last executing test programs: 1m5.699099863s ago: executing program 2 (id=100): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)=0xfffffffe, 0xfdbe) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000640), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000000), 0x4) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=""/166, 0xa6}}], 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000040)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) syz_io_uring_setup(0x6127, &(0x7f0000000080)={0x0, 0xc28e, 0x8000, 0x0, 0xed}, &(0x7f00000010c0), &(0x7f0000000100)) 1m4.798825471s ago: executing program 2 (id=113): r0 = getpid() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x14) syz_pidfd_open(r0, 0x0) (async) syz_pidfd_open(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$PPPIOCNEWUNIT(r2, 0xff01, 0x0) 1m4.73129899s ago: executing program 2 (id=114): r0 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) r1 = syz_open_dev$radio(&(0x7f0000000e40), 0x3, 0x2) ppoll(&(0x7f0000000e80)=[{r1, 0x1000}], 0x1, &(0x7f0000000ec0)={0x0, 0x989680}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x20002010}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x8a, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x1, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x42, 0x8, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x240, 0x1, 0x6}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x110, 0x5, 0x6, 0x5, 0x20, 0xf}, 0x19, &(0x7f0000000700)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0xf53a, 0xf0f, 0x800, [0xf, 0xc000]}]}, 0x3, [{0xcb, &(0x7f0000000740)=@string={0xcb, 0x3, "0f904ae579298db0f9fcfcf58fff7061a8d012642906fbc415338698ab777e5638cc2cc665009e5a26f7679060ddc4006fd34d0a205160218fdfb3e761731e6ddeb608b682a763b566c8618dbaa76cf90fc4659b3451335f5f0ccc0e0df824010544567d2cbb69a6012cc83f6fb1f3a21a266b5a994f045a9f9bacacd3109a81fc1af6b05590ea92968b0fae7e0bc401bd6c494425012b30713d28fbab6668fc1d960835be2f4f155e40371c7ffa814297cd0195be725636e2ce7ceffe18df8ee5329986967301b9be"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x403}}, {0x2b, &(0x7f0000000880)=@string={0x2b, 0x3, "a05ab4d17469dd752cb191d70ebd58b59fb1c870b7a2958665d22d4b592d21441c2e9f9da53ca3c3d4"}}]}) syz_usb_connect$cdc_ncm(0x4, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010002020000202505a1a440000102030109029200020108600c0904000001020d00000b2406000146c8a55a6daa052400ef000d240f0107000000001000000406241a09001b042402081524120101a317a88b045e4f01a607c0ffcb7e392a07240a067c090708241c020001010108241c08260000000000000020004008090904010000020d00000904010102020d0000090582020800070900090503024000050409"], &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0xd, 0xb, 0x2, 0xff, 0xa}, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="050f1d00030b1001028800080708004e0a10ff0101000f00ff0003100bd76630b3336f03d13e63422192f4696e6b2a7a2675e8a4b7df"], 0x3, [{0x79, &(0x7f0000000480)=ANY=[@ANYBLOB="7903f16be753ba0e986d292aac6ce664bb1a58a86ef0221529717cbf9645cb11fde09a19b1b0cc8251cbfcef2f8c2dab8d325ea319967147eeb3f7cf4e0f8b5b90f8638f0978a1dc12394c3a92eaf3275602f349f53bcba8b46bbb2a640fbd1baf884abfcaf8f05be8"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x457}}, {0xe0, &(0x7f0000000500)=@string={0xe0, 0x3, "e3114e5fa7e0f517beda381a6256b8c1f2e74ce7295cb51dfee9c9ddd9ff2a453f938003e1b543f72810211062a71efaeb921a28fed0983d680ac960006b0e56d0956818bef69bed1191d618d7986e59501e741a00401601bf4e24dff24b2c1a03868890d28216dbb924bcd77e24a36f9831e6b167d065e7a0c0366d95022dea185979038c919c1e14b99748bc7a939ce11cba5915779466940a5f35f91d6b919473f713cd558694a493d8d22129c7764b09baf4eba3a9ee92acf96fad25a83256f2dfe95a807a93272b7f2700982e8a737263ff28ff1445fec1036869ee"}}]}) socket$inet_dccp(0x2, 0x6, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, &(0x7f00000001c0)='discard') ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, &(0x7f0000000000)) 1m1.681057395s ago: executing program 2 (id=157): r0 = getpgid(0x0) ptrace$setregs(0xd, r0, 0x5, &(0x7f0000000000)="264492d8df4315883ddaff4ff74a84bf12f080145027f62a2a446e1781bc4edb37600c0c97e1a7f9b07a1d7133cd0e9dc2bc2a09075e8d865a74da476670eeb538cae64bd53c8aae90e7fd90971140d54e95dd753006a41f8f9a2a1067d86c0e085690add9f69d1f08e04a7801a06158e8e2f693ea36b1bdf557") r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x7, 0x5, 0x8, 0x32, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, @in6={0xa, 0x4e20, 0xd12, @private0, 0xfffffffc}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bc0, 0x8, {0x6, 0xff, 0x4, 0x3, 0x0, 0x5, 0x0, @in=@broadcast, @in=@remote}}, @sadb_lifetime={0x4, 0x4, 0x1, 0x3, 0x9, 0x8000000000000000}, @sadb_key={0xd, 0x8, 0x300, 0x0, "416a068a53bc4c0a104bebe4028ddd9ddbe23cfb366ac33dd001741cf1f4cb9ffd2067908d202f776324bbcc2f87599dd17f68f3a41042b09b2b287d3e04029e2b447c2132a7769ce04767b6ecc807f2968301704a15d60f5a7129add61160b0"}, @sadb_x_filter={0x5, 0x1a, @in6=@empty, @in6=@local, 0x0, 0x10}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd25, 0x34ff}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x190}}, 0x20004005) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000300)={&(0x7f00000002c0)=""/11, 0xb}) recvmmsg$unix(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000340)=""/135, 0x87}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2}}], 0x1, 0x40000100, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001480)={0x0}, &(0x7f00000014c0)=0xc) ptrace$getregset(0x4204, r2, 0x4, &(0x7f00000015c0)={&(0x7f0000001500)=""/191, 0xbf}) ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000001640)={&(0x7f0000001600)=""/23, 0x17}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000027c0)={'ip6erspan0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002a40)={r1, 0x20, &(0x7f0000002a00)={&(0x7f0000002840)=""/145, 0x91, 0x0, &(0x7f0000002900)=""/206, 0xce}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002a80)={0xffffffffffffffff, 0x3, 0x10}, 0xc) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002b00)=@generic={&(0x7f0000002ac0)='./file0\x00', 0x0, 0x8}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x1b, 0x19, &(0x7f0000001680)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @generic={0x3, 0x4, 0x3, 0x4, 0x2}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x100}, @call={0x85, 0x0, 0x0, 0x35}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}], &(0x7f0000001780)='syzkaller\x00', 0xab3, 0x1000, &(0x7f00000017c0)=""/4096, 0x40f00, 0x4, '\x00', r3, @fallback=0x4, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002800)={0x4, 0xf, 0x40, 0x9}, 0x10, r4, r1, 0x5, &(0x7f0000002b40)=[r1, r1, r5, r6], &(0x7f0000002b80)=[{0x0, 0x1, 0xd, 0x5}, {0x2, 0x1, 0x1, 0xc}, {0x1, 0x3, 0x2, 0xe}, {0x1, 0x3, 0x9, 0x1}, {0x5, 0x4, 0x9, 0x8}], 0x10, 0x7, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002cc0)={'bridge_slave_0\x00', 0x0}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002d00), 0x0, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000002d40)=0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r1, &(0x7f0000002d80)={0xa, 0x4e23, 0x1, @remote, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002e00)={'wg0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000002e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002e80)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002ec0)=@RTM_DELMDB={0x98, 0x55, 0x100, 0x70bd2b, 0x25dfdbfd, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x1, 0x3, {@ip4=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0xae9, {@in6_addr=@private2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x1, 0x2, {@in6_addr=@local, 0x8add}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x3, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}}}]}, 0x98}, 0x1, 0x0, 0x0, 0xeb19ab868ce318ba}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000003040)={0x6, &(0x7f0000003000)=[{0x74, 0x7f, 0xa, 0x6}, {0x5, 0x4, 0x3, 0xfff}, {0x1, 0x1, 0x0, 0x4}, {0xfffc, 0x4, 0x6}, {0x5, 0x8, 0x6, 0x6}, {0x5, 0x6, 0x0, 0x9}]}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f00000030c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r13, &(0x7f0000003240)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003100)={0xcc, r14, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x80) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000003280)="e11964dba5a0b274356c76baf7abd79c", 0x10) fsetxattr$trusted_overlay_upper(r7, &(0x7f00000032c0), &(0x7f0000003300)={0x0, 0xfb, 0x8a, 0x5, 0x2a, "57dfc615d9ba9add26bbdc4932124284", "43e08f2d341e11001b2d688d6bd58e8285c0b99ff5ba0ceaca86d7b487b6e5299b5bc30ea6d0d168a8778b0d8c58fe91bed0347a533c1fcb08769ca56e7e528e281601d2ad277a20d9ab3b34d3910c106c293cb8a20335276feded2ce7cac076ce6325dc6e786ce582b427076147551f78903578ea"}, 0x8a, 0x1) tkill(r10, 0x15) writev(r7, &(0x7f0000003500)=[{&(0x7f00000033c0)="f6204a960b133d", 0x7}, {&(0x7f0000003400)="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", 0xff}], 0x2) 1m1.68031125s ago: executing program 2 (id=158): r0 = io_uring_setup(0x36ef, &(0x7f00000003c0)={0x0, 0xe77f, 0x8, 0x0, 0x36d}) r1 = getpgid(0x0) getpriority(0x2, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40800, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f0000000080)=[{r3, 0x42c0}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020}, 0x2020) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x110, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf250200000008000100", @ANYRES32=r7, @ANYBLOB="4e29cfb21aaf7765bb5c7eb13e6cbb61174f166f316fc88d1bb4108287d4e00f"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x44) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x270, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffff7f}, @qdisc_kind_options=@q_red={{0x8}, {0x234, 0x2, [@TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0x7}}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x9}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x8}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6b109a78}]}, 0x270}}, 0x4000000) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="29e0ff000000009500000000000000933f4a0521470e85100000080054f35ae599e2bd41c70000a66d308bde4ce95f5f59bed13fcf3f5fb4403e70e89d208d26d10fcb29edca955a5d52f13c"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x18, '\x00', r10, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[0x1, 0x1], &(0x7f0000000200)=[{0x3, 0x5, 0xb, 0x2}, {0x1, 0x10004, 0x3, 0x5}], 0x10, 0x400, @void, @value}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000280)=r11) close_range(r0, 0xffffffffffffffff, 0x0) 1m1.538956636s ago: executing program 2 (id=162): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x18, 0x2c, 0x1, 0x70bd29, 0x25dfdbfa, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000000) 46.531939218s ago: executing program 32 (id=162): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x18, 0x2c, 0x1, 0x70bd29, 0x25dfdbfa, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000000) 9.349839882s ago: executing program 0 (id=616): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffeba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="dd"}, 0x50) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0xc, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0xc, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c00f4eceb8010000000f01c13e0fd92da047f050b9800000c00f3235000100000f30666565440fc7f70f22e6c744240033000000c744240200800000ff1c24c4627d1aa069ed126f66bad104b00bee", 0x5b}], 0x1, 0x1, 0x0, 0x60) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c00f4eceb8010000000f01c13e0fd92da047f050b9800000c00f3235000100000f30666565440fc7f70f22e6c744240033000000c744240200800000ff1c24c4627d1aa069ed126f66bad104b00bee", 0x5b}], 0x1, 0x1, 0x0, 0x60) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = creat(&(0x7f0000001400)='./file0\x00', 0x10) r6 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000001440)) (async) ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000001440)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f00000014c0)={{0x6, 0x4, 0x5, 0xfff, 'syz1\x00', 0x3565b9de}, 0x2, 0x2, 0x0, 0x0, 0x2, 0x1, 'syz0\x00', &(0x7f0000001480)=['\x00', '}-}\\\\!^]{\\\x00'], 0xc}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f00000014c0)={{0x6, 0x4, 0x5, 0xfff, 'syz1\x00', 0x3565b9de}, 0x2, 0x2, 0x0, 0x0, 0x2, 0x1, 'syz0\x00', &(0x7f0000001480)=['\x00', '}-}\\\\!