f2a258d6d64969021601473cf6e38413804743579988e73933d7f"}, @generic={0xb, 0x10, 0xa, "331b2672f121ee7f"}, @generic={0x103, 0x10, 0x4, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x2, 0x2d}]}}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newchain={0x24, 0x64, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0x4}, {0x9, 0xb}, {0xd, 0x4}}}, 0x24}}, 0x4000000) 2.489985293s ago: executing program 3 (id=918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async, rerun: 64) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async, rerun: 64) r5 = open(&(0x7f0000000140)='./file0\x00', 0x10300, 0x12) (rerun: 64) linkat(r5, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x400) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000001c083d0340000000b9080001400000000a0800024000000000090001007300000000000000000300000a"], 0xc0}}, 0x0) fsetxattr$security_evm(r2, &(0x7f0000002200), &(0x7f0000002240)=ANY=[@ANYBLOB="03010d00000401003cf1b1c639dcf227ae50ef7fc25294adbe6d839b55ab4da66d6f36956de2f6eadd6f7a1f92f5e68d2a6d96f21e95d84f0582c1e0e721e518cfe22e8863"], 0x45, 0x1) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)=ANY=[@ANYRESDEC=r3, @ANYRES8=r2, @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000001b80), 0x4, 0x400) (async) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000006800010027bd7000fbdbdf25020002d07800000004000b000600070007000000"], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r7, 0x1, 0x9, 0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)=ANY=[@ANYBLOB='P\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf250100000008000400ffffffff08000500b959000008000600400000000800060002000000080006000700000014000180080005000300000008000800b4050000"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x2020) 2.416439213s ago: executing program 3 (id=919): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmmsg$inet(r1, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000540)="1d2f83dbf1383a663300ef26", 0xc}, {&(0x7f00000013c0)="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", 0x1000}], 0x2, &(0x7f0000000240)=[@ip_retopts={{0x28, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x2b, [@dev={0xac, 0x14, 0x14, 0x18}, @remote]}, @timestamp_prespec={0x44, 0xc, 0x40, 0x3, 0x6, [{@rand_addr=0x64010100, 0x5}]}]}}}], 0x28}}], 0x1, 0x440c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0xba87317d461c07c9, 0x70bd2d, 0x4004}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, 0x0) 2.094644222s ago: executing program 3 (id=927): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x31, 0x9d}}], 0x58}, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r5, 0x80084524, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x3, 0x7, 0x101, 0x0, 0x0, {0x8, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x880) (async) sendfile(r7, r0, &(0x7f00000001c0)=0x4, 0xffffffffffffffff) r8 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000380), 0x2002, 0x0) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f00000003c0)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000080)=[@acquire_done], 0x0, 0x0, 0x0}) (rerun: 64) 1.593361991s ago: executing program 3 (id=936): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0xa}}]}]}, 0x2c}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000080)=[{{0x4}, {0x3, 0x1, 0x0, 0x1}}], 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xa4001, 0x0) write$tun(r5, &(0x7f00000006c0)={@void, @val={0x1, 0x0, 0x8, 0x2, 0x400, 0x1}, @ipv4=@dccp={{0x1c, 0x4, 0x3, 0x3, 0x104, 0x67, 0x0, 0xc8, 0x21, 0x0, @broadcast, @multicast1, {[@timestamp_addr={0x44, 0xc, 0xe0, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x8}]}, @cipso={0x86, 0x4e, 0xffffffffffffffff, [{0x0, 0x12, "a9fb080f7ac0bc05f6f47bb5ebc88c71"}, {0x6, 0x8, "ebec60022e24"}, {0x2, 0x12, "9db0e80125bc3a915c711f2494bfabec"}, {0x3, 0xf, "7bf4166f8fe1e6bd89a773fe68"}, {0x6, 0x4, "fed5"}, {0x2, 0x6, "441c9cfc"}, {0x2, 0x3, "eb"}]}]}}, {{0x4e23, 0x4e20, 0x4, 0x1, 0x7, 0x0, 0x0, 0x3, 0x0, "1f3947", 0x0, "aa2965"}, "bc8bddceeb7c981e626b62be6e5ab9e0510ed96a75e38f39afa6f133bc76d67fc9930339ff34958ba187ddf2f2afb407bf3f6534620a73819ab8823c9af77171afa03dc6f42b7f6b75bac263a58e8ca2fdf912a5fa50b56de4092544adccca0de3c03fb5c00ba0f0f6c2f7861e9e378104aff67076f98f905e2d773c297b6092cafa49a6"}}}, 0x10e) mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) quotactl_fd$Q_GETFMT(r6, 0xffffffff80000400, 0x0, &(0x7f0000000140)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) close(r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000906010200000000000000000700ffff200007800c00018008000140e000000208000a400000000105000300020000000900020073797a31000000000500010007000000dd9d30e66d59058962de2f10b5c8e0975ec3840a5406a0866e2bcbe2"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.592530712s ago: executing program 3 (id=937): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x15, 0x4, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x40, 0x80, 0xa, 0xffffffff, {{0x25, 0x4, 0x2, 0x9, 0x94, 0x64, 0x0, 0xf8, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0xf2, 0x1, 0xf, [{@multicast1, 0x80000000}, {@private=0xa010102, 0x80}]}, @end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0xb1, [@multicast2, @dev={0xac, 0x14, 0x14, 0x24}, @empty, @empty, @multicast2, @loopback, @loopback]}, @cipso={0x86, 0x2b, 0x2, [{0x2, 0x9, "4555fee988a209"}, {0x0, 0x2}, {0x5, 0x12, "2248d71e8571570cbf9de02082ca8050"}, {0x2, 0x8, "d380a3b51aa7"}]}, @cipso={0x86, 0x1b, 0x3, [{0x2, 0x7, "37a400bf2e"}, {0x7, 0xe, "527e08fa552503e7d734e91a"}]}]}}}}}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000004c0)={0x0, 0x7086, {0xffffffffffffffff}, {0x0}, 0x2, 0x1}) sendmsg$nl_xfrm(r2, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@report={0x138, 0x20, 0x20, 0x70bd28, 0x25dfdbfb, {0x2b, {@in6=@mcast2, @in6=@mcast2, 0x4e22, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x84, 0x0, r3}}, [@extra_flags={0x8, 0x18, 0x3}, @sa={0xe4, 0x6, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in=@broadcast, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x80, 0x0, r4, r5}, {@in=@loopback, 0x4d6, 0xff}, @in6=@mcast2, {0x2fa2840f, 0x6, 0x2, 0xb, 0x2, 0xfff, 0x2, 0x1}, {0x80000001, 0x7, 0x2, 0x6}, {0x7, 0x8, 0x1000}, 0x70bd2c, 0x3502, 0xa, 0x1, 0x5, 0x19}}]}, 0x138}, 0x1, 0x0, 0x0, 0x41080}, 0x20000080) r6 = socket$isdn(0x22, 0x2, 0x25) r7 = socket$isdn(0x22, 0x2, 0x22) r8 = dup3(r6, r7, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x80044942, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000180)={0x3, 0x0, [{0x948, 0x0, 0x7f}, {0xc0000083, 0x0, 0x7b101c19}, {0xa30, 0x0, 0x7}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xe, 0x0, &(0x7f0000000040)="47ea198bfd0e9cd5e092a9be7e8e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fcntl$dupfd(r12, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xe, 0x12}, {0xb, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40091}, 0x4000010) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000550000012dbd7100fcdbdf25075f0000", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="000300007f00000100"/24], 0x38}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) timerfd_create(0x9, 0x0) close_range(r13, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000810526bd70000000000000000000", @ANYRES32=r6, @ANYRES16=r2], 0x38}, 0x1, 0x0, 0x0, 0x20004999}, 0x0) 1.495782074s ago: executing program 3 (id=939): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x100000, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000a00)={0x2020}, 0x2020) (async, rerun: 32) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8, r1}, 0x18) (rerun: 32) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x6, 0x4e8d0, 0x107b9c}) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x7800, 0x7, 0x80000000, 0xfffff800, {{0x6, 0x4, 0x3, 0x3, 0x18, 0x65, 0x0, 0x4, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@noop, @end]}}}}}) (async, rerun: 32) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x6, &(0x7f0000000800)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x1, 0x100, 0xfffffffffffffff0}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000840)='GPL\x00', 0x8, 0xf5, &(0x7f0000000880)=""/245, 0x1f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000009c0)=[0x1], &(0x7f0000000a00)=[{0x2, 0x5, 0x1, 0xc}, {0x5, 0x4, 0xb, 0xb}, {0x2, 0x5, 0x1}, {0x0, 0x2, 0xc, 0x1}, {0x2, 0x2, 0x6, 0x9}, {0x2, 0x5, 0x1}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x1, 0x10, 0x6}, {0x1, 0x2, 0x9}], 0x10, 0x8, @void, @value}, 0x94) (async, rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r11, 0x80480911, 0x8) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0x0, 0x6, 0x10}, 0xc) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x7, 0x4, 0x4, 0x7, 0x2, 0xffffffffffffffff, 0x3cd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1c7d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xe, 0x23, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x4, 0x0, 0xc, 0x4, 0xb, 0x50, 0x4}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0xa, 0x3, 0x0, 0x50, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0xf98, 0x87, &(0x7f0000000640)=""/135, 0x41000, 0x10, '\x00', r8, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xd, 0x10, 0x83b}, 0x10, 0x0, r9, 0x0, &(0x7f0000000cc0)=[0x1, r10, r11, r12, 0x1, r13, r14, 0xffffffffffffffff], 0x0, 0x10, 0xbc30, @void, @value}, 0x94) (async, rerun: 64) r15 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') (async, rerun: 64) r16 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r16, &(0x7f0000000240)=""/44, 0x7a) (async) getdents64(r16, 0x0, 0x0) (async) write$cgroup_int(r15, 0x0, 0x0) 1.244822813s ago: executing program 4 (id=946): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000100)={{0x9, 0x7f}, {0x9, 0x1003ff}, 0xfeffffff, 0x1}) (async) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = accept4$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x10, 0x80000) accept4(r4, &(0x7f0000000240)=@isdn, &(0x7f00000002c0)=0x80, 0x80000) (async) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) (async) r5 = accept$alg(r3, 0x0, 0x0) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x8, 0x47524247, 0x3, 0x6, 0x2, 0x6, 0xa6e, 0x0, 0x4, 0x1, 0x5}}) (async) sendmsg$alg(r5, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000000000)="7c72bf07f7", 0x5}], 0x51, 0x0, 0x0, 0x20084000}, 0x1) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000b80)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 1.244624185s ago: executing program 4 (id=947): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) keyctl$clear(0x5, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)=',$@\x00', 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) 1.152627318s ago: executing program 4 (id=948): syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@empty, @local, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8864, 0x6, 0x0, 0x1}}, {@llc={0x8864, {@llc={0xf4, 0x80, "1a"}}}}}, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x0, 0x0, @local}, &(0x7f0000000740)=0x1c) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000240)={0x80, 0x1ff, 0xb0, 0x80, 0x16, 0xffff}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)={0x9, {{0xa, 0x4e21, 0x6, @mcast1, 0xde}}, 0x1, 0x7, [{{0xa, 0x4e22, 0x1, @empty, 0x1000}}, {{0xa, 0x4e20, 0x0, @remote, 0x3}}, {{0xa, 0x4e23, 0x2, @loopback, 0x7}}, {{0xa, 0x4e20, 0xfffffffb, @loopback, 0x8}}, {{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x937}}, {{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x10}, 0x400}}, {{0xa, 0x4e23, 0x9, @remote, 0x4}}]}, 0x410) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xf}, 0x56, 0x0}, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x41) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000580)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) close_range(r0, r4, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f00000006c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000e795000600000000060015000400000014001680100408800c0002800800010000000000812c7230dda9706605953ca323d4e880fed7fe99ec76381b8553816fb4305b486930d15066f96ac7269afee7081bca440c1d0a3d2b7dd2f2bb8129e71b7325568179019bfd611391687957e1ec0afec60e7a12d3f265d3df0a4cb8d15eef4ba3b36bf8143657b62b2726b23cf5b133164c09008a8130fcf7d10b0987ddb0aa99481a5257fa1c33fb3e"], 0x38}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000014c0)={0x438, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd234}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x36}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0x19c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7f}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "aae218d9c6fe3d64fddc41b199d780ed9999e6b162c32979fd7a18379c3bd3"}}, @TIPC_NLA_NODE_ID={0xaf, 0x3, "c15daa8db9332fae4bd9c15b15ea3d0fb7b972be57d90392037c9b9de7dd3a52383dc2d91d77122e2d723d86dc62e82b9033c4a426b78cd53f38af14bbebac5a27bfe02d029ab1f8b846ad8a75bbdf7d42294a159c38eda5b4b44f655f7336fb1449e64ad2c6d08d09c535e2f5fdc037e205dfe838dea1e0576a6f9df5dc59f240a1a4555469af78bf7f81c0ddf5614ba9c3a1be7f69699cb7608cba9fbb80c216a3826df57d812f153409"}, @TIPC_NLA_NODE_ID={0x82, 0x3, "d4d6217b579ac08389060260613000500ae241fc5ec7f600da015d3e7c69af4fdea0f7bdf7812de3c1845bd5bb210c2c708b2d262790ac8ece84ea23763c9d0491c02a7d6d5ee72afa2317bb5adfd02800b6e5c5f2514b21c62324fd39f5020f1c6e66cc1ec6c3344682204ecdaf429ac70d96c85e8fc191b40adabea745"}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x49f2f0f0}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x56, 0x3, "8e33412a1efa0a360de5b1c0227c1ad5016ae89e9d06d2657eef2bdd66d5f877f1697922a186d090b2e66bbe0451415308c062c58cb52a0eb29ba2577bb268fffb464b86de43ba03cc5e3469bb449fa9f3ad"}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd160}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x864}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb87}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}]}]}, 0x438}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 1.149899417s ago: executing program 4 (id=950): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)=0x5) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x5) (async) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2000000) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x5, 0x7}) (async, rerun: 64) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4000050}) 994.753455ms ago: executing program 4 (id=951): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="f4", 0x1}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) close(0x3) syz_io_uring_setup(0x184, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, &(0x7f0000000100), &(0x7f0000000000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) r3 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) socket$inet(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@broadcast, @random="060074777f03", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0xb, 0x0, 0x0, 0x0, 0x0, 0x8, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@rr={0x7, 0x13, 0x0, [@private, @empty, @empty, @private]}, @timestamp_prespec={0x44, 0xc, 0xaf, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x3, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {@loopback}, {@local}, {@rand_addr, 0x3}, {@broadcast}, {@rand_addr=0x64010100}, {@local}, {@multicast2}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 994.52844ms ago: executing program 4 (id=952): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003a000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b5d"], 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60680, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff) ioctl$TCSETS(r1, 0x5402, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/4842], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001880), 0x280, 0x0) ioctl$CDROMMULTISESSION(r2, 0x5310, &(0x7f00000018c0)={@msf={0x4, 0x7, 0x7}, 0x1, 0x3}) 558.323032ms ago: executing program 2 (id=954): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="b5c5e8a2509000", 0xc3ff}], 0x1}}], 0x2, 0x10) (fail_nth: 3) 491.959685ms ago: executing program 2 (id=955): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000180)=""/192, 0xc0}, {&(0x7f0000000440)=""/245, 0xf5}], 0x4, 0x3, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @broadcast, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c59881681fb52"}, {0x0, 0x9, "020007651442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc00000000000000000000000000f6"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x2, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 491.298587ms ago: executing program 2 (id=956): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x100, &(0x7f0000000040)="f66303a2ccad46e639ec5d", 0xb, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f00000003c0)="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") r2 = gettid() sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000009c0)={0x5b0, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x485, 0x132, 0x0, 0x1, [@nested={0xc, 0x68, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @pid=r1}]}, @nested={0x163, 0x138, 0x0, 0x1, [@generic="111efbfebc752ede656fa74b2b28ad586d4153fec906a77f20a95903fbd1ac0a9dfb8d9966ad8886a0c67b811d69837ffe742d02c5e60fb1ae68888b5c383411d03bbec1ce482f758803", @typed={0x98, 0xa0, 0x0, 0x0, @binary="d5e09e6459bd8793bef5e36419f87f021047d31fd08533f1149bc244b42721a976c10697be4b4d8b7246278fc8eca3ac046027889f0737ecc77d4d7444e4de56f9be7ca4fca349a061ca6989b5b707ef434d8a45e7af08d4fbee8ddb389f0ac3e7dc873564c2a09bcc581a0f0eb1b16dc7b18a2fd2e078536360ea4e5f6ea75a451b9b3b27b36dc2ccd7a7343b1cdc711ee609dc"}, @generic="44ed3468785341888faf59acfa3984103cf55e2a02bec386b2d475939515b0b3213c3ab416ffb1f9a4cf99e2d1f6e432af590831ed0bf99963061c81e0a5ce4b599e682f1449fdf924e6382960e682a141da48ac1ffb0eea68d521b429e7700cf40152b4da171fe25a9b7cf492190af3aeaf900f42578dca38", @nested={0x4, 0x125}]}, @nested={0xc, 0x150, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @pid=r2}]}, @typed={0xa3, 0x7e, 0x0, 0x0, @binary="6fe4ea8ff491474afac8a3564e271480c5906b0594e04fa40db90fa5999764ad72d497d40a81a2ef1e6717125af377fac50696e7b9ce55907e29c602e9a5f63bfe00083a108f9ee9f6706f84874b77ba6d9f8f104d54e94c509d0ce42f60a9f6713afd69958dba52b7ffe360747d4af8643b82eb3c9bc88bb815e69d07206990cace7fea158fe8986c774103bf5fbded79117d9bbd321838277f5d6dd6bbba"}, @generic="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", @generic="f12896edeeb9", @nested={0xc, 0x29, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @ipv4=@empty}]}, @generic="df225c1745f726e33e7ceb0850afee27a844668d7f443a2c96c768951f31320ab7faaaa34388fb64eeeab57553a70f2ee24501dd34264e9b6c9c2857e8309a7c354819d4b493309732b643693479727c5992471a296629bf4039acb9d4f304b886f40e919d0c2f0df3ad72dd"]}, @nested={0x1c, 