^]{\\\x00'], 0xc}) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/79, 0x4f}, {&(0x7f0000000080)=""/38, 0x26}], 0x2, 0x26, 0x3) readv(r6, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000100)=""/62, 0x3e}], 0x3) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="6d706f6c3d7072656665723d7374617469633a302c00af11695630000000e61c7ac64ce15072a98a5852d5acfa9d7fd2d12a5aa44cbde282bd0a4b5bede74c0932031e581dde6f4458571ed5d19ed226f01f6f5b956f2876dff3ee05bd4937559de3a45dc504323693e950c6519d5123e766168a3da803fbdae0033253f2595f5700b4909b2633b8a86ad28c640fd409e1af28579cc7ef6f37cf900f4bbbf8dce7cf8cdf283b97bfad01efd3cc6bd144b3c030dd0911ddbf0286ebe4a39fae27591ac8d2f7698c4fb5fab6ff9095d745a94c9ae35452754e5e34ff"]) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="6d706f6c3d7072656665723d7374617469633a302c00af11695630000000e61c7ac64ce15072a98a5852d5acfa9d7fd2d12a5aa44cbde282bd0a4b5bede74c0932031e581dde6f4458571ed5d19ed226f01f6f5b956f2876dff3ee05bd4937559de3a45dc504323693e950c6519d5123e766168a3da803fbdae0033253f2595f5700b4909b2633b8a86ad28c640fd409e1af28579cc7ef6f37cf900f4bbbf8dce7cf8cdf283b97bfad01efd3cc6bd144b3c030dd0911ddbf0286ebe4a39fae27591ac8d2f7698c4fb5fab6ff9095d745a94c9ae35452754e5e34ff"]) r9 = socket(0x11, 0x6, 0xfffffffa) ioctl$VIDIOC_G_AUDOUT(r5, 0x80345631, &(0x7f00000013c0)) (async) ioctl$VIDIOC_G_AUDOUT(r5, 0x80345631, &(0x7f00000013c0)) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001066030400"/20, @ANYRES32=0x0, @ANYBLOB="96040f0000420000180012800b0001006970366772650000080002800400120008000a00", @ANYRES32=r10, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x600}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 9.010044662s ago: executing program 0 (id=618): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x3, 0x0, {0xa, 0x4e22, 0x8, @local, 0x9}}}, 0x3a) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getrule={0x14, 0x22, 0x2, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_TRY_ENCODER_CMD(r6, 0xc028564e, &(0x7f00000001c0)={0x3, 0x1, [0x100, 0x5, 0x2, 0x0, 0x9, 0xc4, 0x9, 0x6]}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x6c}, 0x1, 0xba01, 0x0, 0x4008011}, 0x8800) 8.450489623s ago: executing program 0 (id=619): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r3, 0x1000}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e23, 0x4, @mcast1, 0x101}}, 0x8, 0x9, 0x7, 0x2, 0x7}, &(0x7f00000000c0)=0x98) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000000180)=""/13) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r3, 0x1000}, 0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e23, 0x4, @mcast1, 0x101}}, 0x8, 0x9, 0x7, 0x2, 0x7}, &(0x7f00000000c0)=0x98) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000000180)=""/13) (async) 8.318467619s ago: executing program 0 (id=622): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 7.350347578s ago: executing program 0 (id=629): r0 = socket$inet6_sctp(0xa, 0xb61ca677048a6bee, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0xc) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000100)) r2 = accept4(r0, &(0x7f0000000140)=@sco={0x1f, @fixed}, &(0x7f00000001c0)=0x80, 0x80000) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "cd0395bd5a4da3e8", "27aac4655f0e45915804ab93ef77d4ab", "09deda44", "05dbde86067d971a"}, 0x28) r3 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x2}) timer_create(0x1, &(0x7f0000000280)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000340)={{r5, r6+60000000}}, &(0x7f0000000380)) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@deltaction={0xa0, 0x31, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r7 = open(&(0x7f0000000540)='./file0\x00', 0x803, 0x104) read$midi(r7, &(0x7f0000000580)=""/4096, 0x1000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001580)={0x1, 0x7, 0x4, 0x9, 0x9, 0x5, 0x9, 0xb9, r1}, &(0x7f00000015c0)=0x20) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001600)={r8, 0x9, 0x40, 0x146}, &(0x7f0000001640)=0x10) unlink(&(0x7f0000001680)='./file0\x00') r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f00000016c0)={0x1, 0x4, 0x4, 0x14b8, 0x0, 0x10001, 0x2, 0x8000, r8}, 0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001700)=@sack_info={r1, 0xff}, 0xc) sendto$inet(r7, &(0x7f0000001740)="a09fc5763e9729f46a65a3460ac4a61f78c039e6bf1e16b5541659ad698b80aa23e3c0ec6deaadcee51479d49f31ba6954d25ed2317c8881a8524c52720b62b8397de172013fcf6e5a396557c5f76251a98fc62ea277ff3946da69981bd64557225f005ed76840cabdfb1215b63a50e6b22a302bee4f91f18350f5bdd32915a3a225b544dcf12ea0889492d261b4c4bbc841976d7d40d65dca97ceadbb", 0x9d, 0x800, &(0x7f0000001800)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x5, [@restrict={0x3, 0x0, 0x0, 0xb, 0x4}, @type_tag={0x80000000, 0x0, 0x0, 0x12, 0x4}, @float={0x8, 0x0, 0x0, 0x10, 0x8}, @ptr={0xc, 0x0, 0x0, 0x2, 0x2}, @float={0x5, 0x0, 0x0, 0x10, 0x8}, @union={0xf, 0x1, 0x0, 0x5, 0x0, 0x1, [{0x7, 0x5}]}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x6f, 0x0, 0x30]}}, &(0x7f00000018c0)=""/25, 0x7d, 0x19, 0x1, 0x2, 0x0, @void, @value}, 0x28) r10 = userfaultfd(0x800) ioctl$UFFDIO_WAKE(r10, 0x8010aa02, &(0x7f0000001940)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000001980)={'virt_wifi0\x00'}) fstatfs(r7, 0xfffffffffffffffc) syz_genetlink_get_family_id$ieee802154(&(0x7f00000019c0), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000001a00)={@in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x15, 0x0, "4e91c665352848d631908656f48fb4b251ce4c068cfb907ea949a8685abb12990521d973bc4865662a954aac27b8c837c1acbca8ddc435c364a8bdafd15acbc63d0112df017be350ebd1d66eb4439a34"}, 0xd8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000001b00)={r1, 0x3536, 0x4, 0x6, 0x0, 0x6, 0x7552, 0x8, {r1, @in6={{0xa, 0x4e22, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, 0x3, 0x6, 0xfffffffd, 0xfffffffb, 0x5}}, &(0x7f0000001bc0)=0xb0) 2.549834815s ago: executing program 1 (id=673): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x8000) fstatfs(r0, &(0x7f0000000040)=""/227) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = socket$tipc(0x1e, 0x5e1e2c3fa0232b3c, 0x0) accept4$tipc(r1, &(0x7f0000000140)=@id, &(0x7f0000000180)=0x10, 0x100800) (async) recvmmsg(r1, &(0x7f0000001580)=[{{&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000300)=""/36, 0x24}, {&(0x7f0000000340)=""/136, 0x88}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000440)=""/27, 0x1b}, {&(0x7f0000000480)=""/32, 0x20}, {&(0x7f00000004c0)=""/3, 0x3}], 0x7, &(0x7f0000000580)=""/4096, 0x1000}, 0x3}], 0x1, 0x10102, &(0x7f00000015c0)={0x0, 0x989680}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001600), 0x296000, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xd, &(0x7f0000001640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xbc72, 0x0, 0x0, 0x0, 0x7}, @ldst={0x0, 0x2, 0x1, 0x0, 0x2, 0x2, 0x4}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x6}, @alu={0x7, 0x0, 0x1, 0x3, 0x2, 0xffffffffffffffff, 0x8}, @map_fd={0x18, 0x9}]}, &(0x7f00000016c0)='syzkaller\x00', 0xb9a8aa65, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000001740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001780)=[{0x1, 0x4, 0xe, 0xc}], 0x10, 0x9, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000001880)={r0, r3}) (async) chdir(&(0x7f00000018c0)='./file0\x00') (async) recvmmsg(r2, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001900)=""/89, 0x59}], 0x1}, 0x4e}, {{&(0x7f00000019c0)=@xdp, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001a40)=""/19, 0x13}, {&(0x7f0000001a80)=""/163, 0xa3}, {&(0x7f0000001b40)=""/106, 0x6a}], 0x3, &(0x7f0000001c00)=""/150, 0x96}, 0x3}], 0x2, 0x40002042, &(0x7f0000001d40)={0x0, 0x3938700}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x3c, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x44001) bind$tipc(0xffffffffffffffff, &(0x7f0000001ec0)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x2}}, 0x10) (async) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001f00)={0x6c}, 0x8) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001f80), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x2c, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r7 = getpgid(0x0) ptrace(0xffffffffffffffff, r7) r8 = syz_open_procfs(r7, &(0x7f0000002080)='net/l2cap\x00') ioctl$sock_ifreq(r8, 0x8924, &(0x7f00000020c0)={'veth0_vlan\x00', @ifru_map={0x4, 0xfffffffffffffffd, 0x9ba, 0x7, 0x81, 0x4}}) (async) statfs(&(0x7f0000002100)='./file0/file0\x00', &(0x7f0000002140)=""/134) (async) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000002200)={0x18, 0x0, {0x4, @random="5440da19e70d", 'wg2\x00'}}) (async) r9 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r9, 0xc0205647, &(0x7f00000022c0)={0xa10000, 0x5, 0x3, r8, 0x0, &(0x7f0000002280)={0x9909d9, 0x7ff, '\x00', @ptr=0x2}}) (async) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000002300)=0x0) syz_open_procfs(r10, &(0x7f0000002340)='wchan\x00') 2.370002107s ago: executing program 1 (id=676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1b000000000000007f"]) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r4 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@delchain={0x24, 0x5f, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5, 0x2}, {0x1}}}, 0x24}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000000080000000000000", @ANYRES32=r5], 0x20}}, 0x10) (async, rerun: 64) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 64) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) (async, rerun: 32) madvise(&(0x7f0000569000/0x2000)=nil, 0x2000, 0x0) (rerun: 32) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') (async) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x0, 0x36}, 0x0, 0x0) (async) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.299621487s ago: executing program 1 (id=678): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000c80)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x0, 0x6, {{0x18, 0x4, 0x3, 0x3d, 0x60, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast1, @local, {[@generic={0x86, 0x7, "0f9bf74186"}, @cipso={0x86, 0xf, 0x3, [{0x7, 0x9, "4024c24903e945"}]}, @rr={0x7, 0x17, 0x3f, [@private=0xa010101, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xf, 0xbe, [@dev={0xac, 0x14, 0x14, 0xb}, @empty, @local]}, @generic={0x88, 0xf, "7b6142987ba81492b29965026f"}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x30241308}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x76}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40840) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r5, @ANYBLOB="010027bd7000fcdbdf250100000014000180080003000300000008000400", @ANYRES32, @ANYBLOB="04000300ac00028054000180080001000300000008000100060000000800010000000000080001000700000008000100080000000800010007000000080001000200000008000100020000000800010002000000080001000800000024000180080001000300000008000100020000000800010000000000080001000000000014000180080001000200000008000100030000001c000180080001000000000008000100140000000800010001000000040003003800028034000180080001000500000008000100050000000800010006000000080001000800000008000100080000000800010002000000040003"], 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x4050) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040af1f2f5e199fe10549d05355009ac16451503443ac4df6faa8c1ecbf1cada62b1f6b21445d6ef908884a510b4e3997b160d0d5a0cef66063397ebe792f4f0b00000e7fae7761ba23fdf6ef8e152a0abfc4d6f189a658359f05882896498e23eb1f13c2d847805261bb6d0059dc6b6e35e9c9ff30a2c14a2283cca3d3bf063c368164e3b08f5853d393d9d5f4c784672831c4eb0a94fcd724a46ccc964dec3a3087ed3fba7bf947ba782009751ee72ebf848aad3", @ANYRESDEC=r0], 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042c"], 0x14) eventfd2(0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x6, 0x1}}, 0x20) close_range(r6, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x400) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) 1.83913076s ago: executing program 4 (id=681): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x24) (async) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000340)='./bus\x00', r2, 0x0) (async) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010000000000940b004b720c", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="10000700000000002000000000000000"], 0x34, 0x0) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x31) open$dir(&(0x7f0000000280)='./file0\x00', 0x202f00, 0x0) (async) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x80000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x10, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x400000000000007], &(0x7f0000000500)=[0x2], 0x10000000000, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x800) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) (async) r5 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000100)="071a6b055dcd2dad7c6e26a1d3edc59ecce61a2bfd6c9b50414ab817570893e7d244257fafba18f8ef4e1908dd4c14f265c84d43b85142fd88a0883561f4fd84e4d9c595290419777404c1b1ce7a2f50807ee93603d83e6d31c70c0b1caaa5eb6e461f92bf60b47fe1eac4040ecd3018d5fde76e085b43bdca0f315b4343a0f9f378") (async) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000580)='1\x00', 0x2) (async) madvise(&(0x7f0000899000/0x2000)=nil, 0x2000, 0x19) (async) mlock(&(0x7f00003a4000/0x2000)=nil, 0x2000) syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) (async) write$sysctl(r6, &(0x7f0000000000)='2\x00', 0x2) 1.726692432s ago: executing program 4 (id=683): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x1, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r11, &(0x7f0000000000), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r10}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r12}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x1c400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r13, 0xc0a85352, &(0x7f0000000440)={{0xf8, 0x7f}, 'port1\x00', 0x2, 0x80040, 0x6, 0xfffffff9, 0x0, 0x2, 0xc, 0x0, 0x3, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) 1.640163696s ago: executing program 1 (id=684): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}, {@redirect_dir_on}]}) (async) r0 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) fspick(r0, &(0x7f00000000c0)='./file2\x00', 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 1.489924971s ago: executing program 1 (id=686): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) getsockname$packet(r1, 0x0, &(0x7f0000001480)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 