0x5d, 0x0, 0x1, [@nested={0x10, 0x10c, 0x0, 0x1, [@nested={0x4, 0x12c}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @typed={0x8, 0x123, 0x0, 0x0, @u32=0xffff}]}, @nested={0xf9, 0x36, 0x0, 0x1, [@generic="5ab26a01e9c2a42609cb2767e71d268b8f05d0957c5ed422e294e5307ee5637f248cf7a04647fde0f05184f21f6b9bc202329df7d287fef0d457b5cf2f8e7d8d8147d6cfbdb45f0ea3ad0f9435aa6b14f0768afee39473af83af24218ae0f018b8daaa923dc35ef8ea37b3d7853db1b55078dc6db5459d527eab9a1ffdfaf7e23dbdf1ee2acb6216cd4063ec0bf05db2649c784cc2bbe2137902bfc91f09ffdbf543284b40c048ddabb51cd9238cd0e32641ac24cf58c6fbc0143df8a50cfbe169d12cad2d55484b2e49145891b0e0ded2f09c9b4fdca77a816847d849919f90bb72bdfbe6bf4ebd9b9a501118ded64926896a4906"]}]}, 0x5b0}], 0x1}, 0x0) 395.054608ms ago: executing program 2 (id=957): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) (async) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mq_getsetattr(r0, &(0x7f0000000400)={0xb, 0x7fffffffffffffff, 0x8, 0x7fffffff}, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000004240)=[{&(0x7f0000000080)=')', 0x1}], 0x1}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) pread64(r4, &(0x7f00000001c0)=""/131, 0x83, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000)=r6, 0x8) (async) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000)=r6, 0x8) pidfd_getfd(r6, r3, 0x0) (async) r7 = pidfd_getfd(r6, r3, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@multiplanar_fd={0x400, 0x3, 0x4, 0x20, 0x9, {}, {0x2, 0x1, 0xc, 0x0, 0x9, 0x1, "55862919"}, 0x6, 0x4, {&(0x7f0000000100)=[{0xc, 0x1, {r7}, 0x200}, {0x5f3e395b, 0x1, {r6}, 0x1}]}, 0x3}) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000340)=@multiplanar_fd={0x400, 0x3, 0x4, 0x20, 0x9, {}, {0x2, 0x1, 0xc, 0x0, 0x9, 0x1, "55862919"}, 0x6, 0x4, {&(0x7f0000000100)=[{0xc, 0x1, {r7}, 0x200}, {0x5f3e395b, 0x1, {r6}, 0x1}]}, 0x3}) 342.437657ms ago: executing program 2 (id=959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000004740)=[{{0x0, 0x1100, &(0x7f0000000980)=[{&(0x7f0000000600)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="b5c5e8a2509000", 0xc3ff}], 0x1}}], 0x2, 0x10) 342.150827ms ago: executing program 1 (id=960): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) (async) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000b40)={0x21f4, r4, 0x502, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x100}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "403cdad598511e01"}, @NL80211_ATTR_FILS_ERP_REALM={0xa6, 0xfa, "a6155119029369fe07dcb1df821945eb76c7180aed95beb0ffaf000933d2c05fd9523a8130be9f7221e42c76e9b012f891594e9433df9411634f76dbf19b4ef41362d066af09610d81c87dc6d97d987c12086399c46fa80ae139b042ce406c37ec5adc1b4d3dfc65ecd07ad94ec3776aa67317a26f50238d25a906a3199425f2f4118bf737b642bc8b0ea2b0dff8dd3da236cb3a67a86630208a0187501999723eec"}, @NL80211_ATTR_FILS_ERP_RRK={0xe9, 0xfc, "a805c1b8737a51755e890a04c05514fe3c67a2dd9ca60770cfd94a74eb2d05fa6d9932439861decc28a281f7c70d2e70efaa2851adf6e044f9f3e93d281c686ebb39a5cb7af941505164ffb2f2216d3c364eb2af27b1189e95bf57c1c68796208cb0865d75e879767b0f07c9abd24c1f7c83b1d5ac5a0c724d8c124fa827a8eb296c89ca1cd66c757299c6f11f028b79a02e60809f2da1b148a103d607038914782a5bb64f70759666b4e509190f6baaf3dd3d91e44eba8a929cdb5d9454068de742422cd8b006d6ee702ffcef35582ada44e2d846a2e7cd0a0c13874b25f305eedea60536"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4322}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}], @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="e96d26d4ad6d"}]}, 0x21f4}, 0x1, 0x0, 0x0, 0x24008cd5}, 0x8000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r1, 0x800, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x6c00}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 286.160046ms ago: executing program 2 (id=961): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000003a000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x2b, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000b80)=[@code={0x1, 0x85, {"c7442400db78904bc744240200000000c7442406000000000f011c24c4237d045d80000ff48c82c60000003e460f30450f013477c744240033070000c744240295fa0000c7442406000000000f011424f3440f1ed6c443a978c8fb450f01b600880000b952080000b800000080ba000000000f30"}}, @code={0x1, 0x77, {"0f01c90f01bc7ed3ef0000f2440f2b990020000048b85f000000000000000f23d00f21f835000000020f23f8400f01d13e410f0d55f166baf80cb84413a383ef66bafc0ced0f20e035000002000f22e0c422cd0ac066baf80cb80e704185ef66bafc0cb000ee"}}, @code={0x1, 0x71, {"450f22440f20d835200000000f22d8b8010000000f01d908bf02000000420f18ba0000000064660f569f00300000b805000000b9554770ea0f01c10fc76aa9c42219ae2d0f84f01048b81e000000000000000f23d80f21f835000000300f23f8"}}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x81, {"48b800100000000000000f23c80f21f835000020000f23f80fc79bf26f0000c7442400da000000c744240200700000ff2c24660f7cc967660f3a0b860000010000c483ad7976933c66b8db008ec00f20140ff823c744240000800000c744240277d507dbc7442406000000000f011424"}}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x5d, {"b9d6090000b8fed59458ba000000000f30410f8000000000dbe8f3470f1a7af0470fc71b66baf80cb89c8f3c88ef66bafc0cb8741918cbef66ba610066edb9610900000f322e0f01cb0f01df"}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x400000000000}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x66, {"c4c3e9223f0148b80c000000000000000f23c00f21f835000006000f23f866c0b61274f2e7e466b89e008ec00fc7b4d7c2ffffff66ba2100ecb9800000c00f3235000800000f303e3e420f01f80f01c4450fc75af6"}}, @code={0x1, 0x8e, {"b9800000c00f3235000400000f30c744240000380000c74424020d000000c7442406000000000f011c240f01c2c744240021000000c744240200800000ff2c2466baa10066b8005866efc401f811ddc4836d6b7d0000c7442400c9000000c744240200000000ff1c2466baf80cb8609d8488ef66bafc0c66ed410f2146"}}, @code={0x1, 0x72, {"c4e1dd73fccf67f3450f0013c7442400adb21dabc744240200800000c7442406000000000f011c24c44121c65845d2360f218d66baf80cb83209c485ef66bafc0cb008ee263e2e4d0fc79a000000000fd22defe7330c66ba210066edc4c2553ff7"}}, @code={0x1, 0x5d, {"b991020000b835000000ba000000000f300f08f345f4b9c90b0000b836000000ba000000000f30670f4e972d00000065650f01c866baa100ec66440fe5bd0700000065f04783264cf30fc730"}}, @code={0x1, 0x68, {"36f30fc73366ba2000ed66bad104b000eec7442400e5000000c7442402a9000000ff2c240f72f50066baa000ec410f01760ab9800000c00f3235004000000f30c7442400c0000000c74424026f730000ff1c24430f01c2"}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x8}, @code={0x1, 0x5f, {"470f01df0f00dc48b800000000008000000f23c80f21f8350c00f0000f23f8c4c1256527400f01f83e26acc40359423d0d000000db66b8fb008ee066baf80cb8b4bf1f83ef66bafc0c66ed3edbe3"}}, @code={0x1, 0x8c, {"6665652e6746afc463796264630000430f462fc462f506ba00180000c744240000400000c744240216000000c7442406000000000f011c24b9800000c00f3235002000000f300f230bc7442400e5070000c744240205000000c7442406000000000f011c24360f06c7442400d2000000c744240208000000ff2c24"}}, @uexit={0x0, 0x18, 0x7fffffff}, @code={0x1, 0x69, {"d1f4b9800000c00f3235000400000f30f3420f1efa660fc736660f388290000001000fa90ff1b85f00000066baf80cb8743a8c8eef66bafc0cedc48231dc557348b8b3810000000000000f23d80f21f835400000800f23f8"}}, @uexit={0x0, 0x18, 0xcbb}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x4}], 0x6ea}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x23, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60680, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x3ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='vegas\x00', 0x6) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000b40)={0x1, 0x81, 0x1a, 0x10000019, 0x1a2, &(0x7f0000000740)}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001880), 0x280, 0x0) ioctl$CDROMMULTISESSION(r5, 0x5310, &(0x7f00000018c0)={@msf={0x4, 0x7, 0x7}, 0x1, 0x3}) 107.365409ms ago: executing program 1 (id=962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000fcdbdf2510000000180001801400020067652e6576753100000000000000000008000f000800000041e7118fb9adce46bfbe0819150d6b67b0fc340caa545940d05fabe01b37acfab030b25463734aea3d3cbd64e0e03d756386fd8a62d1a6f929ef0fb40d3284c51010567d6597467b12eafbcd07004d8b85e590e5a2280b8e900ad3acbac678f1dc0201db6120f2b8ff6b67c51ad3247fadf30358981862b59ffc34e765946c491b8ba62470c579bc44ed34654663e966bc611776a62b2e580119fbad8b4d4ab3b7253c686d9c0a19b919276e31d5b7be748dd7e51fb1d3b719ccd1a96e9a22"], 0x34}}, 0x4044) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) recvmsg(r3, &(0x7f0000000840)={&(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f0000000500)=""/35, 0x23}], 0x3, &(0x7f00000005c0)=""/198, 0xc6}, 0x40010102) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)="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", 0x157}, {&(0x7f0000001180)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e272991b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d43ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f374b6a232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc23f9294a50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb0700ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac", 0x32a}], 0x2, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRES32, @ANYRES64=r2, @ANYRESDEC=r1, @ANYRES16=r3, @ANYBLOB="edb0277ddcc124df859841a1c0f255fd271c6cc7bcbffe953dce19aa284c4bf6009be8"], 0x30}}, 0xc040) socket(0xa, 0x6, 0x1) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@private1, 0x0}, &(0x7f0000000180)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r4, 0x208, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000040}, 0x4048080) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x37a8}, 0x1, 0x0, 0x0, 0x4040000}, 0x41) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) 53.07822ms ago: executing program 1 (id=963): syz_emit_ethernet(0x4e, &(0x7f0000000580)={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x18, 0x2c, 0x0, @remote, @local, {[], {{0xfffd, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xff73, {[@mptcp=@mp_join={0x1e, 0x3}]}}}}}}}}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x7ff, [0x0, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xedc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40003, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x8ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x1], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x84, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@link_local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x18, 0x2c, 0x0, @remote, @local, {[], {{0xfffd, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xff73, {[@mptcp=@mp_join={0x1e, 0x3}]}}}}}}}}, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x7ff, [0x0, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xedc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40003, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x8ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x1], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x84, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) 52.121307ms ago: executing program 1 (id=964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="b5c5e8a2509000", 0xc3ff}], 0x1}}], 0x2, 0x10) (fail_nth: 4) 456.892µs ago: executing program 1 (id=965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0xfffffffffffffe70, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x71}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 0s ago: executing program 1 (id=966): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="857fffffffffffffff0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000025000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x23, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000047000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000000080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$LINK_DETACH(0x22, &(0x7f0000000700)=r5, 0x4) fchdir(r5) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc2, 0x0) fcntl$setlease(r9, 0x400, 0x1) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000500)=""/212, 0xd4}, {&(0x7f0000000240)}, {&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000280)=""/15, 0xf}], 0x4, 0x0, 0x9) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./bus\x00') kernel console output (not intermixed with test programs): eth0_vlan: entered promiscuous mode [ 54.938906][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.941451][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.941774][ T5941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.948295][ T5941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.951062][ T5941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.953892][ T5941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.958769][ T5938] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.961489][ T5938] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.964206][ T5938] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.967337][ T5938] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.973516][ T5929] veth1_vlan: entered promiscuous mode [ 55.021101][ T5930] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.029494][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.032717][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.041913][ T5929] veth0_macvtap: entered promiscuous mode [ 55.057136][ T5929] veth1_macvtap: entered promiscuous mode [ 55.081204][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.083922][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.095921][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.098631][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.104581][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.110197][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.111590][ T5998] netlink: 'syz.2.5': attribute type 9 has an invalid length. [ 55.113395][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.113406][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.122530][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.125944][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.130757][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.140116][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.140190][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.146562][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.149298][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.152425][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.156298][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.159489][ T5929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.162738][ T5929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.167069][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.176013][ T5929] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.179933][ T5929] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.183118][ T5929] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.186579][ T5929] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.250045][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.253422][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.284697][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.296294][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.313298][ T6020] netlink: 'syz.0.12': attribute type 9 has an invalid length. [ 55.329749][ T6017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.443702][ T6041] mac80211_hwsim hwsim2 ‡æ: renamed from wlan0 (while UP) [ 55.542871][ T6058] tunl0: entered promiscuous mode [ 55.544538][ T6058] tunl0: entered allmulticast mode [ 55.619737][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 55.629059][ T6073] netlink: 'syz.0.33': attribute type 2 has an invalid length. [ 55.632254][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 55.636370][ T6073] netlink: 284 bytes leftover after parsing attributes in process `syz.0.33'. [ 55.649432][ T6075] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 55.741993][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 55.832241][ T6100] netlink: 44 bytes leftover after parsing attributes in process `syz.1.44'. [ 55.844618][ T6100] bond0: entered allmulticast mode [ 55.846524][ T6100] bond_slave_0: entered allmulticast mode [ 55.848935][ T6100] bond_slave_1: entered allmulticast mode [ 55.867225][ T6103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 55.868903][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.45'. [ 55.869874][ T6100] netlink: 45 bytes leftover after parsing attributes in process `syz.1.44'. [ 55.925638][ T6109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.46'. [ 56.013986][ T6120] syz.0.52(6120): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 56.122169][ T6127] 9pnet: p9_errstr2errno: server reported unknown error @íÿÿÿÿÿÿÿÿ [ 56.259925][ T5285] Bluetooth: hci1: command tx timeout [ 56.259971][ T5946] Bluetooth: hci2: command tx timeout [ 56.260012][ T5940] Bluetooth: hci3: command tx timeout [ 56.260044][ T5940] Bluetooth: hci0: command tx timeout [ 56.391523][ T6120] ip6t_srh: unknown srh match flags 4000 [ 56.491582][ T6152] netlink: 'syz.2.63': attribute type 28 has an invalid length. [ 56.494221][ T6152] netlink: 'syz.2.63': attribute type 3 has an invalid length. [ 56.497688][ T6152] netlink: 132 bytes leftover after parsing attributes in process `syz.2.63'. [ 56.593338][ T6161] 9pnet: Could not find request transport:  [ 56.618381][ T6161] @: renamed from vlan0 (while UP) [ 56.702896][ T6179] 9pnet: Unknown protocol version 9p20\++} [ 56.741887][ T6184] usb 1-1: USB disconnect, device number 2 [ 56.800206][ T6188] netlink: 'syz.0.75': attribute type 1 has an invalid length. [ 57.044485][ T40] kauditd_printk_skb: 95 callbacks suppressed [ 57.044497][ T40] audit: type=1400 audit(1747240995.508:189): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.121898][ T40] audit: type=1400 audit(1747240995.588:190): avc: denied { open } for pid=6207 comm="syz.0.82" path="/dev/ptyq4" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 57.177558][ T40] audit: type=1400 audit(1747240995.648:191): avc: denied { ioctl } for pid=6207 comm="syz.0.82" path="/dev/ptyq4" dev="devtmpfs" ino=131 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 57.325365][ T40] audit: type=1400 audit(1747240995.788:192): avc: denied { bind } for pid=6214 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.327158][ T6215] Bluetooth: MGMT ver 1.23 [ 57.332065][ T40] audit: type=1400 audit(1747240995.798:193): avc: denied { write } for pid=6214 comm="syz.3.85" path="socket:[8878]" dev="sockfs" ino=8878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.334162][ T6215] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 57.351184][ T6215] xt_hashlimit: size too large, truncated to 1048576 [ 57.407367][ T40] audit: type=1400 audit(1747240995.878:194): avc: denied { connect } for pid=6214 comm="syz.3.85" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.422190][ T6223] xt_hashlimit: size too large, truncated to 1048576 [ 57.437689][ T40] audit: type=1400 audit(1747240995.888:195): avc: denied { create } for pid=6214 comm="syz.3.