1.369937399s ago: executing program 3 (id=687): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r5, 0x3, {0x2, 0x0, 0x4}, 0x1}, 0x18) sendmsg$inet(r4, 0x0, 0x48005) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r7, 0x1, {0x0, 0xf0, 0x1}, 0xfe}, 0x18) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000240)="0f20d86635080000000f22d867660f38811abaf80c66b8cf01b18f66efbafc0ceca5660f65139dbaf80c66b8e850298266efbafc0cecba4200ec0fc736c3c1ba2000b024ee", 0x45}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r8, 0xae9a) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) munlockall() munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYBLOB="f767b10e03be875e923e7261497b323351aafa8cdb517ad784f08ca0a86f3dae56f5e9c3d9d66bfe2d058c22c72675", @ANYRESOCT=r5, @ANYRESOCT=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4040040}, 0x880) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r10, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) madvise(&(0x7f00004a1000/0x1000)=nil, 0x1000, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[@ANYBLOB="aa26e3579f250322f79ec63518aaaaaaaaaaffffffffffff86dd604dd308002806245c6716c6cde028c237f84b5815cc00fe80000003000000070000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a002fffd9078000013121ae8a59654f8c104421ee9ab1a9e53d70000"], 0x0) ptrace$pokeuser(0x6, r0, 0x1, 0xfff) 1.21038974s ago: executing program 3 (id=688): sendmsg$rds(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/232, 0xe8}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000440)=""/15, 0xf}], 0x4, 0x0, 0x0, 0x4}, 0x4) (async) r0 = add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000080)="001801020200", 0x6, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x36, 0x32, 0x63, 0x36, 0x30, 0x62, 0x7, 0x36, 0x39, 0x39, 0x65, 0x63, 0x39, 0x61, 0x36, 0x37]}, &(0x7f0000000580)={0x0, "c2254e8a6a7e176537b8f1858dc2f0e1968b4815ddf90d64096827b8edf115b1928430b64222c0a0fb06405bb705379abd33630e41e31daba19797fa94cf5a2c", 0x23}, 0x48, r0) keyctl$search(0xa, r1, &(0x7f0000000600)='ceph\x00', &(0x7f0000000640)={'syz', 0x0}, r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x20040000) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) (async) fsopen(&(0x7f0000000100)='efs\x00', 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000200)) (async) r5 = socket$kcm(0xa, 0x1, 0x106) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000140)=0x0) syz_open_procfs(r6, &(0x7f0000000280)='net/ip_tables_matches\x00') sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@l2tp6={0xa, 0xf5, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, 0x12}, 0x80, 0x0}, 0x24000059) 1.119862372s ago: executing program 4 (id=689): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e080a0d0cddff0f01"], 0xb) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x3c, r6, 0x21, 0x200000, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x30000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000}, 0x4000040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) fcntl$dupfd(r0, 0x0, r5) ioctl$SCSI_IOCTL_STOP_UNIT(r8, 0x6) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x1, 0xd000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002800)="d1f89c14e7f8640b43b1f1d1e00b2b0b3146d223d281c321953af4ade40d696d07f4b7d2ed1c1fd5691291056351901df48500519139568c88f49bb32801c2e3e2932895f1eb24b30efbab27313a3acab179fd6ce1f7150b0f0aae8cde4dd46b4f63cd60f647ea9bcf83f107e981a050f61f5d1bb5c7883f93269bba25e4122796c0f88ab27d913586d055f8c977ffcb05c85210f93cbad91499fedb2ab95e06bf009e54b422f66cef043560f4d77ae5c083cc67fcb0d3f10699aac8cceaf6d3b8f32e15555924edbc42b4ca3d2f4a92f5d30c18176c3abd17db4de2ef74472ffb637dd07460aeb7c882811c089217d88cbb5eec41d2be903e1c65cad2ad742f9ba8b512adab575f89d539492034ddfe4fd28205c8f27c52f0f631703d384634bfcad149ea9e842125062ac67006ca474be31f708b4f4f1e0c97a4eb2f26b671e172e251e8a6e9e1510bb74931aaf6b6ff84f8aefd63591f18f2ae8028985d78fcc5ed2d57bf595d3068e904387eeddd19bd359721a432bed0bff033cbca6acfddb6529fb11290bf1563b45034bd9b6c331091efef04303ca9942fcb64e56f3ff74d610e14c8f8a87e41582aebb272e5d6e945fdc7095bd181b93f13ddbdc18545f9cfc4db7f134c9ffa6add6727ab8755a06dca23d24a67658fda84321bb97fc475ace3b9912dad73f0ee6c8b2d6d58d7328ca63d1aeceb22a419fe4ec4c3b943051e9d276c559c33e6a45a97813bfcf80c7d79ebe04b1827878c4c8c2da2d598f9f3e444ae82f142716827dddcd94f8997d88a30be2a76432641125e28d5a0896b3e040a8b6805abc98da90844261468826b89f6cbac8d7b5eb6cd8a23f7c7ae9b99dfa6616f9dd10ac48e8c53a38ebfcee8c0ae1be1ee982515ce12a1ebf5d2d19022b4407a9bd062c453845ce75f54dd07e3d8079e19b3b116dc51f7a07d005ba682da13b73e3854bb60059fb021b8f4b9430629d408b32ccd3678bf1dc149a3493c44b2a52a5572c128957e0db8a4a214848b64bea6733bb48fc17a4e42474e2b1f47b507d038bb87a3fc32e7bf471685a61f736a414772cc1825e9342c58768640c83486dbf058050dd6c8a9843c106d1a4efa5e5b36deae71448e55f4ef2721d2d210ce075bdc52c97bd6c097a9a4120a507f6c99cd9054579c250cd5b207684deadf75f2f8c54349a57500625be7577fd6c81ca72111935f577c74c2bd1e9419344e2a3563b5a7d6026722469a30a061d123b45f93027a01c7d38863589118d25e333c07f5c3eb85d4dde937d8f1421b72035f8733754ef4793acdc8d1362ef08ac1e9f0246bfb478647ada002f809a3e63433d031e6d5e4f86218ace6a6221103608705719c3106b4659c377f7e3b6ae1777075ea45a68df2004deb6ef742c5971c23d409278be94c5de68153d93d1a2378f1b1656786ec896b72de0da8259a6f181be8829f9cb7cb98ce0b169e734e4a240508952f6ce3ca984eef7e0cd549996147fe56a0bb1598f015ab955df145a51d783397366084e53455840d5688cb9b7d2cdf8abbfcdf850a7de4073eada567d6ca989611c4910e692e44677a857eec2b654f8dc66b2be192786dce3b9780f9806652bdef013304a43dba3f8d15e5105414f6d1fb2a57dea02211fa311b489088a9802e36d649ada97d72a216f54ca6da090a51c01f5638a04f364a3cbf24bb374f644fda38856a7e0f5c3c9cd7b00555d105daf57561379cf1d77bce66d12de44f202a866a43a7a05a6e0910a1f0ab5b1341d8ae992ae9d95fa2c876db1bcd3635d7851f03dde1eddae6dcf95b182edab72a0521c88c8c3a8c2ad3c6ec2cc44321ce1550d51476e95a18ae5fdab801ef4f5a7a56580261d850f392929061ae5808ba390b2f7d8fe7325df9c07c39faadeeb0ee1ed95db7ccf49c9b93fca83e06be745156d422c8b936d65b8e7e76d9eeb2bbf19c1f9a59b8ee6b55d594d4794a869b2d3b37b0b936866894f00e6a90c788c22e0fb87d0ac53ce75e519765647deee2862552c77ceb75d419627e0627067ba24571807cbfae0bd959fa95cb14c2812a1ce41f76d2ad620c55df55f473e56cb219f7b13bed8cc4a98dddfda9d3b9b5650754f73c34bf00496993a1c4056aeb44e4160c3e2090d733604b2b13f40ae346b726a31365b7a230d8f66665dcb726594280678a258f8ddddfe69d424d62abe910db05c0efa5e773d0f6d8ef8c4c49926b46568a7a1321d996eacabb2f716539a020e34a02afc3bfead458287dd22c11e1c5f57cda7668853637dba0b2eb5e5318750b63c829ab0145c02d6bc05aef4113ee0ea0ba97c44d74cedcc89adff648eb5d7fe932a7a76c772b1e2e36c148dd3be951cfa0cfe11bc58635b38708fa1ff88f949eb15f4a4a3de71c33e2915c799d8204d7d1f9cf7c13c608e6ddf29e12b409028ee5edf37353df7982f67a120ff1871001094b1a3148ed5f4f75d9372aa21b2bb6e02b470336a2c20efee8af866032acd6dc56d1fa7a84dc314cafea1a7bba5fbae89e037a4a5597d2eefd153406d67ddbb3b4eeed6d981b229c2c1b76347b05d20835ecc979b697a2981f6785df853d3d5ce07c624136c805d4dc6c7419d68afe2ad4822aea38da761742b33de8394bcd2462518b35c6ef265eb2a9b130e5a3d669b55d457f92500a7b69156475e001989d55547fc831edf2afe2290591e902858914af73ad4e87ddb8ea3a719f435fe1c2839a39fe088ccc863e7c82e96b66e1b6d32ddbdc42bf2f6076b9e93ed2ec4b6ba6fce5dd3a8f5b3aa105aecf72a5cc9108d02a0b923de2d490ad90aed3a45c46d4594948e7b3f3cc7d153f4b2837ca378fb4af215657f016fd9c66395b98357c1d12a655ce07268beccb35acb3f928c1522bea5df98a0337c751308bfb361e68f3775c75e020ac9570283119264d4f8916c143ccc28d8e0709df356de6b6f35fccde79a677606b5b4d846fdad7c271fc5c2ae5f5e2fbcd6fbf21508a2615ab8f0208e276164bce80fb886b648b4cb085c7922a829c2bccdd850cec329870c866f7923c2c1cd59d6c2653263f7aa1f13d84c82575a021793ef875954ce8737c98abee465e780ab64f1d23da92828e62908543850e5730099eb34f5e47dee740581f596413b8e2711bbfc9d25e4a35b57416a741a60ba650b52ae2189cdd125f64565544f9e75bd8c2cbd898ed2dbdd704ee40d1746715eab4155a51289cf7d89a19ab7a355609dff8111c94f6cdf94a94c667508d7201eab7e86569b8b08bca2291cf3fb166df68f6d6da05398e8a1c0c5c66ca3cee621727a77f19b92927569ba44709302c1102683f338150989d971ea6d0151b69865e540ad4e5a186ad9fc8ce57a56ad114487c5ad99c0beae0fd49927c52380de839cc952f8e41e167006573b4ffc39ebec8f9f9fb4168386a78fe52c00cf3c3be6dbcd4ab32ac7cb8fdd1bae70a5c3da6f555aa6c8e6bd7e69e511bd5d87e39ee21f9035b0b14dd50b3c4e211794bfd7e8fbc48658044eab550f6b564d8f663c25ddb30233fb260e2d30bc9956f7293fd5532df2f74019f639c7313ca029280c513c2fc3c77dc4d0e7f5a9f273fda00349c28319743bc8f7eaeacc7f487bcf5866a55b2fa5b66e31964f090ac448a1ccd3b8cbc9735db5d7d1dd2f2bcdad1ee48b4f8a36688d8ddead1f166a5afb2efe12e943ce6ca41f1f45fe650536860881c28ff04a66ddce9cd19b4304c26e3238f114a1f4080999aaf6ff1f4b8b59ef5d54c10cd8a6598420949f1c0eff13259ba7da9f4c749b58f31f01627b780c2502cc6d1d82f68271e2bc945ddcb6784532e1aba414385096eeeb45afca0ddec570b16b476fbf7b4818275a05afe4beec9086e1c816ebf96608ed57a570c931577ca5b14c9359718b4b31b4789f291f5cb012f832e5763ba53521f58d3ee0a10930d3b4ea7747c5c751cfb476159287a9d371530e5d7cffa6ab09f049d2435960b0ad34f7890df22a3cfd6ce052b08409e67a1291f8459a59b988d7b97d2534f306d83656fd43313eebce1732837b6c22dc60a80d03c54b695b4efbf31381916c7da9644ef8e0f6739c98e7892ca89bf696715391c989c3bd53362e01b81d998e50e46fab088f9312465d200c034691b7e5dcb22ead3c3f3225f16a5588b2be09470e225290d8073dce5cd955d31e7acd452950505597f01c4b54a6f16f2e7d00ab182258f26e40bb70db783b2a10aae019f87708e1306e1957fcc081dac3659d603d4044c10b0a1fe61f4482e56d031d43fc355100a9dcf822db16d0895e554b439bd032e6103df725123da3fdd4a48b68863e6bb36e05343136e171d39d86168be30188bf1ebac4a1d748115167033149ac61bb4f8d4cad7f4c68c32de226b03fb42d24d5e37ba886fa357100644e64d869f6395e3d6d3768a30f53e2aca3688408807bd4818a2c5150f8ee770121a4a6402c7dc334a9ee5e876566d19867e45d4bdc73477ff7f543a23f38d5f0bf666219b0391e66457af4238c5bd9a05586333556f8972aca1def4507c4b073d1bc1c3051f0bf34f71673ccc1de9c69170c9fc5299ac733569cfde6a7bbb3cd60b601cfca16510bf7fbb26ffab3b674000844daf55fbf4ab48eade708cf70fdf901454acc8cc95c63fd2ee771bffaf19205e9a119b847931bcfb4c738e39701a3882cef4ff47b46b72ce26ac207a1ccaa253cd3ddae2b2eb61d5b9b3c8156928a169d7dbb2874b884c3b2097cb8ea92ce7fe70af90514c11887df33c4f7ec3d3ee6c327e7129b0188b0ca8c777451b17d8f489d547d711404bef72d1914f66a5676e9d716ede8c4282526419adb31d071d241db47a58bb55ee6ebcb67c82765a25e5e6fedc4c8d1d9b17e2b5bac5e0af3c63ea870ad8c5f9521390b660fc735d331e6eb326abde284256cdb381b4651d05f55807f4ad1b5b883bf6b55ee87285fad8de366f3248ae0b9c32bf85fc95d5bc19a716ac2a5f41e4e58d26bfdfa582be5d506f9929bfe7cea70184c81722ef7300f779d5d64c08a225a083d44ce75ced73f3a016f5047af67245bc8a81214024e905f383252cc0228085aa5fc184cbcb41db3eccede89480e0a1c1d1754cc3ffa53edc27c337ec86ae2f68c6225edb0027c1c5bf9aee1b94b62f6144e4631887272a36add32d908add308207559064cd61576f917db864845e5e89efcb27c80d259eb6fd5fca398da0c7e62fc423511bb8eb3969732c862de33448e95aa5e15d2028b84b3b8348a50abb39c5c10ac7fdc2034d1ceeae9870dc4486f48ac6aae573a775716ec380ed57665b9bf1c77f6869f720e428f8b94170b14c23786ff1cacf95a66ae631c70245bf264ce5078c3bddb4aaa7928eb6f1261d52e45ae5fde6f1b3bff90cd560c6c2f77ecfcf553db137051685c925be70def2be6c9bdd5825eac58d4c892a6d4ad5dcc078c6582ca140e5a75993e5ab7b487f31e5c601844f18f13039c099317f5e512eb9e054dcd8535106a9bd8977bf74254b68753b7f3a9b385d4a38ccaa17e029bd9ab4ff9b9b561b2a7e613ea05eb18a50fc231f32b79b9f32514469193a3d12269f58f3c932e501513e48e81774ad389275d9f00b4f8c677b8bb584b503201f83c7ad2e934e909f9ae1fc540f544dd2327fe1d8e3bb86984a252e2ffa88e2aed6d65a302d1883e51654fdb046d35270130fb9f8e4a4861d7278a07ee627fe272dcf99d294d7b1ce72f2f804cddfe4fa7aeb2c9543ef2665bf826c8ce0ca82dc7d4e57b7181b55a5d96ad83417b79376793235ed5a320a3ffac3a025aefa669450a6df20d830042034c0953836097c9461bc0d9c1446485692d1b9d5c991086f3f118a49bfe2a0888a5af8a868d880e31946dbd0c7ddcfcd27dcf5c62c9c5ff8fa9750d129f32e3c4f524eb3c31d5c9cb33fbcf52384a04a9f4faa216020e45be91181efeb7393d96b1f3ad8e9fadcffe49bec1bf36e70c2291475356ec5a416feb5d3b4f1331052271679d1186b338163682ac5b6bb79c64d6d0f8ddfec84d0d9870f45a64413f529c8dd93b358e66c9da2fd233e53b73ae2761f363ee69a38a0d7320a149c90c086e6a426abca5c461088747a2fb5006919ad7640aad79b1ec03cf6f49206f37382ad3105fcbd0e08d00815029d8cc3ca16472e58226f1def116bfab456c32a2a2323bb5a661eacb3b7c915d1eaa8c5aa8b1bf25c3a7bc9a2e047c499d8f2fbf2fe25606fc7f0ae5a539af68830b1955f82962f596e2ad0feb3e99b1982ffe3e553f102b4360b8e1d659575a8f713b8bb88d97dbcfd98f91c147a97e896646a47a43334569da8a01541b012063e0465c4122cb96b57484b0ab8c5f0c8f346c0766be69decf4e3ebef7f74f153ef8c6b6e9c5fe224e8f995f11c1867c5600cd7a345afacafec9076d4ccfca741fd41e445476d31f7cdf06b0d0cf596c755235408782a5e37abeb1f2dad79c83e59a1040c4b3b6a5a2acce9df0ebdb607c9c0549a4b16028595f7a9cd9da115dab0189f3d98b0dc2b8ddf6be4de2b38421a2071d91f14f8752c74df31fecb64de59dce09da2c3a1a2826446d982509baaa89b76379d8320bf3c1f76448e0ddc0889fe57ba756ab1403949cd2ca9ab520fa485576eca5acb471002a14a31e8d7f54c8c3edda8f416b0ae9d9fdfc445b54ed8fb34ed7c1d11b3c57a2c5ad92217ab2fdebafc195d09fee7a518e027ccf9d2e8de8cef1e0ad52144d82b65519495b8a5c314e85361adca8953dce587cf461a461dc9bbc0eb13a54144964930d80d8b4a015676f3efd10ccfd0ec5fe64deb93b5901b506581461bf2aaf04fa9f8118936c5e67e1cee60ccfc4f011ee2812eb9716af42b22c40d83c55d4e4c4838826cc34387a2085aa3e17219c78255ace7bb1fc30ec80676449084744c0887dc4e7696d25a544f3e4b365cc6ad800931d5787be99d678347ea4d6cdeab5662f6cbcb5fa80590e513c4ca96d73d378085026e0e7c71d968a670aefd48519e35beaeef9c67506db6f9b3edb62ef1b3b52b9c2db876b76101644e7dcf5a5056a8d916a0f69ea5bf096e7a4c2f8f1d0da29dbcef9d2ad1b82179ccd0ef95006b7a1d542a847e3e0f864d63434c15d6de4fecad18b788a867da5515e3d51871417bfd783d2dffd852953ea7113d3a61aac3c7c1a4efb449faa928456eb570e62d0ff9542a971b542d7c1fed9d633eb4a81499c105d0f73c5165badb54b0e83f8192d3d51d46ddd9908b04e9f57d5a4e6b65affee3799ae7cc51b4098f71e8ee947ffdeee4fd03095536376e1281ef8158fd1da4a39aebdad37fad75f6217bf45bfad16f2f1a80f5e8a3eea1141a56beb91319fe948bb44350a6e79959c140a5dad9955fb287aeba0a8a45d1fd8d692d30c96d01c9100e417082ae6edf62965fef7e190af60a99145925a307d1e11534d2a64484be3c6cd642432a2db66ba6d3ab1b7ea645edf4e54623d2ba0619bcc2a917cc2df8b0dbed096951947445ed5f08c626e1f9a5f566515bf106c48174f73587314b513962ed556fa7f16d8c6a953bcdda72f083a9b16357b3262c13cd500dfa09cc3d09240a7338514031768ea3053caa5166c8e4e090b3128464a88ccdc751d8ee1b3b1098997c9eaa2b3a13a47e43723a49e5d011dabb22c0d9605e48d5e26b90a47519536fd77c5260bc713e2b510fa6da698069f6c1df7a72462399d7dd288be19a0eab18adb072677268a306f19685c2d813564bab4ac90b7389c2fb87c0517e769577c081ced55572da71b40d18e4979b6b6290afcde4caa610166920549286dfa80197a10ff074b08d6b96c97110e36742fdbc5607f4c48ea9dd53301eecb5c25fce4eec9381b84e6b5af767c5bcca600149a3021c3f4aa237a0143363549a705c5768b5aa6ed51fd1ca9f0f9dd242f0df21f7c3eaf321fca97837d989ca101b5462d2dc248316c21339cb2b4e3451bb483390c09c958d474c6df2f2eac208ef704cbae5c9f6597c19ce48c4c9161c1b14622ed824b0e8669cbe6746051729fd2fcabb020190764a468c58ce369528bfca46cf8ec51ab69e711a53c4121476d2a5d2ceb19c332a5a86a52cabb246d2be739f361d97a6efc2c1d408b6f079ff5cbfdfa7ffb5da3af4611e42f876a44f8180ebadf8efe05645f3326fd1b1bb7f82753ee13e25c406469a6b103b9083ac06d590a48543240bca6e467eafc7069c97aa93a3a4ef61b6043383b6e990d174637d695893bd910f217c9c2465688eccd8a171cb5270fca2e002261f2e3e595f3484b67c0bbd7b50ea53a470e3935c0eafc6226521f0a15fc7cf5494b67fcfb705019a86a5972a9dd285bc50985947e42ca8519de25510db7ba6553419d4e368fe56c2a7acec8e77cd734f557a0f1b507e0869d2d5c9913c52fcd78b42b8f59ad3ae92226e292ea4439b5486629b739f4cca3d7f21cef79045427656fd1679dc5ab23686e13500dcb6284df60599ce81e2570d1cd5c7c2e0026640177bf1395fcf6e999acac08e3a993c3700ad891b1a68d5efc32a4b4f9cc8841e837e778c2500eb6cffc1b9970b2adf724839c7711ebbb2ee3e55f7aa97746d7538153589deafeef63eee6dfbd43fc72e0b763a0e4709da3deb26691303e99230a93c490029383b322099363ba3b2f76b4773c0c43907361b578cfb312cde55ea6de2f477c351ac82786d15b52f08a42385b2a3349116d34f8719264f79082d7c24165423a8e6764c53b922a0b3121cbb88976e6f53c455be77521bc1ad4997135ff24c520b2fa0002cbcc8eb8ee5cb33b1140dc811ee36816f47f23ff0b77d6680d597ec2fe77f5bfe1bb75c3eddb2356940c01e694da66d1c4fd78f7df5857111c01bb5e9954585e54086af287dc0ce861d921b378e9a2a9c9c5a37d9812595063643b1dae4afa57d884501ee0de2d7e39692ed5ecbd2ba1d9bf4e3f291cf0b1dfb809a2f915ae90bd5fbe76d5848752c298f34e69d8e95f6f3c8a8ef365d0927811b8a90c8f58836da07c058f71b01025af8c9829f761d71465d3d813e1e08a7d8f66dcb0f98daa19bb106fb9b25d49a35e8900e6de4502668cecbb9638c5b0d158317970e802be345ab3570f6a452e18da421fb4957429ec4b6c481b5393be9c7f1cea3d77ad1c935ce6cab01ed08f7f24e5b01d25105211d5e28b25d3a5fea30e3c4cd1289bc2606728f127574cdfed91d7c19d7381c3e532c92d7e532e74f3d24281cbf0f4e1908dd4f5cf145daeb21db6b34f2fe175aafd1c20224544c113f132cefe620bd99c5caff7b74d6acf8a1aae2fda5212ec64c80d647308439d5f90f6f481101599b539cd09a1bdfc510b6c9027c879f76bfd397dce9d3985ff01e62ee0455372960b68202412c6d5eb7b09c36f265b7b8b3822aa489dc169f8079e71dc96e0b75de2ade686761b067416e4915287dfdd6309946487a68115ee9d0bec73ffc63223e9463a30b819297d24824cb20724c6b524d58af1e03264e8e2b8dce59377c78dbd5ff5977782181aeaa8c2bd6d9f3d25ec566fa4a01eb5aeaeb6912acad55ca7336d28e305781bf128d6575dba16110d64c55ec9840f299e353fcc5628f248bd660f4dfa5f3a1bb7fbdac78ec727e87a134c98a98f405a4cd3773e79bd4f22bd3239a5fa8cd5806601e07241b25678f048b05bab6f8da56818f8dd9c97d001f4a7ea8beb3fa65ed7a951878bcef7e1da873e21ac6208cf0852c6cb297c10c84b74582bf59aaa11e7d8239997c9e7fd3c5bbee5b8466c17394fa61771aa10a3541f88419b16bb4fa36126745e99c292911d30ed0fa366dcd62c10879a6826609ab2b80b3a0c2de3d877805a564ce925916063c53d9698bb918eed2b49315fb83465a0db1a63a0528a887f5106dd054edbf381280989581c859a517573a6eb4946e0fcc61956fd5868fd37c788090fd7c3341028cf1bcb38ed595a4fd845ccd45558282c6e23d92d4268875f80ebad1c24f8d247595de2f8b83708b504f674447bc6fa1748b86fdfc971c9275baedda1348324c4dbde22d423744e2d537a4e28d95771b18302bc5d92f9e0ba6b1029a3e73761080a4e6e1b52a9ebe3538cb3e982586c23f0b0cfa78126198a0a496d96734880885e4aef7b35d90af287f9d5b18998fba69cf5a13b9153edc5f1c3cd0d181c1cecb4936a489f34682b056eaf5c57caea4a9ebd9fc7d842bc3850046f925dc430769863922ce5bea6709fa9bf7f21098097d7f47c74269b524c4194bceae0571fe968ebdda85a28fa5be7f794632189da179e248fdc237a3ba3fd53845e42db45747caa6cebf574e9abb75e3b33c1096e40e0e845385d6f961c56fd1c71f92ae31a0c9088b2100b457cf2f8b33ac984fe79ceeb65fde350f9c6229433aa20d226aeb7677e0e7e8002e3e220fb74d4a1bc07ca43fa23fcf9cbabe7799b5b8daeb63b35923c4a92d2c636d36d58e719e6855b57445a26072d716aba7b653dfcdee115b3310b0c8af8649337597c1ac8bcee8b0533cb458d165b4ca4ee72c60a49f4a7061aab09449a318a6dc1d5b1a4f2a7f82c5af241e1f0cbe3e9fd5079e385ec86bc978ca82aaf1de5b470dcbb06b5f0360142857a0519583e3a77a6fbdadfff48de440bb5c3dcb2c3e6624800fa7898ab00242b7109809d58e5aa8a25705266d9bb04f165f843f1c61c23b41f010ad67f80aa8e455385cf3ff89073dc9434ce9be78993d6c73a8adf4db6b540e7a9f60d8dbcf3133a8f5c5c59f8378f2e5aad07f31707fb9834c66d6d0ded8a8b2d984ff5b4bfe70bb6479aecf208beb8f4da7b23957ce77d574993e1a44de0b3a5cb245f0ebf8ea32a22472270798defec3deeb94a4d025d1fe276612ebfe0f4e6e639de1300d47e542fb032150ab0aded71ba693817feb9cb43beb6f3074c2d7bfb77b9b2783e0335449c9a9775ccf9060ab2468a6644ebddd41f70add6d2d24fb9dd377c4f0dce3439283f22075ff3973e4e70e0bdcb53001be03800392084d6768c3e8f7fad09b192a497a36f602d07655d3e6a7ccab561ab92c79506e1e06aad05975accc9b8b48c41da8bc611d331717ee312d77403f9f66ee9a81fa4e624cca690540dca722986dc740a919597f7836ee95b554d3c34db3443ee5b6908f8623b2c82f32b65c3e8c3c0e15c3065d09214ea6290b55bf5520ee92825d9c82745bb5368ddda47036390910e26470b96cfd7c4e7b0df89f897153fd5ab4302de65fcda1f48206346d6051a94d8e0c32b959d914c218f54813811d13d99ef6259f54c0e635c04f875772b38524e94fae3a73109f60d0b00c96c1809f37e8fb37e61620690b07d726d388e9ae5dbc3a1c3557d1e4288da0622d77081ab4cd00ce22243824c363ad1be5cb0ceaad6336a797d8ca6d988c4373b3c00667d651452d50f81a830ac6ebb71559590181eea67dce1599d13f2e778d69a40c2b736dcc7c36782c1788cdc8d5c3820d68093ea84d56daaeaac19c19724ed7d3ebc1b8c1e3092839314dc6eddd99dc0eede13dbcb7fd22d401df8eb7f679a04f785006d3b4c4012bf78b7e43b1b355a9f6d04ca0e86c32d44f73fa514d1e2b147464", 0x2000, 0x0) 1.11904639s ago: executing program 3 (id=690): syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount(&(0x7f00000000c0)=@filename='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, &(0x7f00000001c0)='discard') ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000000)) 1.030297322s ago: executing program 4 (id=691): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) r1 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, &(0x7f00000006c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)=ANY=[@ANYBLOB="4800000010001f"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)=ANY=[@ANYBLOB="4800000010001f"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000000280)=@ethtool_drvinfo={0x3, "36557fb79d8951c5588783b3f8c85ea1428a5bc3faf038a9fc939b941480eb73", "269c7c1dd97cf9a2e5e1e77d235a6e1427c23f24479a8f375e903772a5cba9cd", "69a242b24596dae8c735e5e66b795720482f4f1e77b5ef75a2888720c61f4971", "3c7ff85395ca594f57296bfa99913aaab0470a97591a843c66b8a3a800", "871bf5766c5e6bfc3baadd357a90abc1b11c4faf312d130721a99f1b6afac90b", "00fdffff1a00a90400", 0x5, 0x7fff, 0x800, 0x9, 0x9}}) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(r4) (async) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000eb40000000000000", @ANYRES32], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000eb40000000000000", @ANYRES32], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) creat(&(0x7f0000000380)='./file0\x00', 0x80) (async) creat(&(0x7f0000000380)='./file0\x00', 0x80) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) (async) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = syz_io_uring_setup(0x2458, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x0, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000000c0)=@IORING_OP_MSG_RING={0x28, 0x48, 0x0, r9, 0x0, &(0x7f00000001c0)}) io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c009900f40000002a000000080026007f1700000800270002000000"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c009900f40000002a000000080026007f1700000800270002000000"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 719.919296ms ago: executing program 4 (id=692): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000c80)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x0, 0x6, {{0x18, 0x4, 0x3, 0x3d, 0x60, 0x64, 0x0, 0x6, 0x4, 0x0, @multicast1, @local, {[@generic={0x86, 0x7, "0f9bf74186"}, @cipso={0x86, 0xf, 0x3, [{0x7, 0x9, "4024c24903e945"}]}, @rr={0x7, 0x17, 0x3f, [@private=0xa010101, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xf, 0xbe, [@dev={0xac, 0x14, 0x14, 0xb}, @empty, @local]}, @generic={0x88, 0xf, "7b6142987ba81492b29965026f"}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x30241308}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x76}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x40840) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r5, @ANYBLOB="010027bd7000fcdbdf250100000014000180080003000300000008000400", @ANYRES32, @ANYBLOB="04000300ac00028054000180080001000300000008000100060000000800010000000000080001000700000008000100080000000800010007000000080001000200000008000100020000000800010002000000080001000800000024000180080001000300000008000100020000000800010000000000080001000000000014000180080001000200000008000100030000001c000180080001000000000008000100140000000800010001000000040003003800028034000180080001000500000008000100050000000800010006000000080001000800000008000100080000000800010002000000040003"], 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x4050) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040af1f2f5e199fe10549d05355009ac16451503443ac4df6faa8c1ecbf1cada62b1f6b21445d6ef908884a510b4e3997b160d0d5a0cef66063397ebe792f4f0b00000e7fae7761ba23fdf6ef8e152a0abfc4d6f189a658359f05882896498e23eb1f13c2d847805261bb6d0059dc6b6e35e9c9ff30a2c14a2283cca3d3bf063c368164e3b08f5853d393d9d5f4c784672831c4eb0a94fcd724a46ccc964dec3a3087ed3fba7bf947ba782009751ee72ebf848aad3", @ANYRESDEC=r0], 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042c"], 0x14) eventfd2(0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x6, 0x1}}, 0x20) close_range(r6, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x400) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) 590.205972ms ago: executing program 0 (id=693): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x102) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f0000000080)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18,\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x9f\xda8\xc8\xc6\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf8\xb9S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88X\xfe\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]') 522.8719ms ago: executing program 33 (id=693): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x102) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f0000000080)='gid=0,no9\xe1\x12 \x91\xfdP\x83\x0e\xb9G!8\xb0\x89\x99\x81\x02\x85\x1cE\b\x9f\x0f8-\xf6\xa4 \x99\x8d\x1d\x8a\xc7\xc5\x96\xe8Ee\xd5\xac\x18,\x9d\tIr\xdd\\\x95\x9eu}\x06ib\x88\x8c\x9d\xde\xeaT0;\xb4\x1f\x8cm\x15y\xb4[Gc\xaf\xee#\xcf>Qk\xcf\xfc\x12bY\xfc&\x93\xe0\xcc#\x93w\x84@/VV\xbc\x0eL\xeb~1\x832\xa7\xf7l\x1b\xffh\x96O\x84h\x1b\'\x15\xae\xc8\xfbrK1\x1b\x82\\kU{!\x8fe\xbd\xfa\xf3\xac\xdc\x9a7\xbb\xdf\xdf\n\xc4U\xfa\x15\x03e\xe2[\xa6\xd3\xce%\b#s\x05\x00\x00\xc0\x03\x84\x0e\xc3\x0e\xce\x1e\xe4\xc8\xd4s\xd8\xe4W\x8a\x18j\xc4S\xbf\xc9\xcc1\x87\xa0\f\x91/\x8b\a\xdd\x1bj\xff\xae\xfcJM\x9b\xc3\xe6q\xc1T\x19\xa9,\xef\x8ax\xbb\x18\xe7\x99\xff\x10\x15S\x19\'?\xfbt/\x86\xc6\xd3\xb2c\xc4*\x06\x05NT\xaa_\x9f\xda8\xc8\xc6\x8d\x87Yk\xa1\x83\x9f\x86.[\x83\xdf&\x13\xcc\xb9\x01`D7R\xb7o\xa1\x1e\xffD#\t\x18i\xed\xa4<\x9c\x02\x00\x82\xbd\x93\x9e+\x03\xc6w?\x83\x05\x0e\xf3TB]\xc0V\x1b\xf3\xfe\xe1s1r\xcb\xbc9\x19#3k\xd4#r\x9e=C\xd6k\xf8\xb9S\xb3\xf4\x84\xd8)\x17L\xeb\xf4\xf3iW\xe6\x9b\x8a\x13\x01\x0ej\x88X\xfe\xf7e;\xdd\xe1\xfc\x9c\x8a\xae>=n\xb3\x12\x7f\x94\x19~\x93\x92xK\x9b\x9e\xa6\x9e\x16v\"e\xe80\xa3%oS\xb4\xad\xb1\xb6\xe0\xef\x1fy\xf2\x1aN\xd7\xee\\*6\xa6\x8e\x84 \xc5\xc0\xd4/\x0eVg\xc1\xd9\xcb\xdc\xc7p\xef\x17\xfc\xc2\xef\xb9\x03\b*\x1c\xc6\xe8\x9a\xe0o\xba\x1d {%\x904\xa2\x8f\xed\xca%Z\x1a#\xddA7\x1b\xdf\xd5]') 479.116933ms ago: executing program 1 (id=695): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000001340)=0x10) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f0000000180)=0x8) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000003c0)="276dc7feb49c57c2a1ad8842760ba91a4000eda5cd4c7ff61ca1ce5aa7c35b172c2be1aa20d5324cd6dd2e7ea318b995ce09f810da541def6afc76ac9b2cdd24f9f50d25b80e102ca8bcd047883034664af2dd384cc23065ea42a18a2e51b95eecfbd616f66865aae3053224c4f48abe5f93949191b3a92c920260cd8276dace", 0x80}, {&(0x7f00000004c0)="17", 0x1}], 0x2}}], 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x9) syz_open_dev$tty20(0xc, 0x4, 0x0) timerfd_gettime(r0, &(0x7f0000000100)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000140)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000013c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000001340)=0x10) (async) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f0000000180)=0x8) (async) accept4(r2, 0x0, 0x0, 0x0) (async) sendmmsg$inet6(r5, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000003c0)="276dc7feb49c57c2a1ad8842760ba91a4000eda5cd4c7ff61ca1ce5aa7c35b172c2be1aa20d5324cd6dd2e7ea318b995ce09f810da541def6afc76ac9b2cdd24f9f50d25b80e102ca8bcd047883034664af2dd384cc23065ea42a18a2e51b95eecfbd616f66865aae3053224c4f48abe5f93949191b3a92c920260cd8276dace", 0x80}, {&(0x7f00000004c0)="17", 0x1}], 0x2}}], 0x1, 0x0) (async) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0x9) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) timerfd_gettime(r0, &(0x7f0000000100)) (async) 475.968503ms ago: executing program 3 (id=696): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x1}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001200)=[{&(0x7f0000002100)="44671519", 0x4}], 0x1, 0x6) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r6, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0xadabe59b}], 0x1, 0x40010061, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a0000000c000780080011400000000011000300686173683a69702c6d61726b00"], 0x58}}, 0x0) sendmmsg$inet(r4, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)="0e", 0x1}], 0x1}}], 0x1, 0x4008440) splice(r2, 0x0, r3, 0x0, 0xfdef, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 350.504713ms ago: executing program 3 (id=697): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x80801, 0x0) r2 = dup3(r1, r0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, 0x0, &(0x7f0000000100)) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0xfe}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) ioctl$KVM_REINJECT_CONTROL(r6, 0xae71, &(0x7f0000000340)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x1008000, &(0x7f0000000100)="422ea372f8e4458e29a36b1d6c377d784e13e284a2100ca188f995cd06f7c3db3fa496aa0575c6622229a9f433f879e589eb00f55609e3", 0x37, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000280)="6d32e1c30e18b94325ce5e2bcbf49ff12117924fb7752c") ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r10, r9, 0x25, 0x8, @val=@iter={0x0}}, 0x20) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @local}, 0x10) 350.33933ms ago: executing program 5 (id=694): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0xfffe, 0x0, 0x0, 0x300}, 0x9c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4}], 0x1c) process_madvise(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000080)="9f421664beafd0063732222dbc36b96b7889739256e7deec65a4906a5101dce56869c1a902cb336cfa8635659097d576", 0x30}], 0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x6, 0x0) sendmmsg$unix(r3, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)="81b120e83c1791209d86616aef72c236733e7ffdb6e9c31b743855899833de3eb7dae4118906b6a15cde178a7377d0f9aecabb1351c05c9c9aa40df92c0610bc5cde84919aed85e6aa31", 0x4a}, {&(0x7f00000001c0)="6b143b0c26d5c4637f19cab1be24cb988e0379924074f2bf09203c343066fe7e58636660a5b54697f7c2fde61d8caf7383433fcf4e12489f0a51295d2665829942be827b5c4ccf689d26a6bf18b53c38c9cd13062fca94e0c925ae39f0a7838ff08990e8285a54d658bfa6130b93ae0bcf4bd15c1b9f04bdfab33826cec7b692246ddf1fa868134a8faf22a7737b7a70", 0x90}], 0x2, 0x0, 0x0, 0x800}}], 0x1, 0x8010) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000040)) 224.862069ms ago: executing program 3 (id=698): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x8100, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000540)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000500)}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1]) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (rerun: 32) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) (async) r4 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r4, 0xc0385720, &(0x7f0000000000)={0x1}) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x200, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfffc}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x9ead}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x800) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000180)=""/98, 0x62) 110.768529ms ago: executing program 5 (id=694): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0xfffe, 0x0, 0x0, 0x300}, 0x9c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4}], 0x1c) process_madvise(0xffffffffffffffff, &(0x7f0000001440)=[{&(0x7f0000000080)="9f421664beafd0063732222dbc36b96b7889739256e7deec65a4906a5101dce56869c1a902cb336cfa8635659097d576", 0x30}], 0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x6, 0x0) sendmmsg$unix(r3, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)="81b120e83c1791209d86616aef72c236733e7ffdb6e9c31b743855899833de3eb7dae4118906b6a15cde178a7377d0f9aecabb1351c05c9c9aa40df92c0610bc5cde84919aed85e6aa31", 0x4a}, {&(0x7f00000001c0)="6b143b0c26d5c4637f19cab1be24cb988e0379924074f2bf09203c343066fe7e58636660a5b54697f7c2fde61d8caf7383433fcf4e12489f0a51295d2665829942be827b5c4ccf689d26a6bf18b53c38c9cd13062fca94e0c925ae39f0a7838ff08990e8285a54d658bfa6130b93ae0bcf4bd15c1b9f04bdfab33826cec7b692246ddf1fa868134a8faf22a7737b7a70", 0x90}], 0x2, 0x0, 0x0, 0x800}}], 0x1, 0x8010) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000040)) 0s ago: executing program 4 (id=699): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r0, 0x227d, &(0x7f00000018c0)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) kernel console output (not intermixed with test programs): 39046][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.741672][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.744576][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.747761][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.754771][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.757875][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.761004][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.762415][ T5997] ptrace attach of "/syz-executor exec"[5936] was attempted by ""[5997] [ 45.763980][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.764620][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.775974][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.779166][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.782140][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.786204][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.790118][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.793196][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.796572][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.799249][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.803150][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.807243][ T5942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.810691][ T5942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.814204][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.822270][ T6000] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 45.822918][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.827713][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.831376][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.833951][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.839807][ T5999] tc_dump_action: action bad kind [ 45.842525][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.846408][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.849263][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.853084][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.855856][ T5937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.858768][ T5937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.862623][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.866958][ T5937] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.870996][ T5937] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.873870][ T5937] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.876379][ T5937] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.899282][ T1253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.902366][ T1253] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.918948][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.923018][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.952776][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.955339][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.969942][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.972244][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.977863][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.982495][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.994510][ T5295] Bluetooth: hci2: command tx timeout [ 45.994513][ T5940] Bluetooth: hci1: command tx timeout [ 45.998444][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.998602][ T65] Bluetooth: hci0: command tx timeout [ 46.001338][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.001536][ T5940] Bluetooth: hci3: command tx timeout [ 46.035648][ T6008] netlink: 'syz.3.7': attribute type 2 has an invalid length. [ 46.082548][ T6020] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 46.109113][ T6026] overlayfs: failed to resolve './file1': -2 [ 46.123283][ T6012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 46.125480][ T6012] IPv6: NLM_F_CREATE should be set when creating new route [ 46.155016][ T65] Bluetooth: unknown link type 5 [ 46.156855][ T65] Bluetooth: hci3: connection err: -111 [ 46.158193][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 46.161126][ T6018] loop6: detected capacity change from 0 to 524287999 [ 46.173188][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 13 prio class 0 [ 46.176296][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.180151][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 46.185255][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.186455][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'. [ 46.187958][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 46.188919][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.195880][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 46.198353][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.201033][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 46.205410][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.208158][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 46.211476][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.214138][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 46.216685][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 46.219189][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 46.289030][ T6040] fuse: Bad value for 'fd' [ 46.489009][ T6051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=6051 comm=syz.3.19 [ 46.494709][ T6051] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 46.536748][ T6051] kvm: emulating exchange as write [ 46.762078][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.764291][ T6062] capability: warning: `syz.3.23' uses deprecated v2 capabilities in a way that may be insecure [ 46.812815][ T6067] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 46.816231][ T6067] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 46.822721][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.825713][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.837881][ T6069] No control pipe specified [ 46.937094][ T6084] Zero length message leads to an empty skb [ 46.946709][ T6083] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 47.090819][ T6094] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 47.094351][ T6094] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 47.097618][ T6094] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 47.102519][ T6094] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 47.106455][ T6094] geneve2: entered promiscuous mode [ 47.108336][ T6094] geneve2: entered allmulticast mode [ 47.144073][ T6102] support for the xor transformation has been removed. [ 47.148379][ T6102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 47.153617][ T6102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 47.369605][ T833] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 47.539735][ T833] usb 6-1: Using ep0 maxpacket: 8 [ 47.543846][ T833] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 47.547596][ T833] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 47.550603][ T833] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 47.553431][ T833] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 47.557149][ T833] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 47.560121][ T833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.776161][ T833] usb 6-1: GET_CAPABILITIES returned 0 [ 47.777896][ T833] usbtmc 6-1:16.0: can't read capabilities [ 47.949203][ T6127] could not open pipe file descriptor [ 47.952479][ T6127] netlink: 'syz.0.43': attribute type 1 has an invalid length. [ 47.977008][ T6091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.982800][ T6091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.995105][ T833] usb 6-1: USB disconnect, device number 2 [ 48.072344][ T65] Bluetooth: hci0: command tx timeout [ 48.072393][ T5940] Bluetooth: hci2: command tx timeout [ 48.074625][ T5295] Bluetooth: hci3: command tx timeout [ 48.076772][ T5940] Bluetooth: hci1: command tx timeout [ 48.195495][ T6138] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.213918][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 48.231782][ T5819] e1000 0000:00:06.0 eth0: Reset adapter [ 48.300983][ T6146] syz.3.48 uses obsolete (PF_INET,SOCK_PACKET) [ 50.150424][ T5940] Bluetooth: hci0: command tx timeout [ 50.150454][ T65] Bluetooth: hci1: command tx timeout [ 50.150548][ T5950] Bluetooth: hci3: command tx timeout [ 50.150580][ T5950] Bluetooth: hci2: command tx timeout [ 50.470792][ T30] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 51.339654][ T39] kauditd_printk_skb: 207 callbacks suppressed [ 51.339665][ T39] audit: type=1400 audit(1736543132.278:322): avc: denied { sys_chroot } for pid=6172 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 51.347544][ T39] audit: type=1400 audit(1736543132.278:323): avc: denied { setgid } for pid=6172 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 51.354043][ T39] audit: type=1400 audit(1736543132.278:324): avc: denied { setrlimit } for pid=6172 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 52.229838][ T65] Bluetooth: hci1: command tx timeout [ 52.239639][ T65] Bluetooth: hci3: command tx timeout [ 52.240014][ T5940] Bluetooth: hci2: command tx timeout [ 52.240320][ T5950] Bluetooth: hci0: command tx timeout [ 62.187518][ T6194] warning: `syz.3.