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.443813][ T40] audit: type=1400 audit(1747240995.898:196): avc: denied { sys_module } for pid=6220 comm="syz.2.87" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.540362][ T40] audit: type=1400 audit(1747240996.008:197): avc: denied { create } for pid=6231 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.544639][ T6232] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 57.550504][ T40] audit: type=1400 audit(1747240996.008:198): avc: denied { setopt } for pid=6231 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 57.695206][ T6241] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.703469][ T6241] macvlan2: entered promiscuous mode [ 57.705203][ T6241] macvlan2: entered allmulticast mode [ 57.709812][ T6241] batadv0: entered promiscuous mode [ 57.711875][ T6241] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 57.715105][ T6241] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 57.875995][ T6248] syz.3.97: attempt to access beyond end of device [ 57.875995][ T6248] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 57.880149][ T6248] exFAT-fs (nbd3): unable to read boot sector [ 57.882146][ T6248] exFAT-fs (nbd3): failed to read boot sector [ 57.884142][ T6248] exFAT-fs (nbd3): failed to recognize exfat type [ 58.046536][ T5974] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.195492][ T5974] usb 6-1: device descriptor read/64, error -71 [ 58.290173][ T6279] IPVS: Error joining to the multicast group [ 58.310375][ C2] IPv4: Oversized IP packet from 172.20.20.10 [ 58.313232][ C2] IPv4: Oversized IP packet from 172.20.20.10 [ 58.315566][ C2] IPv4: Oversized IP packet from 172.20.20.10 [ 58.317835][ C2] IPv4: Oversized IP packet from 172.20.20.10 [ 58.320257][ C2] IPv4: Oversized IP packet from 172.20.20.10 [ 58.322873][ C2] IPv4: Oversized IP packet from 172.20.20.10 [ 58.326285][ C3] IPv4: Oversized IP packet from 172.20.20.10 [ 58.329527][ C3] IPv4: Oversized IP packet from 172.20.20.10 [ 58.332849][ C3] IPv4: Oversized IP packet from 172.20.20.10 [ 58.335827][ T5937] Bluetooth: hci1: command tx timeout [ 58.335842][ C3] IPv4: Oversized IP packet from 172.20.20.10 [ 58.336115][ T5285] Bluetooth: hci2: command tx timeout [ 58.336143][ T5285] Bluetooth: hci3: command tx timeout [ 58.336891][ T5946] Bluetooth: hci0: command tx timeout [ 58.356520][ T6279] fuse: Bad value for 'fd' [ 58.471055][ T5974] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 58.492900][ T6290] netlink: 'syz.2.113': attribute type 4 has an invalid length. [ 58.603127][ T6306] netlink: 'syz.0.118': attribute type 21 has an invalid length. [ 58.605897][ T6306] netlink: 'syz.0.118': attribute type 6 has an invalid length. [ 58.615550][ T5974] usb 6-1: device descriptor read/64, error -71 [ 58.669091][ T6315] process 'syz.0.120' launched './file0' with NULL argv: empty string added [ 58.736768][ T5974] usb usb6-port1: attempt power cycle [ 59.063169][ T6338] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.085911][ T5974] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 59.106569][ T5974] usb 6-1: device descriptor read/8, error -71 [ 59.345440][ T5974] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 59.366785][ T5974] usb 6-1: device descriptor read/8, error -71 [ 59.475582][ T5974] usb usb6-port1: unable to enumerate USB device [ 60.091805][ T6408] syzkaller1: entered promiscuous mode [ 60.093583][ T6408] syzkaller1: entered allmulticast mode [ 60.337863][ T6434] ubi31: attaching mtd0 [ 60.341113][ T6434] ubi31: scanning is finished [ 60.342690][ T6434] ubi31: empty MTD device detected [ 60.417171][ T5937] Bluetooth: hci1: command tx timeout [ 60.425809][ T5937] Bluetooth: hci0: command tx timeout [ 60.426815][ T5940] Bluetooth: hci3: command tx timeout [ 60.429710][ T5946] Bluetooth: hci2: command tx timeout [ 60.441887][ T6441] ip6t_srh: unknown srh match flags 4000 [ 60.449466][ T6441] omfs: Invalid superblock (0) [ 60.478795][ T6443] FAULT_INJECTION: forcing a failure. [ 60.478795][ T6443] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 60.482837][ T6443] CPU: 1 UID: 0 PID: 6443 Comm: syz.0.167 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 60.482853][ T6443] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.482860][ T6443] Call Trace: [ 60.482864][ T6443] [ 60.482868][ T6443] dump_stack_lvl+0x16c/0x1f0 [ 60.482903][ T6443] should_fail_ex+0x512/0x640 [ 60.482924][ T6443] _copy_from_user+0x2e/0xd0 [ 60.482941][ T6443] copy_msghdr_from_user+0x98/0x160 [ 60.482954][ T6443] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 60.482972][ T6443] ___sys_sendmsg+0xfe/0x1d0 [ 60.482984][ T6443] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.483011][ T6443] __sys_sendmsg+0x16d/0x220 [ 60.483023][ T6443] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.483039][ T6443] ? rcu_is_watching+0x12/0xc0 [ 60.483060][ T6443] do_syscall_64+0xcd/0x260 [ 60.483077][ T6443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.483088][ T6443] RIP: 0033:0x7f7af578e969 [ 60.483097][ T6443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.483108][ T6443] RSP: 002b:00007f7af65c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.483118][ T6443] RAX: ffffffffffffffda RBX: 00007f7af59b5fa0 RCX: 00007f7af578e969 [ 60.483125][ T6443] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 60.483131][ T6443] RBP: 00007f7af65c5090 R08: 0000000000000000 R09: 0000000000000000 [ 60.483137][ T6443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.483144][ T6443] R13: 0000000000000000 R14: 00007f7af59b5fa0 R15: 00007ffced6500c8 [ 60.483156][ T6443] [ 60.569545][ T6434] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 60.572003][ T6434] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 60.574321][ T6434] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 60.578968][ T6434] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 60.581966][ T6434] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 60.584795][ T6434] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 60.588280][ T6434] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3761577797 [ 60.591515][ T6434] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 60.595224][ T6446] ubi31: background thread "ubi_bgt31d" started, PID 6446 [ 60.675587][ T6445] __nla_validate_parse: 10 callbacks suppressed [ 60.675600][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 60.865099][ T6470] FAULT_INJECTION: forcing a failure. [ 60.865099][ T6470] name failslab, interval 1, probability 0, space 0, times 1 [ 60.870475][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.0.177 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 60.870492][ T6470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.870498][ T6470] Call Trace: [ 60.870502][ T6470] [ 60.870506][ T6470] dump_stack_lvl+0x16c/0x1f0 [ 60.870525][ T6470] should_fail_ex+0x512/0x640 [ 60.870541][ T6470] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 60.870554][ T6470] should_failslab+0xc2/0x120 [ 60.870566][ T6470] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 60.870577][ T6470] ? __alloc_skb+0x2b2/0x380 [ 60.870591][ T6470] __alloc_skb+0x2b2/0x380 [ 60.870601][ T6470] ? __pfx___alloc_skb+0x10/0x10 [ 60.870614][ T6470] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 60.870631][ T6470] netlink_alloc_large_skb+0x69/0x130 [ 60.870647][ T6470] netlink_sendmsg+0x6a1/0xdd0 [ 60.870662][ T6470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 60.870687][ T6470] ____sys_sendmsg+0xa98/0xc70 [ 60.870709][ T6470] ? copy_msghdr_from_user+0x10a/0x160 [ 60.870727][ T6470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 60.870763][ T6470] ___sys_sendmsg+0x134/0x1d0 [ 60.870784][ T6470] ? __pfx____sys_sendmsg+0x10/0x10 [ 60.870831][ T6470] __sys_sendmsg+0x16d/0x220 [ 60.870844][ T6470] ? __pfx___sys_sendmsg+0x10/0x10 [ 60.870859][ T6470] ? rcu_is_watching+0x12/0xc0 [ 60.870876][ T6470] do_syscall_64+0xcd/0x260 [ 60.870893][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.870905][ T6470] RIP: 0033:0x7f7af578e969 [ 60.870915][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.870925][ T6470] RSP: 002b:00007f7af65c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.870936][ T6470] RAX: ffffffffffffffda RBX: 00007f7af59b5fa0 RCX: 00007f7af578e969 [ 60.870943][ T6470] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 60.870949][ T6470] RBP: 00007f7af65c5090 R08: 0000000000000000 R09: 0000000000000000 [ 60.870955][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.870962][ T6470] R13: 0000000000000000 R14: 00007f7af59b5fa0 R15: 00007ffced6500c8 [ 60.870974][ T6470] [ 60.877422][ T6472] tipc: Started in network mode [ 60.931373][ T1146] tipc: Subscription rejected, illegal request [ 60.933618][ T6472] tipc: Node identity 4, cluster identity 4711 [ 60.940584][ T6477] netlink: 'syz.1.178': attribute type 5 has an invalid length. [ 60.945486][ T6472] tipc: Node number set to 4 [ 61.159620][ T6496] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 61.321290][ T6510] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 61.423117][ T6496] netlink: 164 bytes leftover after parsing attributes in process `syz.0.186'. [ 61.481494][ T6523] netlink: 'syz.1.196': attribute type 8 has an invalid length. [ 61.504028][ T6523] binder: Bad value for 'max' [ 61.722802][ T6535] FAULT_INJECTION: forcing a failure. [ 61.722802][ T6535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.728010][ T6535] CPU: 3 UID: 0 PID: 6535 Comm: syz.1.201 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 61.728025][ T6535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.728032][ T6535] Call Trace: [ 61.728036][ T6535] [ 61.728041][ T6535] dump_stack_lvl+0x16c/0x1f0 [ 61.728076][ T6535] should_fail_ex+0x512/0x640 [ 61.728097][ T6535] _copy_from_iter+0x2a4/0x15b0 [ 61.728115][ T6535] ? __alloc_skb+0x200/0x380 [ 61.728127][ T6535] ? __pfx__copy_from_iter+0x10/0x10 [ 61.728144][ T6535] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 61.728162][ T6535] netlink_sendmsg+0x829/0xdd0 [ 61.728178][ T6535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.728197][ T6535] ____sys_sendmsg+0xa98/0xc70 [ 61.728214][ T6535] ? copy_msghdr_from_user+0x10a/0x160 [ 61.728230][ T6535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 61.728251][ T6535] ___sys_sendmsg+0x134/0x1d0 [ 61.728264][ T6535] ? __pfx____sys_sendmsg+0x10/0x10 [ 61.728291][ T6535] __sys_sendmsg+0x16d/0x220 [ 61.728303][ T6535] ? __pfx___sys_sendmsg+0x10/0x10 [ 61.728323][ T6535] do_syscall_64+0xcd/0x260 [ 61.728340][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.728352][ T6535] RIP: 0033:0x7f68fa18e969 [ 61.728361][ T6535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.728371][ T6535] RSP: 002b:00007f68f7ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.728382][ T6535] RAX: ffffffffffffffda RBX: 00007f68fa3b5fa0 RCX: 00007f68fa18e969 [ 61.728389][ T6535] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 61.728395][ T6535] RBP: 00007f68f7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 61.728402][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.728408][ T6535] R13: 0000000000000000 R14: 00007f68fa3b5fa0 R15: 00007ffdef9cdff8 [ 61.728421][ T6535] [ 61.808158][ C3] vkms_vblank_simulate: vblank timer overrun [ 62.077904][ T40] kauditd_printk_skb: 96 callbacks suppressed [ 62.077915][ T40] audit: type=1400 audit(1747241000.548:295): avc: denied { bind } for pid=6552 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.086648][ T40] audit: type=1400 audit(1747241000.548:296): avc: denied { node_bind } for pid=6552 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 62.092725][ T40] audit: type=1400 audit(1747241000.548:297): avc: denied { ioctl } for pid=6552 comm="syz.2.207" path="socket:[10939]" dev="sockfs" ino=10939 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.101109][ T40] audit: type=1400 audit(1747241000.548:298): avc: denied { write } for pid=6552 comm="syz.2.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.127913][ T6561] capability: warning: `syz.1.210' uses deprecated v2 capabilities in a way that may be insecure [ 62.141934][ T6561] syz.1.210 uses obsolete (PF_INET,SOCK_PACKET) [ 62.185554][ T6566] netlink: 92 bytes leftover after parsing attributes in process `syz.0.211'. [ 62.189311][ T40] audit: type=1400 audit(1747241000.658:299): avc: denied { setopt } for pid=6552 comm="syz.2.207" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 62.197507][ T40] audit: type=1400 audit(1747241000.668:300): avc: denied { name_bind } for pid=6552 comm="syz.2.207" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 62.244551][ T6572] FAULT_INJECTION: forcing a failure. [ 62.244551][ T6572] name failslab, interval 1, probability 0, space 0, times 0 [ 62.250182][ T6572] CPU: 0 UID: 0 PID: 6572 Comm: syz.3.212 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 62.250205][ T6572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.250215][ T6572] Call Trace: [ 62.250222][ T6572] [ 62.250228][ T6572] dump_stack_lvl+0x16c/0x1f0 [ 62.250258][ T6572] should_fail_ex+0x512/0x640 [ 62.250285][ T6572] should_failslab+0xc2/0x120 [ 62.250304][ T6572] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 62.250323][ T6572] ? skb_clone+0x190/0x3f0 [ 62.250346][ T6572] skb_clone+0x190/0x3f0 [ 62.250367][ T6572] netlink_deliver_tap+0xabd/0xd30 [ 62.250395][ T6572] netlink_unicast+0x5df/0x7f0 [ 62.250420][ T6572] ? __pfx_netlink_unicast+0x10/0x10 [ 62.250450][ T6572] netlink_sendmsg+0x8d1/0xdd0 [ 62.250476][ T6572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.250508][ T6572] ____sys_sendmsg+0xa98/0xc70 [ 62.250533][ T6572] ? copy_msghdr_from_user+0x10a/0x160 [ 62.250552][ T6572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.250589][ T6572] ___sys_sendmsg+0x134/0x1d0 [ 62.250609][ T6572] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.250657][ T6572] __sys_sendmsg+0x16d/0x220 [ 62.250678][ T6572] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.250704][ T6572] ? rcu_is_watching+0x12/0xc0 [ 62.250733][ T6572] do_syscall_64+0xcd/0x260 [ 62.250760][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.250778][ T6572] RIP: 0033:0x7f95f738e969 [ 62.250792][ T6572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.250824][ T6572] RSP: 002b:00007f95f827e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.250841][ T6572] RAX: ffffffffffffffda RBX: 00007f95f75b5fa0 RCX: 00007f95f738e969 [ 62.250852][ T6572] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 62.250862][ T6572] RBP: 00007f95f827e090 R08: 0000000000000000 R09: 0000000000000000 [ 62.250872][ T6572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.250881][ T6572] R13: 0000000000000000 R14: 00007f95f75b5fa0 R15: 00007fffc9f17fc8 [ 62.250904][ T6572] [ 62.391930][ T40] audit: type=1400 audit(1747241000.858:301): avc: denied { read } for pid=6580 comm="syz.0.213" name="ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.408276][ T40] audit: type=1400 audit(1747241000.858:302): avc: denied { open } for pid=6580 comm="syz.0.213" path="/dev/ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.417991][ T40] audit: type=1400 audit(1747241000.858:303): avc: denied { ioctl } for pid=6580 comm="syz.0.213" path="/dev/ocfs2_control" dev="devtmpfs" ino=107 ioctlcmd=0xae41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 62.499270][ T6581] FAULT_INJECTION: forcing a failure. [ 62.499270][ T6581] name failslab, interval 1, probability 0, space 0, times 0 [ 62.504567][ T6581] CPU: 1 UID: 0 PID: 6581 Comm: syz.1.217 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 62.504590][ T6581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.504600][ T6581] Call Trace: [ 62.504606][ T6581] [ 62.504613][ T6581] dump_stack_lvl+0x16c/0x1f0 [ 62.504659][ T6581] should_fail_ex+0x512/0x640 [ 62.504686][ T6581] ? fs_reclaim_acquire+0xae/0x150 [ 62.504710][ T6581] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 62.504736][ T6581] should_failslab+0xc2/0x120 [ 62.504756][ T6581] __kmalloc_noprof+0xd2/0x510 [ 62.504778][ T6581] tomoyo_realpath_from_path+0xc2/0x6e0 [ 62.504805][ T6581] ? tomoyo_profile+0x47/0x60 [ 62.504829][ T6581] tomoyo_path_number_perm+0x245/0x580 [ 62.504851][ T6581] ? tomoyo_path_number_perm+0x237/0x580 [ 62.504875][ T6581] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 62.504901][ T6581] ? find_held_lock+0x2b/0x80 [ 62.504949][ T6581] ? find_held_lock+0x2b/0x80 [ 62.504969][ T6581] ? hook_file_ioctl_common+0x145/0x410 [ 62.504990][ T6581] ? __fget_files+0x20e/0x3c0 [ 62.505011][ T6581] security_file_ioctl+0x9b/0x240 [ 62.505036][ T6581] __x64_sys_ioctl+0xb7/0x200 [ 62.505088][ T6581] do_syscall_64+0xcd/0x260 [ 62.505120][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.505137][ T6581] RIP: 0033:0x7f68fa18e969 [ 62.505151][ T6581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.505167][ T6581] RSP: 002b:00007f68f7ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.505184][ T6581] RAX: ffffffffffffffda RBX: 00007f68fa3b5fa0 RCX: 00007f68fa18e969 [ 62.505195][ T6581] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 62.505205][ T6581] RBP: 00007f68f7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 62.505214][ T6581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.505223][ T6581] R13: 0000000000000000 R14: 00007f68fa3b5fa0 R15: 00007ffdef9cdff8 [ 62.505250][ T6581] [ 62.505257][ T6581] ERROR: Out of memory at tomoyo_realpath_from_path. [ 62.582468][ T40] audit: type=1400 audit(1747241001.048:304): avc: denied { ioctl } for pid=6595 comm="syz.3.222" path="socket:[11185]" dev="sockfs" ino=11185 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 62.819118][ T6603] FAULT_INJECTION: forcing a failure. [ 62.819118][ T6603] name failslab, interval 1, probability 0, space 0, times 0 [ 62.824661][ T6603] CPU: 3 UID: 0 PID: 6603 Comm: syz.3.225 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 62.824685][ T6603] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.824695][ T6603] Call Trace: [ 62.824701][ T6603] [ 62.824709][ T6603] dump_stack_lvl+0x16c/0x1f0 [ 62.824739][ T6603] should_fail_ex+0x512/0x640 [ 62.824764][ T6603] ? __kmalloc_noprof+0xbf/0x510 [ 62.824784][ T6603] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 62.824811][ T6603] should_failslab+0xc2/0x120 [ 62.824831][ T6603] __kmalloc_noprof+0xd2/0x510 [ 62.824866][ T6603] ? avc_has_perm_noaudit+0x149/0x3b0 [ 62.824889][ T6603] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 62.824922][ T6603] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 