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.187621][ T6191] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.53'. [ 62.194823][ T6191] openvswitch: netlink: Flow actions attr not present in new flow. [ 62.202438][ T39] audit: type=1400 audit(1736543143.148:325): avc: denied { create } for pid=6186 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 62.204558][ T6191] FAT-fs (nullb0): bogus number of reserved sectors [ 62.210877][ T39] audit: type=1400 audit(1736543143.148:326): avc: denied { mounton } for pid=6186 comm="syz.0.53" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 62.234554][ T6191] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 62.241190][ T39] audit: type=1400 audit(1736543143.188:327): avc: denied { write } for pid=6186 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 62.257917][ T39] audit: type=1400 audit(1736543143.198:328): avc: denied { ioctl } for pid=6197 comm="syz.1.57" path="socket:[9856]" dev="sockfs" ino=9856 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.265723][ T39] audit: type=1400 audit(1736543143.208:329): avc: denied { create } for pid=6203 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.274541][ T39] audit: type=1400 audit(1736543143.218:330): avc: denied { bind } for pid=6203 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.280076][ T39] audit: type=1400 audit(1736543143.218:331): avc: denied { listen } for pid=6203 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.285367][ T39] audit: type=1400 audit(1736543143.218:332): avc: denied { connect } for pid=6203 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.291143][ T39] audit: type=1400 audit(1736543143.218:333): avc: denied { setopt } for pid=6203 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.296612][ T39] audit: type=1400 audit(1736543143.218:334): avc: denied { write } for pid=6203 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.460000][ T6220] netlink: 83 bytes leftover after parsing attributes in process `syz.1.65'. [ 62.511656][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 62.539572][ T30] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 62.689717][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 62.693675][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 62.696901][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 62.700110][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 62.702863][ T30] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.706521][ T30] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 62.709018][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.920436][ T30] usb 8-1: GET_CAPABILITIES returned 0 [ 62.922088][ T30] usbtmc 8-1:16.0: can't read capabilities [ 63.121675][ T6199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.125136][ T6199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.130443][ T833] usb 8-1: USB disconnect, device number 2 [ 63.408704][ T6284] tipc: Started in network mode [ 63.410890][ T6284] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 63.413725][ T6284] tipc: Enabled bearer , priority 0 [ 63.453605][ T6289] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 63.562785][ T6298] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 63.570195][ T6298] IPv4: Oversized IP packet from 127.202.26.0 [ 63.734876][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 63.742214][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 63.950370][ T6340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.86'. [ 64.046601][ T6340] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 64.049953][ T6340] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 64.146633][ T6346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60944 sclass=netlink_route_socket pid=6346 comm=syz.2.88 [ 64.409520][ T5819] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.410859][ T1019] tipc: Node number set to 11578026 [ 64.502889][ T6357] xt_time: unknown flags 0xc [ 64.562774][ T5819] usb 6-1: Using ep0 maxpacket: 8 [ 64.565726][ T5819] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 64.568878][ T5819] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 64.572448][ T5819] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 64.575966][ T5819] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.579875][ T5819] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 64.582563][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.788468][ T5819] usb 6-1: GET_CAPABILITIES returned 0 [ 64.793370][ T5819] usbtmc 6-1:16.0: can't read capabilities [ 64.818817][ T6364] fuse: Unknown parameter 'oroup_iþ00000000000000000000' [ 64.823131][ T6364] fuse: Bad value for 'fd' [ 64.871654][ T6367] netlink: 100 bytes leftover after parsing attributes in process `syz.3.95'. [ 64.991336][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.994447][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.000088][ T35] usb 6-1: USB disconnect, device number 3 [ 65.188291][ T6341] overlayfs: empty lowerdir [ 65.233648][ T6391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.102'. [ 65.556132][ T6410] netlink: 60 bytes leftover after parsing attributes in process `syz.1.106'. [ 65.955557][ T6429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.111'. [ 66.037371][ T6430] geneve0: entered allmulticast mode [ 66.070543][ T6450] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 66.315894][ T833] kernel write not supported for file /125/attr/exec (pid: 833 comm: kworker/2:2) [ 66.946009][ T6494] netlink: 'syz.3.128': attribute type 62 has an invalid length. [ 66.989297][ T6496] mkiss: ax0: crc mode is auto. [ 66.994983][ T6496] syz.3.129: attempt to access beyond end of device [ 66.994983][ T6496] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 66.998685][ T6496] VFS: unable to read V7 FS superblock on device nbd3. [ 67.000771][ T6496] VFS: could not find a valid V7 on nbd3. [ 67.092872][ T6500] bond1: entered promiscuous mode [ 67.094756][ T6500] bond1: entered allmulticast mode [ 67.096866][ T6500] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.103492][ T6498] program syz.3.130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.106133][ T6498] ata1.00: invalid service action 20 [ 67.305127][ T39] kauditd_printk_skb: 103 callbacks suppressed [ 67.305137][ T39] audit: type=1326 audit(1736543148.248:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.0.131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3a385d29 code=0x7ffc0000 [ 67.313808][ T39] audit: type=1326 audit(1736543148.248:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.0.131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3a385d29 code=0x7ffc0000 [ 67.320396][ T39] audit: type=1326 audit(1736543148.258:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.0.131" exe="/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fcf3a385d29 code=0x7ffc0000 [ 67.326979][ T39] audit: type=1326 audit(1736543148.258:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.0.131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3a385d29 code=0x7ffc0000 [ 67.333493][ T39] audit: type=1326 audit(1736543148.258:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.0.131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3a385d29 code=0x7ffc0000 [ 67.340013][ T39] audit: type=1326 audit(1736543148.258:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.0.131" exe="/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fcf3a385d29 code=0x7ffc0000 [ 67.346419][ T39] audit: type=1326 audit(1736543148.275:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.0.131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3a385d29 code=0x7ffc0000 [ 67.353126][ T39] audit: type=1326 audit(1736543148.275:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.0.131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3a385d29 code=0x7ffc0000 [ 67.360715][ T39] audit: type=1326 audit(1736543148.275:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.0.131" exe="/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fcf3a385d29 code=0x7ffc0000 [ 67.367176][ T39] audit: type=1326 audit(1736543148.275:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.0.131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf3a385d29 code=0x7ffc0000 [ 67.619513][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.769485][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 67.772788][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.776925][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.780942][ T35] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 67.784364][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.788339][ T35] usb 5-1: config 0 descriptor?? [ 67.879272][ T6520] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 68.204315][ T35] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 68.358104][ T6546] overlayfs: conflicting options: userxattr,metacopy=on [ 68.367469][ T6546] overlayfs: conflicting options: userxattr,metacopy=on [ 68.467991][ T6505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.131'. [ 68.500929][ T6558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.147'. [ 68.504951][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.147'. [ 68.507642][ T6558] netlink: 120 bytes leftover after parsing attributes in process `syz.3.147'. [ 68.511456][ T6558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=6558 comm=syz.3.147 [ 68.639655][ T5940] Bluetooth: hci3: command tx timeout [ 68.707098][ T6572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.714596][ T6572] process 'syz.3.151' launched './file0' with NULL argv: empty string added [ 68.759067][ T6577] capability: warning: `syz.1.152' uses 32-bit capabilities (legacy support in use) [ 68.764620][ T6575] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 69.149186][ T6597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.159'. [ 69.161053][ T833] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 69.309561][ T833] usb 8-1: Using ep0 maxpacket: 8 [ 69.316634][ T833] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 69.321460][ T833] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.324366][ T833] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.327106][ T833] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.330011][ T833] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.333825][ T833] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 69.336469][ T833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.607689][ T6620] gfs2: not a GFS2 filesystem [ 69.643700][ T833] usb 8-1: usb_control_msg returned -32 [ 69.645503][ T833] usbtmc 8-1:16.0: can't read capabilities [ 69.661413][ T25] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 70.055257][ T6624] overlay: ./bus is not a directory [ 70.059010][ T6624] tmpfs: Unknown parameter '‘' [ 70.442065][ T6627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.167'. [ 70.519796][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.167'. [ 70.596913][ T6633] netlink: 68 bytes leftover after parsing attributes in process `syz.0.167'. [ 71.115292][ T5994] usb 5-1: USB disconnect, device number 2 [ 71.115671][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.832031][ T6672] bpf: Bad value for 'gid' [ 71.834176][ T6672] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 72.115364][ T5315] usb 8-1: USB disconnect, device number 3 [ 72.309772][ T39] kauditd_printk_skb: 1822 callbacks suppressed [ 72.309787][ T39] audit: type=1326 audit(1736543153.255:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ed985d29 code=0x50000 [ 72.325304][ T39] audit: type=1326 audit(1736543153.265:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ed985d29 code=0x50000 [ 72.334951][ T39] audit: type=1326 audit(1736543153.265:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ed985d29 code=0x50000 [ 72.344293][ T39] audit: type=1326 audit(1736543153.265:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ed985d29 code=0x50000 [ 72.353767][ T39] audit: type=1326 audit(1736543153.265:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ed985d29 code=0x50000 [ 72.362779][ T39] audit: type=1326 