62.824956][ T6603] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 62.824990][ T6603] ? bpf_lsm_capable+0x9/0x10 [ 62.825008][ T6603] ? security_capable+0x7e/0x260 [ 62.825030][ T6603] ? ns_capable+0xd7/0x110 [ 62.825055][ T6603] genl_rcv_msg+0x55c/0x800 [ 62.825084][ T6603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 62.825108][ T6603] ? __pfx___dev_queue_xmit+0x10/0x10 [ 62.825135][ T6603] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 62.825160][ T6603] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 62.825186][ T6603] ? __pfx_nl80211_post_doit+0x10/0x10 [ 62.825213][ T6603] ? __lock_acquire+0xaa4/0x1ba0 [ 62.825245][ T6603] netlink_rcv_skb+0x16a/0x440 [ 62.825268][ T6603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 62.825296][ T6603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 62.825331][ T6603] ? __pfx_down_read+0x10/0x10 [ 62.825360][ T6603] ? netlink_deliver_tap+0x1ae/0xd30 [ 62.825384][ T6603] genl_rcv+0x28/0x40 [ 62.825407][ T6603] netlink_unicast+0x53d/0x7f0 [ 62.825433][ T6603] ? __pfx_netlink_unicast+0x10/0x10 [ 62.825462][ T6603] netlink_sendmsg+0x8d1/0xdd0 [ 62.825489][ T6603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.825521][ T6603] ____sys_sendmsg+0xa98/0xc70 [ 62.825547][ T6603] ? copy_msghdr_from_user+0x10a/0x160 [ 62.825567][ T6603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.825604][ T6603] ___sys_sendmsg+0x134/0x1d0 [ 62.825626][ T6603] ? __pfx____sys_sendmsg+0x10/0x10 [ 62.825677][ T6603] __sys_sendmsg+0x16d/0x220 [ 62.825697][ T6603] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.825725][ T6603] ? rcu_is_watching+0x12/0xc0 [ 62.825774][ T6603] do_syscall_64+0xcd/0x260 [ 62.825801][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.825820][ T6603] RIP: 0033:0x7f95f738e969 [ 62.825835][ T6603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.825852][ T6603] RSP: 002b:00007f95f827e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.825870][ T6603] RAX: ffffffffffffffda RBX: 00007f95f75b5fa0 RCX: 00007f95f738e969 [ 62.825882][ T6603] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 62.825893][ T6603] RBP: 00007f95f827e090 R08: 0000000000000000 R09: 0000000000000000 [ 62.825903][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.825914][ T6603] R13: 0000000000000000 R14: 00007f95f75b5fa0 R15: 00007fffc9f17fc8 [ 62.825943][ T6603] [ 62.960675][ C3] vkms_vblank_simulate: vblank timer overrun [ 63.128492][ T6608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.227'. [ 63.293786][ T6645] FAULT_INJECTION: forcing a failure. [ 63.293786][ T6645] name failslab, interval 1, probability 0, space 0, times 0 [ 63.300933][ T6645] CPU: 2 UID: 0 PID: 6645 Comm: syz.0.238 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 63.300958][ T6645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.300968][ T6645] Call Trace: [ 63.300975][ T6645] [ 63.300981][ T6645] dump_stack_lvl+0x16c/0x1f0 [ 63.301012][ T6645] should_fail_ex+0x512/0x640 [ 63.301037][ T6645] ? __kmalloc_noprof+0xbf/0x510 [ 63.301057][ T6645] ? nl80211_trigger_scan+0x4ee/0x2000 [ 63.301084][ T6645] should_failslab+0xc2/0x120 [ 63.301100][ T6645] __kmalloc_noprof+0xd2/0x510 [ 63.301138][ T6645] nl80211_trigger_scan+0x4ee/0x2000 [ 63.301174][ T6645] genl_family_rcv_msg_doit+0x209/0x2f0 [ 63.301198][ T6645] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 63.301253][ T6645] ? bpf_lsm_capable+0x9/0x10 [ 63.301290][ T6645] ? security_capable+0x7e/0x260 [ 63.301312][ T6645] ? ns_capable+0xd7/0x110 [ 63.301334][ T6645] genl_rcv_msg+0x55c/0x800 [ 63.301360][ T6645] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.301382][ T6645] ? __pfx___dev_queue_xmit+0x10/0x10 [ 63.301410][ T6645] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 63.301435][ T6645] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 63.301458][ T6645] ? __pfx_nl80211_post_doit+0x10/0x10 [ 63.301483][ T6645] ? __lock_acquire+0xaa4/0x1ba0 [ 63.301515][ T6645] netlink_rcv_skb+0x16a/0x440 [ 63.301555][ T6645] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.301581][ T6645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.301613][ T6645] ? __pfx_down_read+0x10/0x10 [ 63.301640][ T6645] ? netlink_deliver_tap+0x1ae/0xd30 [ 63.301663][ T6645] genl_rcv+0x28/0x40 [ 63.301684][ T6645] netlink_unicast+0x53d/0x7f0 [ 63.301708][ T6645] ? __pfx_netlink_unicast+0x10/0x10 [ 63.301760][ T6645] netlink_sendmsg+0x8d1/0xdd0 [ 63.301788][ T6645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.301821][ T6645] ____sys_sendmsg+0xa98/0xc70 [ 63.301847][ T6645] ? copy_msghdr_from_user+0x10a/0x160 [ 63.301867][ T6645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.301904][ T6645] ___sys_sendmsg+0x134/0x1d0 [ 63.301927][ T6645] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.301978][ T6645] __sys_sendmsg+0x16d/0x220 [ 63.302000][ T6645] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.302028][ T6645] ? rcu_is_watching+0x12/0xc0 [ 63.302058][ T6645] do_syscall_64+0xcd/0x260 [ 63.302088][ T6645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.302104][ T6645] RIP: 0033:0x7f7af578e969 [ 63.302117][ T6645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.302132][ T6645] RSP: 002b:00007f7af65c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.302149][ T6645] RAX: ffffffffffffffda RBX: 00007f7af59b5fa0 RCX: 00007f7af578e969 [ 63.302161][ T6645] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 63.302171][ T6645] RBP: 00007f7af65c5090 R08: 0000000000000000 R09: 0000000000000000 [ 63.302182][ T6645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.302193][ T6645] R13: 0000000000000000 R14: 00007f7af59b5fa0 R15: 00007ffced6500c8 [ 63.302218][ T6645] [ 63.314328][ T6640] FAULT_INJECTION: forcing a failure. [ 63.314328][ T6640] name failslab, interval 1, probability 0, space 0, times 0 [ 63.422040][ T6640] CPU: 0 UID: 0 PID: 6640 Comm: syz.1.236 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 63.422066][ T6640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.422077][ T6640] Call Trace: [ 63.422091][ T6640] [ 63.422098][ T6640] dump_stack_lvl+0x16c/0x1f0 [ 63.422142][ T6640] should_fail_ex+0x512/0x640 [ 63.422169][ T6640] ? fs_reclaim_acquire+0xae/0x150 [ 63.422194][ T6640] ? tomoyo_encode2+0x100/0x3e0 [ 63.422217][ T6640] should_failslab+0xc2/0x120 [ 63.422237][ T6640] __kmalloc_noprof+0xd2/0x510 [ 63.422261][ T6640] tomoyo_encode2+0x100/0x3e0 [ 63.422289][ T6640] tomoyo_encode+0x29/0x50 [ 63.422314][ T6640] tomoyo_realpath_from_path+0x18f/0x6e0 [ 63.422342][ T6640] ? tomoyo_profile+0x47/0x60 [ 63.422363][ T6640] tomoyo_path_number_perm+0x245/0x580 [ 63.422384][ T6640] ? tomoyo_path_number_perm+0x237/0x580 [ 63.422408][ T6640] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 63.422432][ T6640] ? find_held_lock+0x2b/0x80 [ 63.422476][ T6640] ? find_held_lock+0x2b/0x80 [ 63.422496][ T6640] ? hook_file_ioctl_common+0x145/0x410 [ 63.422520][ T6640] ? __fget_files+0x20e/0x3c0 [ 63.422541][ T6640] security_file_ioctl+0x9b/0x240 [ 63.422567][ T6640] __x64_sys_ioctl+0xb7/0x200 [ 63.422593][ T6640] do_syscall_64+0xcd/0x260 [ 63.422621][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.422639][ T6640] RIP: 0033:0x7f68fa18e969 [ 63.422653][ T6640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.422669][ T6640] RSP: 002b:00007f68f7ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.422687][ T6640] RAX: ffffffffffffffda RBX: 00007f68fa3b5fa0 RCX: 00007f68fa18e969 [ 63.422699][ T6640] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 63.422709][ T6640] RBP: 00007f68f7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 63.422719][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.422729][ T6640] R13: 0000000000000000 R14: 00007f68fa3b5fa0 R15: 00007ffdef9cdff8 [ 63.422753][ T6640] [ 63.423670][ T6640] ERROR: Out of memory at tomoyo_realpath_from_path. [ 63.555490][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 63.728788][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.733226][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.738401][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.743579][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.746625][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.751232][ T29] usb 7-1: config 0 descriptor?? [ 63.891626][ T6668] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 63.940425][ T6670] FAULT_INJECTION: forcing a failure. [ 63.940425][ T6670] name failslab, interval 1, probability 0, space 0, times 0 [ 63.944913][ T6670] CPU: 0 UID: 0 PID: 6670 Comm: syz.0.248 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 63.944934][ T6670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.944941][ T6670] Call Trace: [ 63.944946][ T6670] [ 63.944950][ T6670] dump_stack_lvl+0x16c/0x1f0 [ 63.944970][ T6670] should_fail_ex+0x512/0x640 [ 63.944986][ T6670] ? __kmalloc_noprof+0xbf/0x510 [ 63.944998][ T6670] ? nl80211_trigger_scan+0x4ee/0x2000 [ 63.945015][ T6670] should_failslab+0xc2/0x120 [ 63.945029][ T6670] __kmalloc_noprof+0xd2/0x510 [ 63.945042][ T6670] nl80211_trigger_scan+0x4ee/0x2000 [ 63.945066][ T6670] genl_family_rcv_msg_doit+0x209/0x2f0 [ 63.945085][ T6670] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 63.945106][ T6670] ? bpf_lsm_capable+0x9/0x10 [ 63.945116][ T6670] ? security_capable+0x7e/0x260 [ 63.945130][ T6670] ? ns_capable+0xd7/0x110 [ 63.945145][ T6670] genl_rcv_msg+0x55c/0x800 [ 63.945163][ T6670] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.945180][ T6670] ? __pfx___dev_queue_xmit+0x10/0x10 [ 63.945198][ T6670] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 63.945213][ T6670] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 63.945230][ T6670] ? __pfx_nl80211_post_doit+0x10/0x10 [ 63.945247][ T6670] ? __lock_acquire+0xaa4/0x1ba0 [ 63.945267][ T6670] netlink_rcv_skb+0x16a/0x440 [ 63.945282][ T6670] ? __pfx_genl_rcv_msg+0x10/0x10 [ 63.945298][ T6670] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 63.945319][ T6670] ? __pfx_down_read+0x10/0x10 [ 63.945352][ T6670] ? netlink_deliver_tap+0x1ae/0xd30 [ 63.945367][ T6670] genl_rcv+0x28/0x40 [ 63.945381][ T6670] netlink_unicast+0x53d/0x7f0 [ 63.945397][ T6670] ? __pfx_netlink_unicast+0x10/0x10 [ 63.945415][ T6670] netlink_sendmsg+0x8d1/0xdd0 [ 63.945432][ T6670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.945451][ T6670] ____sys_sendmsg+0xa98/0xc70 [ 63.945468][ T6670] ? copy_msghdr_from_user+0x10a/0x160 [ 63.945480][ T6670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.945502][ T6670] ___sys_sendmsg+0x134/0x1d0 [ 63.945516][ T6670] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.945545][ T6670] __sys_sendmsg+0x16d/0x220 [ 63.945557][ T6670] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.945579][ T6670] do_syscall_64+0xcd/0x260 [ 63.945597][ T6670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.945610][ T6670] RIP: 0033:0x7f7af578e969 [ 63.945620][ T6670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.945631][ T6670] RSP: 002b:00007f7af65c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.945641][ T6670] RAX: ffffffffffffffda RBX: 00007f7af59b5fa0 RCX: 00007f7af578e969 [ 63.945649][ T6670] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 63.945655][ T6670] RBP: 00007f7af65c5090 R08: 0000000000000000 R09: 0000000000000000 [ 63.945662][ T6670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.945668][ T6670] R13: 0000000000000000 R14: 00007f7af59b5fa0 R15: 00007ffced6500c8 [ 63.945682][ T6670] [ 64.161298][ T29] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 64.169148][ T29] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 64.522755][ T6687] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 64.771548][ T6692] FAULT_INJECTION: forcing a failure. [ 64.771548][ T6692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.777118][ T6692] CPU: 2 UID: 0 PID: 6692 Comm: syz.1.255 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 64.777141][ T6692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.777150][ T6692] Call Trace: [ 64.777156][ T6692] [ 64.777163][ T6692] dump_stack_lvl+0x16c/0x1f0 [ 64.777194][ T6692] should_fail_ex+0x512/0x640 [ 64.777223][ T6692] _copy_to_user+0x32/0xd0 [ 64.777255][ T6692] simple_read_from_buffer+0xcb/0x170 [ 64.777284][ T6692] proc_fail_nth_read+0x197/0x270 [ 64.777312][ T6692] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.777340][ T6692] ? rw_verify_area+0xcf/0x680 [ 64.777365][ T6692] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.777393][ T6692] vfs_read+0x1e1/0xc70 [ 64.777422][ T6692] ? __pfx___mutex_lock+0x10/0x10 [ 64.777447][ T6692] ? __pfx_vfs_read+0x10/0x10 [ 64.777481][ T6692] ? __fget_files+0x20e/0x3c0 [ 64.777506][ T6692] ksys_read+0x12a/0x240 [ 64.777532][ T6692] ? __pfx_ksys_read+0x10/0x10 [ 64.777566][ T6692] do_syscall_64+0xcd/0x260 [ 64.777594][ T6692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.777613][ T6692] RIP: 0033:0x7f68fa18d37c [ 64.777626][ T6692] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 64.777642][ T6692] RSP: 002b:00007f68f7ff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.777660][ T6692] RAX: ffffffffffffffda RBX: 00007f68fa3b5fa0 RCX: 00007f68fa18d37c [ 64.777672][ T6692] RDX: 000000000000000f RSI: 00007f68f7ff60a0 RDI: 0000000000000006 [ 64.777683][ T6692] RBP: 00007f68f7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 64.777693][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.777704][ T6692] R13: 0000000000000000 R14: 00007f68fa3b5fa0 R15: 00007ffdef9cdff8 [ 64.777752][ T6692] [ 64.805587][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.940555][ T6695] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 64.945211][ T6695] SELinux: failed to load policy [ 65.025578][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 65.041625][ T29] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 65.045779][ T29] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 65.049134][ T29] usb 5-1: Product: syz [ 65.050954][ T29] usb 5-1: Manufacturer: syz [ 65.052985][ T29] usb 5-1: SerialNumber: syz [ 65.058070][ T29] usb 5-1: config 0 descriptor?? [ 65.088346][ T6707] program syz.1.258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.267261][ T6690] net_ratelimit: 22 callbacks suppressed [ 65.267277][ T6690] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 65.423702][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'. [ 65.467636][ C0] plantronics 0003:047F:FFFF.0002: usb_submit_urb(ctrl) failed: -1 [ 65.520780][ T6725] Zero length message leads to an empty skb [ 65.787519][ T57] usb 5-1: USB disconnect, device number 2 [ 66.096583][ T6751] FAULT_INJECTION: forcing a failure. [ 66.096583][ T6751] name failslab, interval 1, probability 0, space 0, times 0 [ 66.100730][ T6751] CPU: 1 UID: 0 PID: 6751 Comm: syz.0.272 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 66.100746][ T6751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.100753][ T6751] Call Trace: [ 66.100761][ T6751] [ 66.100766][ T6751] dump_stack_lvl+0x16c/0x1f0 [ 66.100796][ T6751] should_fail_ex+0x512/0x640 [ 66.100817][ T6751] should_failslab+0xc2/0x120 [ 66.100830][ T6751] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 66.100841][ T6751] ? skb_clone+0x190/0x3f0 [ 66.100857][ T6751] skb_clone+0x190/0x3f0 [ 66.100870][ T6751] netlink_deliver_tap+0xabd/0xd30 [ 66.100886][ T6751] netlink_unicast+0x6b2/0x7f0 [ 66.100902][ T6751] ? __pfx_netlink_unicast+0x10/0x10 [ 66.100915][ T6751] ? genl_rcv_msg+0x4bb/0x800 [ 66.100934][ T6751] netlink_ack+0x696/0xb80 [ 66.100951][ T6751] netlink_rcv_skb+0x347/0x440 [ 66.100965][ T6751] ? __pfx_genl_rcv_msg+0x10/0x10 [ 66.100981][ T6751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 66.101001][ T6751] ? __pfx_down_read+0x10/0x10 [ 66.101021][ T6751] ? netlink_deliver_tap+0x1ae/0xd30 [ 66.101036][ T6751] genl_rcv+0x28/0x40 [ 66.101049][ T6751] netlink_unicast+0x53d/0x7f0 [ 66.101064][ T6751] ? __pfx_netlink_unicast+0x10/0x10 [ 66.101082][ T6751] netlink_sendmsg+0x8d1/0xdd0 [ 66.101097][ T6751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.101116][ T6751] ____sys_sendmsg+0xa98/0xc70 [ 66.101132][ T6751] ? copy_msghdr_from_user+0x10a/0x160 [ 66.101144][ T6751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.101166][ T6751] ___sys_sendmsg+0x134/0x1d0 [ 66.101178][ T6751] ? __pfx____sys_sendmsg+0x10/0x10 [ 66.101206][ T6751] __sys_sendmsg+0x16d/0x220 [ 66.101218][ T6751] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.101233][ T6751] ? rcu_is_watching+0x12/0xc0 [ 66.101251][ T6751] do_syscall_64+0xcd/0x260 [ 66.101272][ T6751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.101284][ T6751] RIP: 0033:0x7f7af578e969 [ 66.101293][ T6751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.101303][ T6751] RSP: 002b:00007f7af65c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.101315][ T6751] RAX: ffffffffffffffda RBX: 00007f7af59b5fa0 RCX: 00007f7af578e969 [ 66.101325][ T6751] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 66.101334][ T6751] RBP: 00007f7af65c5090 R08: 0000000000000000 R09: 0000000000000000 [ 66.101343][ T6751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.101352][ T6751] R13: 0000000000000000 R14: 00007f7af59b5fa0 R15: 00007ffced6500c8 [ 66.101375][ T6751] [ 66.205032][ T6753] ======================================================= [ 66.205032][ T6753] WARNING: The mand mount option has been deprecated and [ 66.205032][ T6753] and is ignored by this kernel. Remove the mand [ 66.205032][ T6753] option from the mount to silence this warning. [ 66.205032][ T6753] ======================================================= [ 66.240898][ T29] usb 7-1: USB disconnect, device number 2 [ 66.341099][ T6772] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 66.406867][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 66.436598][ T6782] input: syz1 as /devices/virtual/input/input5 [ 66.449424][ T6782] geneve2: entered promiscuous mode [ 66.451251][ T6782] geneve2: entered allmulticast mode [ 66.522620][ T6792] netlink: 96 bytes leftover after parsing attributes in process `syz.3.284'. [ 66.544209][ T6794] netlink: 40 bytes leftover after parsing attributes in process `syz.0.285'. [ 66.619489][ T6796] FAULT_INJECTION: forcing a failure. [ 66.619489][ T6796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.623834][ T6796] CPU: 0 UID: 0 PID: 6796 Comm: syz.2.286 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 66.623849][ T6796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.623855][ T6796] Call Trace: [ 66.623859][ T6796] [ 66.623864][ T6796] dump_stack_lvl+0x16c/0x1f0 [ 66.623891][ T6796] should_fail_ex+0x512/0x640 [ 66.623916][ T6796] _copy_from_user+0x2e/0xd0 [ 66.623943][ T6796] kstrtouint_from_user+0xd6/0x1d0 [ 66.623961][ T6796] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 66.623982][ T6796] ? __lock_acquire+0xaa4/0x1ba0 [ 66.624017][ T6796] proc_fail_nth_write+0x83/0x250 [ 66.624045][ T6796] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 66.624066][ T6796] vfs_write+0x25f/0x1180 [ 66.624083][ T6796] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 66.624101][ T6796] ? __pfx___mutex_lock+0x10/0x10 [ 66.624118][ T6796] ? __pfx_vfs_write+0x10/0x10 [ 66.624138][ T6796] ? __fget_files+0x20e/0x3c0 [ 66.624153][ T6796] ksys_write+0x12a/0x240 [ 66.624169][ T6796] ? __pfx_ksys_write+0x10/0x10 [ 66.624184][ T6796] ? rcu_is_watching+0x12/0xc0 [ 66.624202][ T6796] do_syscall_64+0xcd/0x260 [ 66.624219][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.624231][ T6796] RIP: 0033:0x7fd083d8d41f [ 66.624241][ T6796] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 66.624251][ T6796] RSP: 002b:00007fd084c87030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 66.624262][ T6796] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd083d8d41f [ 66.624268][ T6796] RDX: 0000000000000001 RSI: 00007fd084c870a0 RDI: 0000000000000005 [ 66.624275][ T6796] RBP: 00007fd084c87090 R08: 0000000000000000 R09: 0000000000000000 [ 66.624281][ T6796] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 66.624287][ T6796] R13: 0000000000000000 R14: 00007fd083fb5fa0 R15: 00007fff594be6a8 [ 66.624300][ T6796] [ 66.798459][ T6828] netlink: 'syz.1.294': attribute type 29 has an invalid length. [ 66.971835][ T6846] program syz.3.300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.975989][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 66.991500][ T6844] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 67.160918][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 67.160934][ T40] audit: type=1400 audit(1747241005.628:344): avc: denied { view } for pid=6862 comm="syz.2.308" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.161069][ T6865] netlink: 'syz.1.309': attribute type 32 has an invalid length. [ 67.170388][ T40] audit: type=1400 audit(1747241005.638:345): avc: denied { execute } for pid=6862 comm="syz.2.308" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=13818 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 67.176796][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 67.191739][ T6865] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 67.205477][ T6871] mmap: syz.0.310 (6871) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.210427][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 67.240629][ T40] audit: type=1400 audit(1747241005.708:346): avc: denied { getopt } for pid=6873 comm="syz.0.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.716009][ T6908] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 67.718408][ T6908] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 67.719327][ T40] audit: type=1400 audit(1747241006.188:347): avc: denied { write } for pid=6903 comm="syz.1.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.733562][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 67.738824][ T6913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.323'. [ 67.744297][ T40] audit: type=1400 audit(1747241006.208:348): avc: denied { map } for pid=6912 comm="syz.2.323" path="/dev/ocfs2_control" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.785559][ T40] audit: type=1400 audit(1747241006.248:349): avc: denied { ioctl } for pid=6914 comm="syz.2.324" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.794994][ T40] audit: type=1400 audit(1747241006.258:350): avc: denied { set_context_mgr } for pid=6914 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 67.803146][ T6857] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 67.805382][ T40] audit: type=1400 audit(1747241006.258:351): avc: denied { allowed } for pid=6914 comm="syz.2.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.846196][ T6915] binder: 6914:6915 ioctl 3b88 200000000200 returned -22 [ 67.854311][ T6915] binder: BINDER_SET_CONTEXT_MGR already set [ 67.857605][ T6915] binder: 6914:6915 ioctl 4018620d 2000000000c0 returned -16 [ 67.914675][ T40] audit: type=1400 audit(1747241006.378:352): avc: denied { lock } for pid=6919 comm="syz.2.326" path="socket:[15497]" dev="sockfs" ino=15497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.941066][ T6926] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 67.952719][ T6926] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 68.001195][ T40] audit: type=1400 audit(1747241006.468:353): avc: denied { setattr } for pid=6930 comm="syz.2.328" name="/" dev="9p" ino=35913816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.094660][ T6939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.329'. [ 68.310163][ T6958] syz_tun: entered allmulticast mode [ 68.315137][ T6958] syz_tun: left allmulticast mode [ 68.380822][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.340'. [ 68.560492][ T6983] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 68.592132][ T6984] bridge0: port 3(vlan0) entered blocking state [ 68.594964][ T6984] bridge0: port 3(vlan0) entered disabled state [ 68.598187][ T6984] vlan0: entered allmulticast mode [ 68.600451][ T6984] bond0: entered allmulticast mode [ 68.602609][ T6984] bond_slave_0: entered allmulticast mode [ 68.604444][ T6984] bond_slave_1: entered allmulticast mode [ 68.607706][ T6984] vlan0: entered promiscuous mode [ 68.609463][ T6984] bond0: entered promiscuous mode [ 68.611789][ T6984] bond_slave_0: entered promiscuous mode [ 68.614564][ T6984] bond_slave_1: entered promiscuous mode [ 68.756069][ T6993] ufs: Invalid option: "ЊÒI¸&Ҥ݌DÆè_Îø{Ù€ì“RØä7hîôi_–…Û‚²æ [ 68.756069][ T6993] ¢è‹ñ [ 68.756069][ T6993] ’õy•øh„ ÒJEFAm[ ¼baó^›Ð"“±…‹" or missing value [ 68.763444][ T6993] ufs: wrong mount options [ 68.773595][ T6992] ufs: Invalid option: "ЊÒI¸&Ҥ݌DÆè_Îø{Ù€ì“RØä7hîôi_–…Û‚²æ [ 68.773595][ T6992] ¢è‹ñ [ 68.773595][ T6992] ’õy•øh„ ÒJEFAm[ ¼baó^›Ð"“±…‹" or missing value [ 68.782332][ T6992] ufs: wrong mount options [ 69.051671][ T6999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.055409][ T29] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 69.133967][ T6999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.138429][ T5946] Bluetooth: hci2: command 0x0401 tx timeout [ 69.226006][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 69.232182][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.236502][ T29] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 69.237774][ T7004] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 69.240972][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.248774][ T29] usb 6-1: config 0 descriptor?? [ 69.270187][ T6999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.375815][ T6999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.469265][ T29] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 69.475070][ T7017] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 69.482390][ T6999] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.493013][ T6999] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.503201][ T6999] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.517463][ T6999] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.557914][ T7021] 9pnet_fd: Insufficient options for proto=fd [ 69.978949][ T7050] netlink: 'syz.0.367': attribute type 5 has an invalid length. [ 70.310041][ T7062] PM: Enabling pm_trace changes system date and time during resume. [ 70.310041][ T7062] PM: Correct system time has to be restored manually after resume. [ 70.680044][ T7083] tipc: Started in network mode [ 70.681590][ T7083] tipc: Node identity ac14140f, cluster identity 4711 [ 70.684355][ T7083] tipc: New replicast peer: 255.255.255.255 [ 70.686786][ T7083] tipc: Enabled bearer , priority 10 [ 70.795070][ T7104] 9p: Unknown Cache mode or invalid value fs [ 71.073790][ T7141] xt_time: unknown flags 0xc [ 71.140776][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.142992][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.729155][ T7186] __nla_validate_parse: 9 callbacks suppressed [ 71.729166][ T7186] netlink: 48 bytes leftover after parsing attributes in process `syz.2.412'. [ 71.734495][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 71.738406][ T7186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.412'. [ 71.741348][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 71.746504][ T7186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.412'. [ 71.806665][ T5975] tipc: Node number set to 2886997007 [ 71.814867][ T5975] usb 6-1: USB disconnect, device number 6 [ 71.911964][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 72.025627][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.195213][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 72.195224][ T40] audit: type=1400 audit(1747241010.658:383): avc: denied { create } for pid=7201 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 72.209096][ T10] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 72.211566][ T40] audit: type=1400 audit(1747241010.668:384): avc: denied { ioctl } for pid=7201 comm="syz.3.419" path="socket:[16109]" dev="sockfs" ino=16109 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.212632][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.227955][ T10] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 72.231564][ T10] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 72.232569][ T40] audit: type=1400 audit(1747241010.668:385): avc: denied { write } for pid=7201 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.234830][ T10] usb 7-1: Manufacturer: syz [ 72.243784][ T40] audit: type=1326 audit(1747241010.708:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.3.419" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f95f738e969 code=0x0 [ 72.248102][ T10] usb 7-1: config 0 descriptor?? [ 72.290278][ T7207] netlink: 104 bytes leftover after parsing attributes in process `syz.1.421'. [ 72.315490][ T10] rc_core: IR keymap rc-hauppauge not found [ 72.318361][ T10] Registered IR keymap rc-empty [ 72.322431][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 72.328608][ T7210] KVM: debugfs: duplicate directory 7210-4 [ 72.342370][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input7 [ 72.470563][ T40] audit: type=1400 audit(1747241010.938:387): avc: denied { name_connect } for pid=7212 comm="syz.1.423" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 72.481472][ T40] audit: type=1400 audit(1747241010.938:388): avc: denied { listen } for pid=7212 comm="syz.1.423" lport=51556 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.494307][ T5975] usb 7-1: USB disconnect, device number 3 [ 72.510120][ T40] audit: type=1400 audit(1747241010.978:389): avc: denied { accept } for pid=7212 comm="syz.1.423" lport=51556 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.520330][ T40] audit: type=1400 audit(1747241010.978:390): avc: denied { getopt } for pid=7212 comm="syz.1.423" lport=51556 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 72.791008][ T40] audit: type=1400 audit(1747241011.258:391): avc: denied { write } for pid=7229 comm="syz.0.427" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 72.803678][ T40] audit: type=1400 audit(1747241011.268:392): avc: denied { read } for pid=7229 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.055644][ T7256] autofs: Unknown parameter './file1' [ 73.071130][ T7260] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 73.074053][ T7260] rdma_op ffff88805168d9f0 conn xmit_rdma 0000000000000000 [ 73.077571][ T7260] fuse: Bad value for 'fd' [ 73.098062][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.433'. [ 73.104582][ T7258] netlink: 104 bytes leftover after parsing attributes in process `syz.2.435'. [ 73.160414][ T7268] netlink: 'syz.1.438': attribute type 15 has an invalid length. [ 73.486376][ T7303] fuse: blksize only supported for fuseblk [ 73.523339][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.451'. [ 73.531383][ T7308] geneve2: entered promiscuous mode [ 73.533214][ T7308] geneve2: entered allmulticast mode [ 73.764710][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.771285][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.081059][ T7355] tmpfs: User quota block hardlimit too large. [ 74.197532][ T7374] xfrm1: entered promiscuous mode [ 74.199594][ T7374] xfrm1: entered allmulticast mode [ 74.264513][ T7381] program syz.3.474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.670828][ T7403] cgroup: noprefix used incorrectly [ 74.799859][ T7421] 9pnet: Could not find request transport: unix° [ 74.809350][ T7420] 9pnet: Could not find request transport: unix° [ 74.925453][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.069816][ T7445] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 75.073245][ T7445] SELinux: failed to load policy [ 75.087291][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.091369][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 75.100747][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.103521][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.108201][ T7405] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.113335][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 75.318267][ T9] usb 5-1: USB disconnect, device number 3 [ 75.328886][ T7473] capability: warning: `syz.2.503' uses 32-bit capabilities (legacy support in use) [ 75.494380][ T7491] sp0: Synchronizing with TNC [ 75.508697][ T7492] [U] è [ 75.649969][ T7499] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 75.653279][ T7499] netlink: 'syz.3.507': attribute type 2 has an invalid length. [ 75.657871][ T7499] program syz.3.507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.702516][ T7501] team0: No ports can be present during mode change [ 75.774473][ T7501] team0 (unregistering): Port device team_slave_0 removed [ 75.785897][ T7501] team0 (unregistering): Port device team_slave_1 removed [ 75.995984][ T7516] warning: `syz.0.513' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.077461][ T7521] netdevsim netdevsim3: Direct firmware load for . [ 76.077461][ T7521] failed with error -2 [ 76.083988][ T7521] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 76.083988][ T7521] [ 76.313385][ T7549] binder: BINDER_SET_CONTEXT_MGR already set [ 76.316446][ T7549] binder: 7547:7549 ioctl 4018620d 2000000000c0 returned -16 [ 76.403520][ T7565] binder_alloc: 7564: binder_alloc_buf size 20528 failed, no address space [ 76.427498][ T7565] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 76.480312][ T7561] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.487858][ T7561] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 76.504396][ T7561] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.509732][ T7561] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 76.570326][ T7561] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.573393][ T7561] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 76.586130][ T7561] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.587997][ T7561] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 76.736271][ T7588] __nla_validate_parse: 15 callbacks suppressed [ 76.736283][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'. [ 76.797031][ T7588] vcan0: entered promiscuous mode [ 76.797070][ C0] vcan0: j1939_session_tx_dat: 0xffff888042689400: queue data error: -100 [ 76.798710][ T7588] vcan0: entered allmulticast mode [ 76.814404][ T7592] loop7: detected capacity change from 0 to 7 [ 77.109461][ T7611] tmpfs: Bad value for 'mpol' [ 77.214563][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.3.540'. [ 77.222160][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.540'. [ 77.232384][ T7616] netlink: 'syz.3.540': attribute type 2 has an invalid length. [ 77.341090][ T7627] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8212 sclass=netlink_xfrm_socket pid=7627 comm=syz.1.542 [ 77.368951][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 77.368969][ T40] audit: type=1400 audit(1747241015.838:455): avc: denied { bind } for pid=7629 comm="syz.3.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.371045][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.414851][ T40] audit: type=1400 audit(1747241015.878:456): avc: denied { execmem } for pid=7632 comm="syz.1.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 77.468508][ T7635] fuse: Bad value for 'user_id' [ 77.470736][ T7635] fuse: Bad value for 'user_id' [ 77.473758][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.545'. [ 77.586628][ T40] audit: type=1400 audit(1747241016.048:457): avc: denied { map } for pid=7640 comm="syz.3.547" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.624589][ T40] audit: type=1326 audit(1747241016.078:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7644 comm="syz.0.548" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7af578e969 code=0x0 [ 77.713435][ T7653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'. [ 77.785569][ T29] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 77.798600][ T40] audit: type=1400 audit(1747241016.268:459): avc: denied { create } for pid=7650 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.917675][ T29] usb 6-1: device descriptor read/64, error -71 [ 78.107645][ T40] audit: type=1400 audit(1747241016.578:460): avc: denied { create } for pid=7664 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.114177][ T40] audit: type=1400 audit(1747241016.578:461): avc: denied { getopt } for pid=7664 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.160345][ T40] audit: type=1400 audit(1747241016.628:462): avc: denied { read write } for pid=7668 comm="syz.3.554" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.168366][ T29] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 78.170914][ T40] audit: type=1400 audit(1747241016.628:463): avc: denied { open } for pid=7668 comm="syz.3.554" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.181254][ T40] audit: type=1400 audit(1747241016.628:464): avc: denied { map } for pid=7668 comm="syz.3.554" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.325438][ T29] usb 6-1: device descriptor read/64, error -71 [ 78.437242][ T29] usb usb6-port1: attempt power cycle [ 78.512173][ T7686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.560'. [ 78.549361][ T7698] SELinux: Context system_u:object_r:apm_bios_t:s0 is not valid (left unmapped). [ 78.606612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.624452][ T7705] netlink: 92 bytes leftover after parsing attributes in process `syz.3.564'. [ 78.796256][ T29] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 78.817192][ T29] usb 6-1: device descriptor read/8, error -71 [ 78.864707][ T7719] bridge_slave_0: left allmulticast mode [ 78.867483][ T7719] bridge_slave_0: left promiscuous mode [ 78.869705][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.876212][ T7719] bridge_slave_1: left promiscuous mode [ 78.878250][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.893334][ T7719] bond0: (slave bond_slave_0): Releasing backup interface [ 78.907387][ T7719] bond0: (slave bond_slave_1): Releasing backup interface [ 78.921262][ T7719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.924352][ T7719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.932700][ T7719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.940476][ T7719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.065679][ T29] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 79.088698][ T29] usb 6-1: device descriptor read/8, error -71 [ 79.092424][ T7724] netlink: 16 bytes leftover after parsing attributes in process `syz.3.570'. [ 79.195786][ T29] usb usb6-port1: unable to enumerate USB device [ 80.507504][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.576'. [ 80.534337][ T7740] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.571180][ T7743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.577'. [ 81.388173][ T24] cfg80211: failed to load regulatory.db [ 81.520798][ T5975] IPVS: starting estimator thread 0... [ 81.605464][ T7770] IPVS: using max 43 ests per chain, 103200 per kthread [ 81.690247][ T7780] sch_fq: defrate 0 ignored. [ 81.904757][ T7802] netlink: 'syz.1.593': attribute type 4 has an invalid length. [ 81.908484][ T7802] __nla_validate_parse: 2 callbacks suppressed [ 81.908492][ T7802] netlink: 152 bytes leftover after parsing attributes in process `syz.1.593'. [ 81.924909][ T7802] : renamed from bond0 (while UP) [ 81.941919][ T7814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.597'. [ 82.149414][ T7819] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 82.153168][ T7819] overlayfs: missing 'lowerdir' [ 82.532908][ T7844] overlayfs: conflicting options: userxattr,redirect_dir=on [ 82.590663][ T7848] netlink: 'syz.0.609': attribute type 7 has an invalid length. [ 82.698479][ T7846] netlink: 168 bytes leftover after parsing attributes in process `syz.3.608'. [ 82.770003][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 82.770020][ T40] audit: type=1400 audit(1747241021.238:474): avc: denied { mount } for pid=7858 comm="syz.3.613" name="/" dev="ramfs" ino=20192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 82.783303][ T40] audit: type=1400 audit(1747241021.238:475): avc: denied { mounton } for pid=7858 comm="syz.3.613" path="/bus" dev="ramfs" ino=20195 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 82.879790][ T5975] IPVS: starting estimator thread 0... [ 82.964875][ T40] audit: type=1400 audit(1747241021.428:476): avc: denied { append } for pid=7897 comm="syz.0.625" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.972636][ T7883] IPVS: using max 43 ests per chain, 103200 per kthread [ 82.993845][ T7898] loop6: detected capacity change from 0 to 7 [ 83.015546][ T7898] Dev loop6: unable to read RDB block 7 [ 83.017511][ T7898] loop6: unable to read partition table [ 83.019887][ T7898] loop6: partition table beyond EOD, truncated [ 83.022444][ T7898] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 83.038041][ T40] audit: type=1400 audit(1747241021.508:477): avc: denied { firmware_load } for pid=7903 comm="syz.2.626" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 83.074477][ T7904] syz.2.626 (7904) used greatest stack depth: 19912 bytes left [ 83.107319][ T7915] bridge1: entered promiscuous mode [ 83.308667][ T40] audit: type=1400 audit(1747241021.769:478): avc: denied { checkpoint_restore } for pid=7936 comm="syz.0.637" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.316137][ T40] audit: type=1400 audit(1747241021.769:479): avc: denied { ioctl } for pid=7936 comm="syz.0.637" path="socket:[20267]" dev="sockfs" ino=20267 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 83.361069][ T7940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7940 comm=syz.2.638 [ 83.412940][ T40] audit: type=1400 audit(1747241021.872:480): avc: denied { read } for pid=7943 comm="syz.0.640" path="socket:[19102]" dev="sockfs" ino=19102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.502765][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 83.544177][ T7958] netlink: 'syz.2.645': attribute type 10 has an invalid length. [ 83.547207][ T40] audit: type=1400 audit(1747241021.993:481): avc: denied { bind } for pid=7957 comm="syz.2.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.611913][ T40] audit: type=1400 audit(1747241022.049:482): avc: denied { mount } for pid=7963 comm="syz.2.648" name="/" dev="pstore" ino=5290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 83.620425][ T40] audit: type=1400 audit(1747241022.059:483): avc: denied { remount } for pid=7963 comm="syz.2.648" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 83.887158][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 83.920003][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.145089][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 84.418911][ T8046] overlayfs: missing 'lowerdir' [ 84.493071][ T8056] netlink: 156 bytes leftover after parsing attributes in process `syz.1.680'. [ 84.685302][ T8063] SELinux: ebitmap start bit (8192) is beyond the end of the bitmap (320) [ 84.687976][ T8063] SELinux: failed to load policy [ 84.727432][ T8063] netlink: 830 bytes leftover after parsing attributes in process `syz.1.682'. [ 84.999775][ T8069] xt_hashlimit: max too large, truncated to 1048576 [ 85.003333][ T8069] xt_bpf: check failed: parse error [ 85.310445][ T8087] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 85.486045][ T5976] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 85.576529][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.580784][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.594760][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.599687][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.602592][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.612734][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.620157][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.623960][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.627193][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.631040][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.648556][ T5976] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 85.651413][ T5976] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.654797][ T5976] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 85.664868][ T5976] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.671022][ T5976] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 85.675295][ T5976] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 85.677857][ T5976] usb 7-1: Product: syz [ 85.684729][ T5976] usb 7-1: Manufacturer: syz [ 85.701347][ T5976] cdc_wdm 7-1:1.0: skipping garbage [ 85.703706][ T5976] cdc_wdm 7-1:1.0: skipping garbage [ 85.712034][ T5976] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 85.714598][ T5976] cdc_wdm 7-1:1.0: Unknown control protocol [ 85.899612][ T8114] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 85.903441][ T8114] UDF-fs: Scanning with blocksize 2048 failed [ 85.907461][ T8114] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 85.910107][ T8114] UDF-fs: Scanning with blocksize 4096 failed [ 85.922448][ T5976] usb 7-1: USB disconnect, device number 4 [ 85.922651][ T8096] chnl_net:caif_netlink_parms(): no params data found [ 86.093979][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.097237][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.100252][ T8096] bridge_slave_0: entered allmulticast mode [ 86.104183][ T8096] bridge_slave_0: entered promiscuous mode [ 86.112709][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.115885][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.119425][ T8096] bridge_slave_1: entered allmulticast mode [ 86.123966][ T8096] bridge_slave_1: entered promiscuous mode [ 86.185860][ T8096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.195152][ T8096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.270249][ T8096] team0: Port device team_slave_0 added [ 86.275975][ T8096] team0: Port device team_slave_1 added [ 86.329549][ T8096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.332829][ T8096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.342371][ T8096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.348743][ T8096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.351719][ T8096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.361600][ T8096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.394748][ T5943] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 86.432078][ T8096] hsr_slave_0: entered promiscuous mode [ 86.435204][ T8096] hsr_slave_1: entered promiscuous mode [ 86.438916][ T8096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.442074][ T8096] Cannot create hsr debugfs directory [ 86.544904][ T5943] usb 7-1: device descriptor read/64, error -71 [ 86.643683][ T8096] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.656804][ T8096] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.664314][ T8096] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.670659][ T8096] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.722604][ T8096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.749769][ T8096] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.778235][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.781443][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.787412][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.790671][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.821894][ T5943] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 86.972491][ T5943] usb 7-1: device descriptor read/64, error -71 [ 86.975466][ T8096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.104698][ T5943] usb usb7-port1: attempt power cycle [ 87.203637][ T8212] netlink: 'syz.1.721': attribute type 10 has an invalid length. [ 87.215320][ T8212] batman_adv: batadv0: Adding interface: team0 [ 87.220097][ T8212] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.233290][ T8212] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 87.241140][ T8212] netlink: 'syz.1.721': attribute type 10 has an invalid length. [ 87.249341][ T8212] netlink: 2 bytes leftover after parsing attributes in process `syz.1.721'. [ 87.259871][ T8096] veth0_vlan: entered promiscuous mode [ 87.262481][ T8212] team0: entered promiscuous mode [ 87.264233][ T8212] team_slave_0: entered promiscuous mode [ 87.266544][ T8212] team_slave_1: entered promiscuous mode [ 87.268905][ T8212] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.271310][ T8212] batman_adv: batadv0: Interface activated: team0 [ 87.273634][ T8212] batman_adv: batadv0: Interface deactivated: team0 [ 87.275902][ T8212] batman_adv: batadv0: Removing interface: team0 [ 87.278652][ T8212] bridge0: port 3(team0) entered blocking state [ 87.280734][ T8212] bridge0: port 3(team0) entered disabled state [ 87.284058][ T8212] team0: entered allmulticast mode [ 87.285761][ T8212] team_slave_0: entered allmulticast mode [ 87.287503][ T8212] team_slave_1: entered allmulticast mode [ 87.295197][ T8096] veth1_vlan: entered promiscuous mode [ 87.330070][ T8096] veth0_macvtap: entered promiscuous mode [ 87.347825][ T8096] veth1_macvtap: entered promiscuous mode [ 87.362504][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.366510][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.375743][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.379749][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.382940][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.386399][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.390828][ T8096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.400633][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.403438][ T8224] random: crng reseeded on system resumption [ 87.404186][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.404200][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.415920][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.419975][ T8096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.419996][ T8096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.422362][ T8096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.433355][ T8096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.437096][ T8096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.440751][ T8096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.443712][ T8096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.486782][ T5943] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 87.526167][ T5943] usb 7-1: device descriptor read/8, error -71 [ 87.549804][ T8224] Restarting kernel threads ... done. [ 87.568455][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.578326][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.603444][ T1241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.607429][ T1241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.623479][ T1146] Bluetooth: hci4: Frame reassembly failed (-84) [ 87.732329][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.806360][ T5943] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 87.838072][ T5946] Bluetooth: hci3: command tx timeout [ 87.839622][ T5943] usb 7-1: device descriptor read/8, error -71 [ 87.878526][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.943114][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.963347][ T8263] netlink: 'syz.4.733': attribute type 1 has an invalid length. [ 87.965950][ T8263] netlink: 224 bytes leftover after parsing attributes in process `syz.4.733'. [ 87.966814][ T5943] usb usb7-port1: unable to enumerate USB device [ 88.034266][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.162765][ T46] bridge_slave_1: left allmulticast mode [ 88.164804][ T46] bridge_slave_1: left promiscuous mode [ 88.168312][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.176049][ T46] bridge_slave_0: left allmulticast mode [ 88.177952][ T46] bridge_slave_0: left promiscuous mode [ 88.179852][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.457759][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.462843][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.472079][ T46] bond0 (unregistering): Released all slaves [ 88.616818][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 88.616837][ T40] audit: type=1400 audit(1747241026.736:510): avc: denied { read } for pid=8277 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 88.639950][ T40] audit: type=1400 audit(1747241026.745:511): avc: denied { bind } for pid=8277 comm="syz.2.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 88.726163][ T40] audit: type=1400 audit(1747241026.839:512): avc: denied { ioctl } for pid=8290 comm="syz.2.739" path="socket:[22358]" dev="sockfs" ino=22358 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 88.756125][ T8291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.739'. [ 88.889274][ T46] hsr_slave_0: left promiscuous mode [ 88.892203][ T46] hsr_slave_1: left promiscuous mode [ 88.894418][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.899105][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.902583][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.905105][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.927040][ T8307] netlink: 'syz.4.742': attribute type 1 has an invalid length. [ 88.940454][ T46] veth1_macvtap: left promiscuous mode [ 88.942432][ T46] veth0_macvtap: left promiscuous mode [ 88.944156][ T46] veth1_vlan: left promiscuous mode [ 88.945907][ T46] veth0_vlan: left promiscuous mode [ 89.203026][ T8317] netlink: 'syz.2.743': attribute type 11 has an invalid length. [ 89.205949][ T8317] netlink: 'syz.2.743': attribute type 11 has an invalid length. [ 89.208759][ T8317] netlink: 224 bytes leftover after parsing attributes in process `syz.2.743'. [ 89.540270][ T46] team0 (unregistering): Port device team_slave_1 removed [ 89.602532][ T46] team0 (unregistering): Port device team_slave_0 removed [ 89.808466][ T5940] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 89.808824][ T5946] Bluetooth: hci4: command 0xfc11 tx timeout [ 90.061621][ T5946] Bluetooth: hci3: command tx timeout [ 90.205762][ T8234] sp0: Synchronizing with TNC [ 90.393978][ T8335] netlink: 32 bytes leftover after parsing attributes in process `syz.4.750'. [ 90.414064][ T40] audit: type=1804 audit(1747241028.410:513): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.750" name="/newroot/14/file0" dev="tmpfs" ino=92 res=1 errno=0 [ 90.585891][ T46] IPVS: stop unused estimator thread 0... [ 90.611640][ T8353] use of bytesused == 0 is deprecated and will be removed in the future, [ 90.614666][ T8353] use the actual size instead. [ 90.661554][ T8359] netlink: 156 bytes leftover after parsing attributes in process `syz.4.756'. [ 90.693448][ T40] audit: type=1400 audit(1747241028.681:514): avc: denied { append } for pid=8360 comm="syz.4.757" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.694309][ T8361] program syz.4.757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.772515][ T40] audit: type=1400 audit(1747241028.756:515): avc: denied { setopt } for pid=8369 comm="syz.2.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.830622][ T40] audit: type=1400 audit(1747241028.803:516): avc: denied { mount } for pid=8374 comm="syz.2.760" name="/" dev="9p" ino=35913816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 90.938841][ T40] audit: type=1400 audit(1747241028.915:517): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 91.047924][ T40] audit: type=1400 audit(1747241029.009:518): avc: denied { create } for pid=8386 comm="syz.2.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.056328][ T40] audit: type=1400 audit(1747241029.018:519): avc: denied { ioctl } for pid=8386 comm="syz.2.761" path="socket:[25094]" dev="sockfs" ino=25094 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 91.066706][ T8387] syz.2.761: attempt to access beyond end of device [ 91.066706][ T8387] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 91.071253][ T8387] exFAT-fs (nbd2): unable to read boot sector [ 91.073146][ T8387] exFAT-fs (nbd2): failed to read boot sector [ 91.075065][ T8387] exFAT-fs (nbd2): failed to recognize exfat type [ 91.759179][ T8445] tipc: Enabling of bearer rejected, failed to enable media [ 91.761605][ T1468] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 91.788660][ T8447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.773'. [ 91.932623][ T1468] usb 7-1: Using ep0 maxpacket: 8 [ 91.936471][ T1468] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 91.939094][ T1468] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.942404][ T1468] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.946372][ T1468] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.950269][ T1468] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.954950][ T1468] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.958199][ T1468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.984808][ T8451] netlink: 52 bytes leftover after parsing attributes in process `syz.1.775'. [ 92.177426][ T1468] usb 7-1: GET_CAPABILITIES returned 0 [ 92.179504][ T1468] usbtmc 7-1:16.0: can't read capabilities [ 92.285399][ T5946] Bluetooth: hci3: command tx timeout [ 92.407746][ T8421] binder_alloc: 8420: pid 8420 spamming oneway? 1 buffers allocated for a total size of 4096 [ 92.483567][ T29] usb 7-1: USB disconnect, device number 9 [ 92.839522][ T8461] syz.1.778 (8461): drop_caches: 2 [ 92.842438][ T8461] syz.1.778 (8461): drop_caches: 2 [ 93.137025][ T8509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.253318][ T8520] netlink: 'syz.1.793': attribute type 39 has an invalid length. [ 93.336846][ T8524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.420081][ T8538] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 93.423856][ T8534] netlink: 'syz.3.797': attribute type 10 has an invalid length. [ 93.428889][ T8534] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 93.636589][ T8561] 9pnet_fd: Insufficient options for proto=fd [ 93.674532][ T8564] binder: 8555:8564 ioctl c018620c 200000000000 returned -22 [ 93.692956][ T8563] netfs: Couldn't get user pages (rc=-14) [ 93.742188][ T8563] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 93.757109][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 93.762867][ T8563] bond1: entered allmulticast mode [ 93.769245][ T8563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.785520][ T8567] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 93.866625][ T8574] netlink: 'syz.1.808': attribute type 2 has an invalid length. [ 93.928795][ T8579] openvswitch: netlink: Key type 179 is out of range max 32 [ 93.941891][ T8579] netlink: 'syz.1.811': attribute type 4 has an invalid length. [ 93.959585][ T8579] netlink: 'syz.1.811': attribute type 4 has an invalid length. [ 94.014324][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 94.014340][ T40] audit: type=1400 audit(1747241031.778:539): avc: denied { create } for pid=8582 comm="syz.4.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 94.042261][ T40] audit: type=1400 audit(1747241031.815:540): avc: denied { getopt } for pid=8582 comm="syz.4.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 94.089850][ T8592] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 94.092758][ T8591] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 94.092813][ T8591] PKCS7: Only support pkcs7_signedData type [ 94.100947][ T8592] PKCS7: Only support pkcs7_signedData type [ 94.113952][ T8591] IPVS: set_ctl: invalid protocol: 48272 0.0.0.0:0 [ 94.186708][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 94.209288][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'. [ 94.342073][ T8621] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 94.344525][ T8621] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 94.412690][ T5974] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 94.497000][ T40] audit: type=1400 audit(1747241032.236:541): avc: denied { getopt } for pid=8630 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 94.506397][ T40] audit: type=1400 audit(1747241032.236:542): avc: denied { bind } for pid=8630 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.516317][ T5946] Bluetooth: hci3: command tx timeout [ 94.573531][ T8636] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 94.583405][ T40] audit: type=1400 audit(1747241032.311:543): avc: denied { create } for pid=8637 comm="syz.3.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.589729][ T5974] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.592715][ T40] audit: type=1400 audit(1747241032.320:544): avc: denied { ioctl } for pid=8637 comm="syz.3.831" path="socket:[24189]" dev="sockfs" ino=24189 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 94.600036][ T5974] usb 7-1: config 0 has no interfaces? [ 94.608470][ T5974] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 94.612988][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.617963][ T5974] usb 7-1: config 0 descriptor?? [ 94.645658][ T40] audit: type=1400 audit(1747241032.376:545): avc: denied { read } for pid=8639 comm="syz.4.833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.715079][ T8643] netfs: Couldn't get user pages (rc=-14) [ 94.717505][ T8643] netfs: Zero-sized read [R=b] [ 94.844544][ T5974] usb 7-1: USB disconnect, device number 10 [ 94.911315][ T8650] block nbd1: not configured, cannot reconfigure [ 95.109770][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'. [ 95.153412][ T8664] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 95.530284][ T40] audit: type=1400 audit(1747241033.199:546): avc: denied { connect } for pid=8687 comm="syz.1.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.537485][ T8688] IPv6: NLM_F_CREATE should be specified when creating new route [ 95.593558][ T40] audit: type=1400 audit(1747241033.265:547): avc: denied { mount } for pid=8692 comm="syz.4.849" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 95.603786][ T40] audit: type=1400 audit(1747241033.274:548): avc: denied { unmount } for pid=8692 comm="syz.4.849" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 95.615352][ T8693] xt_TPROXY: Can be used only with -p tcp or -p udp [ 95.700528][ T8705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.761786][ T8707] veth1_macvtap: left promiscuous mode [ 95.764045][ T8707] macsec0: entered promiscuous mode [ 95.778528][ T8707] veth1_macvtap: entered promiscuous mode [ 95.783439][ T8707] macsec0: left promiscuous mode [ 95.794727][ T8712] netlink: 'syz.1.856': attribute type 3 has an invalid length. [ 95.798100][ T8712] netlink: 'syz.1.856': attribute type 1 has an invalid length. [ 95.841912][ T8709] netlink: 132 bytes leftover after parsing attributes in process `syz.3.855'. [ 95.843169][ T8716] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.857'. [ 95.848855][ T8709] netlink: 68 bytes leftover after parsing attributes in process `syz.3.855'. [ 96.049356][ T8728] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 96.054853][ T8728] overlayfs: missing 'lowerdir' [ 96.110144][ T8733] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 96.235957][ T5975] IPVS: starting estimator thread 0... [ 96.337601][ T8744] IPVS: using max 45 ests per chain, 108000 per kthread [ 96.384198][ T8749] netdevsim netdevsim4: Direct firmware load for . [ 96.384198][ T8749] failed with error -2 [ 96.390550][ T8749] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 96.390550][ T8749] [ 96.589200][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 96.593013][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 96.597000][ T8763] netlink: 'syz.2.871': attribute type 13 has an invalid length. [ 96.655347][ T8767] tc_dump_action: action bad kind [ 96.759012][ T8770] program syz.2.873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.815463][ T8726] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 96.817511][ T8726] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 97.044026][ T8776] netlink: 92 bytes leftover after parsing attributes in process `syz.1.877'. [ 97.137603][ T8789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.193474][ T8794] netlink: 'syz.3.883': attribute type 1 has an invalid length. [ 97.379736][ T8810] xt_nat: multiple ranges no longer supported [ 97.429778][ T8815] binder: 8814:8815 ioctl 4018620d 0 returned -22 [ 97.439233][ T8815] binder: 8814:8815 ioctl c018937d 200000000180 returned -22 [ 97.441911][ T8817] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 97.456067][ T8817] Mount JFS Failure: -22 [ 97.694741][ T5976] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 97.857084][ T5976] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.861329][ T5976] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.864825][ T5976] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.868590][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.874606][ T8815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 97.880788][ T5976] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.930216][ T1468] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 98.090272][ T1468] usb 7-1: Using ep0 maxpacket: 8 [ 98.094137][ T1468] usb 7-1: config index 0 descriptor too short (expected 30994, got 18) [ 98.101266][ T1468] usb 7-1: config 48 has too many interfaces: 122, using maximum allowed: 32 [ 98.105046][ T1468] usb 7-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 98.108369][ T1468] usb 7-1: config 48 has 0 interfaces, different from the descriptor's value: 122 [ 98.111480][ T1468] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 98.114423][ T1468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.137621][ T1468] usb 6-1: USB disconnect, device number 11 [ 98.553891][ T8828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.556977][ T8828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.561603][ T8828] lo: entered allmulticast mode [ 98.567497][ T1468] usb 7-1: USB disconnect, device number 11 [ 98.712566][ T8854] KVM: debugfs: duplicate directory 8854-4 [ 98.943529][ T8858] input: syz1 as /devices/virtual/input/input10 [ 98.960451][ T8857] binder: Bad value for 'max' [ 99.159055][ T8874] __nla_validate_parse: 3 callbacks suppressed [ 99.159072][ T8874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.912'. [ 99.163350][ T8875] ufs: Invalid option: "¨ŒLV»JAìP<˜Ú" or missing value [ 99.167405][ T8874] veth1_vlan: entered allmulticast mode [ 99.169334][ T8875] ufs: wrong mount options [ 99.211324][ T8879] tmpfs: Bad value for 'mpol' [ 99.374161][ T8896] program syz.3.919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.378611][ T8903] netlink: 'syz.1.921': attribute type 1 has an invalid length. [ 99.523222][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 99.523240][ T40] audit: type=1400 audit(1747241036.941:561): avc: denied { map } for pid=8917 comm="syz.2.924" path="/dev/bsg" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 99.535416][ T40] audit: type=1400 audit(1747241036.941:562): avc: denied { execute } for pid=8917 comm="syz.2.924" path="/dev/bsg" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 99.545207][ T40] audit: type=1400 audit(1747241036.950:563): avc: denied { read } for pid=8917 comm="syz.2.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.705326][ T8932] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 99.713313][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.717768][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.720309][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.722290][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.724723][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.728946][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.731445][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.733457][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.735923][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.739642][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.742046][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.743831][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.746081][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.748381][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.750742][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.751285][ T8936] batadv_slave_1: entered promiscuous mode [ 99.752611][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.752661][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.752677][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.752717][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.756861][ T8936] netlink: 'syz.1.929': attribute type 39 has an invalid length. [ 99.757349][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.768906][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.770880][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.773770][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.776233][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.779515][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.781822][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.784602][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.787154][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.791045][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.793595][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.796784][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.799311][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.802619][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.805237][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.808438][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.811114][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.814371][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.816949][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.821998][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.824937][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.828113][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.829068][ T8941] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 99.830328][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.830416][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.835922][ T8941] mmap: syz.4.931 (8941): VmData 37462016 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 99.838143][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.838271][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.847908][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.850522][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.852504][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.855155][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.857512][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.860951][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.863418][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.866453][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.868924][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.871914][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.873967][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.877133][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.877350][ T8943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8943 comm=syz.1.929 [ 99.879201][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.879278][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.881581][ T8944] netlink: 36 bytes leftover after parsing attributes in process `syz.4.932'. [ 99.891387][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.893928][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.896006][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.899193][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.901527][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.904554][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.906972][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.910200][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.912762][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.915956][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.918879][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.922489][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.925001][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.928196][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.930917][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.934129][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.936691][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.940322][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.943110][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.946224][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.948233][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.951655][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.954280][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.957197][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.959689][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.963001][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.965523][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.968655][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.971168][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.974538][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.977057][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.980212][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.984876][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.988296][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.991249][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 99.994472][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 99.997040][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.000245][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.002870][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.006253][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.008711][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.011172][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.013140][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.015876][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.018013][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.020912][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.023327][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.026617][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.029342][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.032628][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.035279][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.038677][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.041248][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.043931][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.045884][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.048994][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.051609][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.054799][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.057353][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.060458][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.062468][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.064884][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.067288][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.070479][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.073136][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.076339][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.079319][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.082572][ T8933] binder: BINDER_SET_CONTEXT_MGR already set [ 100.085200][ T8933] binder: 8929:8933 ioctl 4018620d 200000000040 returned -16 [ 100.097513][ T40] audit: type=1400 audit(1747241037.474:564): avc: denied { write } for pid=8950 comm="syz.4.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 100.186911][ T8956] delete_channel: no stack [ 100.190696][ T40] audit: type=1400 audit(1747241037.558:565): avc: denied { ioctl } for pid=8955 comm="syz.3.937" path="socket:[26135]" dev="sockfs" ino=26135 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.200324][ T8956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.937'. [ 100.205417][ T8955] delete_channel: no stack [ 100.303767][ T8958] syz.4.938: attempt to access beyond end of device [ 100.303767][ T8958] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 100.308788][ T8958] hpfs: hpfs_map_sector(): read error [ 100.328424][ T8935] batadv_slave_1: left promiscuous mode [ 100.347376][ T40] audit: type=1400 audit(1747241037.708:566): avc: denied { execute } for pid=8962 comm="syz.4.940" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.418800][ T8973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.437790][ T40] audit: type=1400 audit(1747241037.792:567): avc: denied { getopt } for pid=8974 comm="syz.1.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.438232][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'. [ 100.479539][ T40] audit: type=1400 audit(1747241037.830:568): avc: denied { accept } for pid=8980 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 100.487217][ T40] audit: type=1400 audit(1747241037.839:569): avc: denied { connect } for pid=8980 comm="syz.4.946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 100.504459][ T8978] netlink: 'syz.2.945': attribute type 10 has an invalid length. [ 100.507436][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.516472][ T8978] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.519204][ T8978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.524709][ T8987] netlink: 'syz.4.947': attribute type 178 has an invalid length. [ 100.531888][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.574280][ T40] audit: type=1400 audit(1747241037.923:570): avc: denied { connect } for pid=8990 comm="syz.4.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 100.575282][ T8993] netlink: 'syz.2.949': attribute type 13 has an invalid length. [ 100.583092][ T8993] netlink: 'syz.2.949': attribute type 27 has an invalid length. [ 100.620769][ T8996] mkiss: ax0: crc mode is auto. [ 100.694519][ T8993] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 100.935574][ T9006] netlink: 'syz.2.953': attribute type 4 has an invalid length. [ 101.030194][ T29] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 101.103887][ T9012] FAULT_INJECTION: forcing a failure. [ 101.103887][ T9012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.110164][ T9012] CPU: 0 UID: 0 PID: 9012 Comm: syz.2.954 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 101.110189][ T9012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.110200][ T9012] Call Trace: [ 101.110206][ T9012] [ 101.110212][ T9012] dump_stack_lvl+0x16c/0x1f0 [ 101.110252][ T9012] should_fail_ex+0x512/0x640 [ 101.110287][ T9012] _copy_from_iter+0x2a4/0x15b0 [ 101.110314][ T9012] ? __lock_acquire+0xaa4/0x1ba0 [ 101.110339][ T9012] ? tcp_leave_memory_pressure+0x1f/0x100 [ 101.110365][ T9012] ? sk_leave_memory_pressure+0x7c/0x130 [ 101.110389][ T9012] ? __pfx__copy_from_iter+0x10/0x10 [ 101.110411][ T9012] ? __sk_mem_raise_allocated+0x895/0x1700 [ 101.110433][ T9012] ? skb_page_frag_refill+0x11d/0x5a0 [ 101.110477][ T9012] sk_msg_memcopy_from_iter+0x3f6/0x5c0 [ 101.110514][ T9012] tcp_bpf_sendmsg+0x79b/0x1b80 [ 101.110549][ T9012] ? __pfx_tcp_bpf_sendmsg+0x10/0x10 [ 101.110636][ T9012] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 101.110669][ T9012] ? __import_iovec+0x1c8/0x660 [ 101.110692][ T9012] ? __might_fault+0xe3/0x190 [ 101.110709][ T9012] ? __might_fault+0x13b/0x190 [ 101.110726][ T9012] ? __pfx_tcp_bpf_sendmsg+0x10/0x10 [ 101.110748][ T9012] inet6_sendmsg+0x119/0x140 [ 101.110766][ T9012] ____sys_sendmsg+0x705/0xc70 [ 101.110791][ T9012] ? copy_msghdr_from_user+0x10a/0x160 [ 101.110810][ T9012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.110838][ T9012] ? __pfx__kstrtoull+0x10/0x10 [ 101.110864][ T9012] ___sys_sendmsg+0x134/0x1d0 [ 101.110885][ T9012] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.110916][ T9012] ? find_held_lock+0x2b/0x80 [ 101.110954][ T9012] __sys_sendmmsg+0x200/0x420 [ 101.110977][ T9012] ? __pfx___sys_sendmmsg+0x10/0x10 [ 101.111005][ T9012] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.111041][ T9012] ? fput+0x70/0xf0 [ 101.111061][ T9012] ? ksys_write+0x1b9/0x240 [ 101.111086][ T9012] ? __pfx_ksys_write+0x10/0x10 [ 101.111110][ T9012] ? rcu_is_watching+0x12/0xc0 [ 101.111137][ T9012] __x64_sys_sendmmsg+0x9c/0x100 [ 101.111156][ T9012] ? lockdep_hardirqs_on+0x7c/0x110 [ 101.111180][ T9012] do_syscall_64+0xcd/0x260 [ 101.111206][ T9012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.111224][ T9012] RIP: 0033:0x7fd083d8e969 [ 101.111239][ T9012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.111255][ T9012] RSP: 002b:00007fd084c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 101.111273][ T9012] RAX: ffffffffffffffda RBX: 00007fd083fb5fa0 RCX: 00007fd083d8e969 [ 101.111284][ T9012] RDX: 0000000000000002 RSI: 0000200000004740 RDI: 0000000000000003 [ 101.111294][ T9012] RBP: 00007fd084c87090 R08: 0000000000000000 R09: 0000000000000000 [ 101.111305][ T9012] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 101.111315][ T9012] R13: 0000000000000000 R14: 00007fd083fb5fa0 R15: 00007fff594be6a8 [ 101.111340][ T9012] [ 101.190683][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 101.234099][ T29] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 101.238929][ T29] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 101.246331][ T29] usb 9-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 101.250329][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.253701][ T29] usb 9-1: Product: syz [ 101.255257][ T29] usb 9-1: Manufacturer: syz [ 101.256831][ T29] usb 9-1: SerialNumber: syz [ 101.260503][ T29] usb 9-1: config 0 descriptor?? [ 101.283581][ T9016] netlink: 1420 bytes leftover after parsing attributes in process `syz.2.956'. [ 101.335712][ T9019] sctp: [Deprecated]: syz.2.957 (pid 9019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.335712][ T9019] Use struct sctp_sack_info instead [ 101.343250][ T9020] sctp: [Deprecated]: syz.2.957 (pid 9020) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.343250][ T9020] Use struct sctp_sack_info instead [ 101.546334][ T29] appledisplay 9-1:0.0: Error while getting initial brightness: -110 [ 101.550403][ T29] appledisplay 9-1:0.0: probe with driver appledisplay failed with error -110 [ 101.566265][ T29] usb 9-1: USB disconnect, device number 2 [ 101.667920][ T9037] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 101.672051][ T9039] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 101.733797][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.965'. [ 101.764908][ T9045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.966'. [ 101.822459][ C0] ------------[ cut here ]------------ [ 101.825007][ C0] WARNING: CPU: 0 PID: 15 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x684/0x830 [ 101.828902][ C0] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 101.831746][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 101.837707][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.841918][ C0] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 101.844136][ C0] Code: 0f 0b 90 e9 12 fe ff ff e8 69 94 ce f7 90 0f 0b 90 e9 5e fe ff ff e8 5b 94 ce f7 90 0f 0b 90 e9 94 fe ff ff e8 4d 94 ce f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 2f 11 34 f8 e9 d7 fc ff ff 4c 89 ff e8 [ 101.850424][ C0] RSP: 0018:ffffc90000127bd8 EFLAGS: 00010246 [ 101.852353][ C0] RAX: 0000000000000000 RBX: ffff888052c4de80 RCX: ffffffff89ecb0c7 [ 101.854924][ C0] RDX: ffff88801d6b4880 RSI: ffffffff89ecb1f3 RDI: 0000000000000005 [ 101.857409][ C0] RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000 [ 101.859924][ C0] R10: 0000000000000fff R11: 0000000000000000 R12: ffff888052c4de80 [ 101.862520][ C0] R13: ffff888052c4df10 R14: ffffc90000127cd8 R15: 0000000000000002 [ 101.865523][ C0] FS: 0000000000000000(0000) GS:ffff8880d69df000(0000) knlGS:0000000000000000 [ 101.868318][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.870424][ C0] CR2: 000000110c326080 CR3: 000000000e180000 CR4: 0000000000352ef0 [ 101.873205][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.875755][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.878268][ C0] Call Trace: [ 101.879292][ C0] [ 101.880227][ C0] ? inet6_cleanup_sock+0x117/0x210 [ 101.881861][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 101.884076][ C0] __sk_destruct+0x84/0x980 [ 101.885604][ C0] ? rcu_core+0x797/0x14e0 [ 101.887046][ C0] rcu_core+0x79c/0x14e0 [ 101.888386][ C0] ? __pfx_rcu_core+0x10/0x10 [ 101.889841][ C0] handle_softirqs+0x216/0x8e0 [ 101.891314][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 101.892948][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 101.894529][ C0] ? smpboot_thread_fn+0x326/0xae0 [ 101.896193][ C0] run_ksoftirqd+0x3a/0x60 [ 101.897616][ C0] smpboot_thread_fn+0x3f7/0xae0 [ 101.899140][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 101.900894][ C0] kthread+0x3c2/0x780 [ 101.902217][ C0] ? __pfx_kthread+0x10/0x10 [ 101.903678][ C0] ? __pfx_kthread+0x10/0x10 [ 101.905166][ C0] ? __pfx_kthread+0x10/0x10 [ 101.906679][ C0] ? __pfx_kthread+0x10/0x10 [ 101.908237][ C0] ? rcu_is_watching+0x12/0xc0 [ 101.909773][ C0] ? __pfx_kthread+0x10/0x10 [ 101.911234][ C0] ret_from_fork+0x45/0x80 [ 101.912672][ C0] ? __pfx_kthread+0x10/0x10 [ 101.914174][ C0] ret_from_fork_asm+0x1a/0x30 [ 101.915716][ C0] [ 101.916735][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 101.919057][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 101.922696][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 101.926054][ C0] Call Trace: [ 101.927114][ C0] [ 101.928055][ C0] dump_stack_lvl+0x3d/0x1f0 [ 101.929590][ C0] panic+0x71c/0x800 [ 101.930876][ C0] ? __pfx_panic+0x10/0x10 [ 101.932285][ C0] ? show_trace_log_lvl+0x29b/0x3e0 [ 101.933943][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 101.935568][ C0] ? inet_sock_destruct+0x684/0x830 [ 101.937208][ C0] check_panic_on_warn+0xab/0xb0 [ 101.938788][ C0] __warn+0xf6/0x3c0 [ 101.940020][ C0] ? inet_sock_destruct+0x684/0x830 [ 101.941692][ C0] report_bug+0x3c3/0x580 [ 101.943045][ C0] ? inet_sock_destruct+0x684/0x830 [ 101.944737][ C0] handle_bug+0x184/0x210 [ 101.946149][ C0] exc_invalid_op+0x17/0x50 [ 101.947663][ C0] asm_exc_invalid_op+0x1a/0x20 [ 101.949205][ C0] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 101.951073][ C0] Code: 0f 0b 90 e9 12 fe ff ff e8 69 94 ce f7 90 0f 0b 90 e9 5e fe ff ff e8 5b 94 ce f7 90 0f 0b 90 e9 94 fe ff ff e8 4d 94 ce f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 2f 11 34 f8 e9 d7 fc ff ff 4c 89 ff e8 [ 101.957081][ C0] RSP: 0018:ffffc90000127bd8 EFLAGS: 00010246 [ 101.959149][ C0] RAX: 0000000000000000 RBX: ffff888052c4de80 RCX: ffffffff89ecb0c7 [ 101.961651][ C0] RDX: ffff88801d6b4880 RSI: ffffffff89ecb1f3 RDI: 0000000000000005 [ 101.964127][ C0] RBP: 0000000000000fff R08: 0000000000000005 R09: 0000000000000000 [ 101.966779][ C0] R10: 0000000000000fff R11: 0000000000000000 R12: ffff888052c4de80 [ 101.969444][ C0] R13: ffff888052c4df10 R14: ffffc90000127cd8 R15: 0000000000000002 [ 101.972511][ C0] ? inet_sock_destruct+0x557/0x830 [ 101.974620][ C0] ? inet_sock_destruct+0x683/0x830 [ 101.976686][ C0] ? inet_sock_destruct+0x683/0x830 [ 101.978738][ C0] ? inet6_cleanup_sock+0x117/0x210 [ 101.980803][ C0] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 101.983015][ C0] __sk_destruct+0x84/0x980 [ 101.984753][ C0] ? rcu_core+0x797/0x14e0 [ 101.986188][ C0] rcu_core+0x79c/0x14e0 [ 101.987536][ C0] ? __pfx_rcu_core+0x10/0x10 [ 101.989066][ C0] handle_softirqs+0x216/0x8e0 [ 101.990627][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 101.992294][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 101.993929][ C0] ? smpboot_thread_fn+0x326/0xae0 [ 101.995581][ C0] run_ksoftirqd+0x3a/0x60 [ 101.996996][ C0] smpboot_thread_fn+0x3f7/0xae0 [ 101.998575][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 102.000285][ C0] kthread+0x3c2/0x780 [ 102.001584][ C0] ? __pfx_kthread+0x10/0x10 [ 102.003301][ C0] ? __pfx_kthread+0x10/0x10 [ 102.004855][ C0] ? __pfx_kthread+0x10/0x10 [ 102.006321][ C0] ? __pfx_kthread+0x10/0x10 [ 102.007744][ C0] ? rcu_is_watching+0x12/0xc0 [ 102.009217][ C0] ? __pfx_kthread+0x10/0x10 [ 102.010697][ C0] ret_from_fork+0x45/0x80 [ 102.012103][ C0] ? __pfx_kthread+0x10/0x10 [ 102.013506][ C0] ret_from_fork_asm+0x1a/0x30 [ 102.014985][ C0] [ 102.016557][ C0] Kernel Offset: disabled [ 102.017893][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:44:00 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff854f7b30 RDI=ffffffff9adf9560 RBP=ffffffff9adf9520 RSP=ffffc90000127498 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff35bf2fe R15=dffffc0000000000 RIP=ffffffff854f7b57 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c326080 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000030657267 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68fa211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68fa211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68fa211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68fa211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68fa211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f68fa211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006b6e 696c2d7473616364 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffffffff9ad7d810 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff9ad7d810 RBP=0000000000000000 RSP=ffffc900006a0bd0 R8 =0000000000000001 R9 =0000000000000000 R10=00000000ffffb186 R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8198270e RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6adf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f68fa174700 CR3=00000000244aa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 935882742db2e77c 39ee1c4f0c56b968 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6403a2591a23a76b 534674daa9291b83 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 78187488a9c7037f ab8fba58ea7da37e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f2ebdbc8f8147a0e ac741ab32ac4ea82 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000014c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003ee199003ee591 ccbc000080420000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 003ee5860000005f 003eece0003ee9d4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001111c5c0000 d62e0000e48e0000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bcaa000019e60000 003ee948964e0000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 536a7801cdb33bd4 34c9649c2b9662ec ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a0e93c0873f9f56a de0683e7699fb6a1 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000020007 RBX=ffff88802c31d370 RCX=0000000000020000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88802c31d370 RBP=ffff88802c31d370 RSP=ffffc90006556e38 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=ffffffff8e3bfc00 R12=0000000000000000 R13=0000000000020000 R14=ffff88802c31c880 R15=0000000000000000 RIP=ffffffff8198042e RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f448afa8e9c CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000002 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b3188f0 00007f448b318310 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b2d9050 00007f448b2d80c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b2d9580 00007f448b2d8b20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448afdb0c0 00007f448b2d9ab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b317da0 00007f448b2d85f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448afdb6b0 00007f448afdb0c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b2d9ab0 00007f448b2d9580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f448b2d8b20 00007f448b2d9050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e75006465696669 63657073206e6f69 74706f20676e6f6c 207974706d65000a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3431333365353366 39672d3235303030 2d72656c6c616b7a 79732d3663722d30 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2765613434313333 6535336639672d32 353030302d72656c 6c616b7a79732d36 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 63722d302e35312e 3627206f74207972 6f74636572696420 65676e6168632074 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=0000000000000001 RCX=ffffffff91258fce RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000001 RBP=ffffc90004097158 RSP=ffffc900040970a0 R8 =ffffffff91258fd2 R9 =0000000000000000 R10=0000000000000001 R11=00000000000106e8 R12=ffffc90004097160 R13=ffffc90004097110 R14=ffffc90004097a20 R15=ffffc90004097838 RIP=ffffffff8169e4b9 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8347ee7d60 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f83473836a3 00007f83473836a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffe0c12240 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555559eae64e 0000555559eada70 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555559ea1498 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555559ea542e 0000555559ea52c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005d00300100005 c00302100005b003 01d0100004900300 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000404a4c40800 0100000008060601 22b40ff9a6080020 0300000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000306572 6701ffffffffffff ffffdf0800030010 0005800401000002 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080606015ed00008 0005e00300100005 d00300100005c003 02100005b00301d0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000049003000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000