audit(1736543153.265:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ed985d29 code=0x50000 [ 72.372461][ T39] audit: type=1326 audit(1736543153.265:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ed985d29 code=0x50000 [ 72.381382][ T39] audit: type=1326 audit(1736543153.265:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ed985d29 code=0x50000 [ 72.393065][ T39] audit: type=1326 audit(1736543153.265:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ed985d29 code=0x50000 [ 72.402307][ T39] audit: type=1326 audit(1736543153.265:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6697 comm="syz.1.186" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ed985d29 code=0x50000 [ 72.571752][ T6724] 9pnet_fd: Insufficient options for proto=fd [ 72.672543][ T6729] xt_hashlimit: size too large, truncated to 1048576 [ 72.870583][ T6731] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.873017][ T6731] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.878970][ T6731] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.884192][ T6731] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.885998][ T6731] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.890713][ T6731] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 72.892973][ T6731] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 72.894708][ T6731] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.897962][ T6731] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 72.902304][ T6731] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.904727][ T6731] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 72.908687][ T6731] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 73.020243][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 73.038132][ T6737] Invalid option length (1651) for dns_resolver key [ 73.077667][ T6742] cgroup: Unknown subsys name 'cpuset' [ 73.173527][ T6745] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 73.411836][ T6766] tmpfs: Unknown parameter 'm' [ 73.430381][ T6766] tmpfs: Bad value for 'mpol' [ 73.745042][ T6771] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 73.753169][ T6771] netlink: 'syz.3.204': attribute type 4 has an invalid length. [ 73.930587][ T6776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=6776 comm=syz.3.205 [ 73.935975][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 73.983405][ T6778] bad cache= option: none [ 73.983405][ T6778] [ 73.985431][ T6778] CIFS: VFS: bad cache= option: none [ 74.012065][ T6780] syz.3.207: attempt to access beyond end of device [ 74.012065][ T6780] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 74.015996][ T6780] syz.3.207: attempt to access beyond end of device [ 74.015996][ T6780] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 74.426188][ T6798] kAFS: No cell specified [ 74.472399][ T6808] ======================================================= [ 74.472399][ T6808] WARNING: The mand mount option has been deprecated and [ 74.472399][ T6808] and is ignored by this kernel. Remove the mand [ 74.472399][ T6808] option from the mount to silence this warning. [ 74.472399][ T6808] ======================================================= [ 74.526813][ T6811] netlink: 32 bytes leftover after parsing attributes in process `syz.0.215'. [ 74.601070][ T6816] tmpfs: Bad value for 'mpol' [ 74.602964][ T6816] tmpfs: Bad value for 'mpol' [ 74.604793][ T6816] tmpfs: Bad value for 'mpol' [ 74.606943][ T6816] tmpfs: Bad value for 'mpol' [ 74.609193][ T6816] tmpfs: Bad value for 'mpol' [ 74.612018][ T6816] tmpfs: Bad value for 'mpol' [ 74.614192][ T6816] tmpfs: Bad value for 'mpol' [ 74.616473][ T6816] tmpfs: Bad value for 'mpol' [ 74.618755][ T6816] tmpfs: Bad value for 'mpol' [ 74.621413][ T6816] tmpfs: Bad value for 'mpol' [ 74.623350][ T6816] tmpfs: Bad value for 'mpol' [ 74.625268][ T6816] tmpfs: Bad value for 'mpol' [ 74.627203][ T6816] tmpfs: Bad value for 'mpol' [ 74.629122][ T6816] tmpfs: Bad value for 'mpol' [ 74.631837][ T6816] tmpfs: Bad value for 'mpol' [ 74.633812][ T6816] tmpfs: Bad value for 'mpol' [ 74.636393][ T6816] tmpfs: Bad value for 'mpol' [ 74.638254][ T6816] tmpfs: Bad value for 'mpol' [ 74.640304][ T6816] tmpfs: Bad value for 'mpol' [ 74.642239][ T6816] tmpfs: Bad value for 'mpol' [ 74.644261][ T6816] tmpfs: Bad value for 'mpol' [ 74.646149][ T6816] tmpfs: Bad value for 'mpol' [ 74.648019][ T6816] tmpfs: Bad value for 'mpol' [ 74.650086][ T6816] tmpfs: Bad value for 'mpol' [ 74.651954][ T6816] tmpfs: Bad value for 'mpol' [ 74.653885][ T6816] tmpfs: Bad value for 'mpol' [ 74.655799][ T6816] tmpfs: Bad value for 'mpol' [ 74.657655][ T6816] tmpfs: Bad value for 'mpol' [ 74.659762][ T6816] tmpfs: Bad value for 'mpol' [ 74.661608][ T6816] tmpfs: Bad value for 'mpol' [ 74.663439][ T6816] tmpfs: Bad value for 'mpol' [ 74.665328][ T6816] tmpfs: Bad value for 'mpol' [ 74.667192][ T6816] tmpfs: Bad value for 'mpol' [ 74.739476][ T35] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 74.879451][ T5940] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.893400][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.897406][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.903227][ T35] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 74.906603][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.918614][ T35] usb 8-1: config 0 descriptor?? [ 74.929481][ T6001] hid-generic 0003:0000:000E.0003: hidraw1: USB HID v0.3d Device [syz1] on syz1 [ 74.969482][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 74.970550][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 74.970590][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 75.004846][ T5950] Bluetooth: hci0: unexpected event for opcode 0x080b [ 75.131588][ T35] usbhid 8-1:0.0: can't add hid device: -71 [ 75.134058][ T35] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 75.140952][ T35] usb 8-1: USB disconnect, device number 4 [ 75.364395][ T5950] Bluetooth: hci2: hardware error 0x07 [ 75.529898][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 75.532653][ T6861] netlink: 36 bytes leftover after parsing attributes in process `syz.1.230'. [ 75.534764][ T6858] block device autoloading is deprecated and will be removed. [ 75.923081][ T6873] netlink: 'syz.0.234': attribute type 32 has an invalid length. [ 75.925343][ T6873] netlink: 'syz.0.234': attribute type 3 has an invalid length. [ 76.232746][ T58] cfg80211: failed to load regulatory.db [ 76.279481][ T5995] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.363764][ T6883] netlink: 112 bytes leftover after parsing attributes in process `syz.1.238'. [ 76.425632][ T6891] input: syz1 as /devices/virtual/input/input5 [ 76.440347][ T5995] usb 5-1: Using ep0 maxpacket: 8 [ 76.444263][ T5995] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 76.449882][ T5995] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 76.455837][ T5995] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.463527][ T5995] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.469108][ T5995] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.473463][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.483284][ T6896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.241'. [ 76.622384][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 76.682742][ T5995] usb 5-1: GET_CAPABILITIES returned 0 [ 76.689350][ T5995] usbtmc 5-1:16.0: can't read capabilities [ 76.785844][ T6920] mmap: syz.1.247 (6920) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.803336][ T6920] overlayfs: invalid origin (0000) [ 76.885790][ T6875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.888742][ T6875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.893946][ T25] usb 5-1: USB disconnect, device number 3 [ 76.921893][ T6924] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 76.921967][ T6926] futex_wake_op: syz.3.249 tries to shift op by -1; fix this program [ 76.937611][ T6924] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 76.940417][ T6924] pim6reg0: owner set to 776 [ 77.029754][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.029764][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.098606][ T6934] program syz.1.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.165631][ T6936] netlink: 'syz.1.252': attribute type 1 has an invalid length. [ 77.175224][ T6936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.188612][ T6936] bond1: (slave gretap1): making interface the new active one [ 77.195163][ T6936] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 77.285677][ T6943] kvm: faulting far call emulation tainted memory [ 77.314518][ T6949] devtmpfs: Cannot enable quota on remount [ 77.419003][ T39] kauditd_printk_skb: 38478 callbacks suppressed [ 77.419013][ T39] audit: type=1400 audit(1736543158.365:40758): avc: denied { ioctl } for pid=6950 comm="syz.3.258" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.419639][ T6951] program syz.3.258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.429594][ T5950] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 77.433397][ T6951] program syz.3.258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.491213][ T6953] trusted_key: syz.0.259 sent an empty control message without MSG_MORE. [ 77.558392][ T5950] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 77.578366][ T39] audit: type=1400 audit(1736543158.525:40759): avc: denied { append } for pid=6965 comm="syz.3.262" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.584678][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.263'. [ 77.684924][ T39] audit: type=1400 audit(1736543158.635:40760): avc: denied { listen } for pid=6971 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 77.690777][ T39] audit: type=1400 audit(1736543158.635:40761): avc: denied { accept } for pid=6971 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 78.049535][ T6001] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 78.209513][ T6001] usb 8-1: Using ep0 maxpacket: 8 [ 78.212416][ T6001] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.216036][ T6001] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.218684][ T6001] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.222893][ T6001] usb 8-1: config 0 descriptor?? [ 78.350384][ T8] hid (null): unknown global tag 0xe [ 78.354105][ T8] hid-generic FFF8:0009:000C.0004: unknown main item tag 0x4 [ 78.356373][ T8] hid-generic FFF8:0009:000C.0004: unknown main item tag 0x1 [ 78.359609][ T8] hid-generic FFF8:0009:000C.0004: unknown main item tag 0x0 [ 78.361837][ T8] hid-generic FFF8:0009:000C.0004: unknown main item tag 0x5 [ 78.364697][ T8] hid-generic FFF8:0009:000C.0004: unknown main item tag 0x4 [ 78.366905][ T8] hid-generic FFF8:0009:000C.0004: unknown main item tag 0x6 [ 78.369094][ T8] hid-generic FFF8:0009:000C.0004: unknown main item tag 0xd [ 78.372915][ T8] hid-generic FFF8:0009:000C.0004: unknown global tag 0xe [ 78.375240][ T8] hid-generic FFF8:0009:000C.0004: item 0 4 1 14 parsing failed [ 78.378122][ T8] hid-generic FFF8:0009:000C.0004: probe with driver hid-generic failed with error -22 [ 78.427230][ T6001] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 78.532535][ T39] audit: type=1400 audit(1736543159.485:40762): avc: denied { create } for pid=6993 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 78.541698][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 78.719517][ T25] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 78.879467][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 78.883967][ T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 78.887500][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 78.890162][ T6001] usb 8-1: USB disconnect, device number 5 [ 78.890648][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 78.899340][ T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 78.903457][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 78.906110][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.041063][ T5950] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 79.043712][ T5950] Bluetooth: hci0: Injecting HCI hardware error event [ 79.046656][ T5950] Bluetooth: hci0: hardware error 0x00 [ 79.109516][ T5940] Bluetooth: hci3: command 0x0c1a tx timeout [ 79.112819][ T25] usb 6-1: GET_CAPABILITIES returned 0 [ 79.114695][ T25] usbtmc 6-1:16.0: can't read capabilities [ 79.119629][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.212272][ T7004] SELinux: policydb version 2111200701 does not match my version range 15-33 [ 79.214978][ T39] audit: type=1400 audit(1736543160.165:40763): avc: denied { load_policy } for pid=7003 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 79.216806][ T7004] SELinux: failed to load policy [ 79.260164][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 79.318700][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.322322][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.326908][ T25] usb 6-1: USB disconnect, device number 4 [ 79.376946][ T7009] syz.0.275[7009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.377004][ T7009] syz.0.275[7009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.381075][ T7009] syz.0.275[7009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.488735][ T39] audit: type=1400 audit(1736543160.435:40764): avc: denied { listen } for pid=7012 comm="syz.3.276" lport=52797 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.503218][ T39] audit: type=1400 audit(1736543160.455:40765): avc: denied { accept } for pid=7012 comm="syz.3.276" lport=52797 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.511051][ T39] audit: type=1400 audit(1736543160.455:40766): avc: denied { setopt } for pid=7012 comm="syz.3.276" lport=52797 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 79.520001][ T39] audit: type=1400 audit(1736543160.455:40767): avc: denied { getattr } for pid=7012 comm="syz.3.276" path="socket:[15152]" dev="sockfs" ino=15152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 79.863816][ T7028] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 80.130979][ T25] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 80.279606][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 80.290001][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.294901][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.298735][ T25] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.301490][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.305557][ T25] usb 8-1: config 0 descriptor?? [ 80.640345][ T6652] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 80.774131][ T7069] overlayfs: missing 'lowerdir' [ 80.799967][ T6652] usb 6-1: Using ep0 maxpacket: 8 [ 80.802697][ T6652] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 80.805920][ T6652] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 80.808831][ T6652] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.810168][ T7071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.812134][ T6652] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.817906][ T6652] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.820561][ T6652] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.855805][ T7071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.980996][ T7077] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 80.985070][ T7076] ieee802154 phy1 wpan1: encryption failed: -22 [ 81.034116][ T6652] usb 6-1: GET_CAPABILITIES returned 0 [ 81.035786][ T6652] usbtmc 6-1:16.0: can't read capabilities [ 81.109549][ T5950] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 81.240047][ T5995] usb 6-1: USB disconnect, device number 5 [ 81.262543][ T7081] xt_l2tp: missing protocol rule (udp|l2tpip) [ 81.273708][ T25] usbhid 8-1:0.0: can't add hid device: -71 [ 81.275502][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 81.279788][ T25] usb 8-1: USB disconnect, device number 6 [ 81.379584][ T6001] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.539551][ T6001] usb 5-1: Using ep0 maxpacket: 32 [ 81.542436][ T6001] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 81.547642][ T6001] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 81.550472][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 81.552884][ T6001] usb 5-1: Product: syz [ 81.554094][ T6001] usb 5-1: Manufacturer: syz [ 81.555448][ T6001] usb 5-1: SerialNumber: syz [ 81.558149][ T6001] usb 5-1: config 0 descriptor?? [ 81.560208][ T7085] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 81.816244][ T1019] usb 5-1: USB disconnect, device number 4 [ 82.019556][ T35] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 82.039980][ T7085] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.045083][ T7085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=7085 comm=syz.0.297 [ 82.179734][ T35] usb 6-1: Using ep0 maxpacket: 16 [ 82.187145][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 82.191690][ T35] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 82.194273][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.201478][ T35] usb 6-1: config 0 descriptor?? [ 82.209653][ T35] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input7 [ 82.424945][ T39] kauditd_printk_skb: 78 callbacks suppressed [ 82.424960][ T39] audit: type=1400 audit(1736543163.375:40846): avc: denied { read } for pid=7086 comm="syz.1.298" dev="nsfs" ino=4026532936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.453082][ T39] audit: type=1400 audit(1736543163.385:40847): avc: denied { read open } for pid=7086 comm="syz.1.298" path="net:[4026532936]" dev="nsfs" ino=4026532936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 82.472097][ T39] audit: type=1400 audit(1736543163.385:40848): avc: denied { create } for pid=7086 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.490773][ T39] audit: type=1400 audit(1736543163.395:40849): avc: denied { read write } for pid=5941 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.507458][ T7109] overlayfs: failed to resolve './file0': -2 [ 82.509489][ T39] audit: type=1400 audit(1736543163.395:40850): avc: denied { read write open } for pid=5941 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.516733][ T39] audit: type=1400 audit(1736543163.395:40851): avc: denied { ioctl } for pid=5941 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.525636][ T39] audit: type=1400 audit(1736543163.395:40852): avc: denied { read } for pid=7086 comm="syz.1.298" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.536321][ T7109] netlink: 'syz.3.304': attribute type 10 has an invalid length. [ 82.539533][ T39] audit: type=1400 audit(1736543163.395:40853): avc: denied { read open } for pid=7086 comm="syz.1.298" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.548786][ T39] audit: type=1400 audit(1736543163.415:40854): avc: denied { ioctl } for pid=7086 comm="syz.1.298" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.559469][ T7109] hsr0: entered promiscuous mode [ 82.562275][ T7109] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 82.565250][ T7109] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 82.568761][ T7109] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 82.569855][ T39] audit: type=1400 audit(1736543163.415:40855): avc: denied { listen } for pid=7086 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 82.608684][ T7110] block device autoloading is deprecated and will be removed. [ 82.685007][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.305'. [ 82.959568][ T5995] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 83.119732][ T5995] usb 8-1: Using ep0 maxpacket: 8 [ 83.128485][ T5995] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 83.137219][ T5995] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 83.140198][ T5995] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.143226][ T5995] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.146954][ T5995] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.150004][ T5995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.367495][ T5995] usb 8-1: usb_control_msg returned -71 [ 83.369186][ T5995] usbtmc 8-1:16.0: can't read capabilities [ 83.377819][ T5995] usb 8-1: USB disconnect, device number 7 [ 83.858262][ T7126] xt_hashlimit: max too large, truncated to 1048576 [ 83.862483][ T7126] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 84.138698][ T7141] deleting an unspecified loop device is not supported. [ 84.434730][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.439669][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.454290][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.460548][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.464341][ T5940] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.467810][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.469732][ T7148] bridge: RTM_NEWNEIGH with unconfigured vlan 5 on bridge0 [ 84.543273][ T45] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.621462][ T45] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.638948][ T7154] geneve3: entered promiscuous mode [ 84.641468][ T7154] geneve3: entered allmulticast mode [ 84.660643][ T7156] xt_hashlimit: max too large, truncated to 1048576 [ 84.698902][ T45] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.789926][ T6652] usb 6-1: USB disconnect, device number 6 [ 84.792769][ T5337] bcm5974 6-1:0.0: could not read from device [ 84.812971][ T5337] bcm5974 6-1:0.0: could not read from device [ 84.823636][ T6921] bcm5974 6-1:0.0: could not read from device [ 84.859720][ T45] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.954795][ T7149] chnl_net:caif_netlink_parms(): no params data found [ 85.062866][ T7149] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.064885][ T7149] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.066942][ T7149] bridge_slave_0: entered allmulticast mode [ 85.078969][ T7149] bridge_slave_0: entered promiscuous mode [ 85.084208][ T7149] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.086406][ T7149] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.088535][ T7149] bridge_slave_1: entered allmulticast mode [ 85.091030][ T7149] bridge_slave_1: entered promiscuous mode [ 85.092465][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 85.176247][ T7149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.185963][ T45] bridge_slave_1: left allmulticast mode [ 85.188039][ T45] bridge_slave_1: left promiscuous mode [ 85.191905][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.203503][ T45] bridge_slave_0: left allmulticast mode [ 85.205717][ T45] bridge_slave_0: left promiscuous mode [ 85.207969][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.251530][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 85.273635][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 85.276849][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 85.280316][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 85.283199][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.294602][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.297364][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.359596][ T6652] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 85.482858][ T7177] netlink: 'syz.3.321': attribute type 30 has an invalid length. [ 85.514274][ T25] usb 5-1: usb_control_msg returned -71 [ 85.515905][ T25] usbtmc 5-1:16.0: can't read capabilities [ 85.525130][ T25] usb 5-1: USB disconnect, device number 5 [ 85.529561][ T6652] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 85.544770][ T6652] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.547299][ T6652] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.559493][ T6652] usb 6-1: config 0 interface 0 has no altsetting 0 [ 85.572903][ T6652] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.575481][ T6652] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.578479][ T6652] usb 6-1: config 0 interface 0 has no altsetting 0 [ 85.589050][ T6652] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.592114][ T6652] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.595246][ T6652] usb 6-1: config 0 interface 0 has no altsetting 0 [ 85.609041][ T6652] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.611789][ T6652] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.615158][ T6652] usb 6-1: config 0 interface 0 has no altsetting 0 [ 85.620916][ T6652] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.624519][ T6652] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.627767][ T6652] usb 6-1: config 0 interface 0 has no altsetting 0 [ 85.633659][ T6652] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.636219][ T6652] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.639513][ T6652] usb 6-1: config 0 interface 0 has no altsetting 0 [ 85.642979][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.644704][ T6652] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.649158][ T6652] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.652511][ T6652] usb 6-1: config 0 interface 0 has no altsetting 0 [ 85.654662][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.658073][ T6652] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.658649][ T45] bond0 (unregistering): Released all slaves [ 85.660801][ T6652] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.660816][ T6652] usb 6-1: config 0 interface 0 has no altsetting 0 [ 85.668029][ T6652] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 85.671547][ T6652] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 85.673995][ T6652] usb 6-1: Product: syz [ 85.675229][ T6652] usb 6-1: Manufacturer: syz [ 85.676578][ T6652] usb 6-1: SerialNumber: syz [ 85.680344][ T7149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.683791][ T6652] usb 6-1: config 0 descriptor?? [ 85.691510][ T7177] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 85.694941][ T7177] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 85.702697][ T6652] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 85.767556][ T45] tipc: Disabling bearer [ 85.784467][ T45] tipc: Left network mode [ 85.789976][ T7149] team0: Port device team_slave_0 added [ 85.878724][ T7149] team0: Port device team_slave_1 added [ 85.911204][ T5995] usb 6-1: USB disconnect, device number 7 [ 85.915817][ T5995] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 85.917734][ T7149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.941629][ T7149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.962905][ T7149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.992801][ T7149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.994931][ T7149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.009722][ T7149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.182110][ T7149] hsr_slave_0: entered promiscuous mode [ 86.201307][ T7149] hsr_slave_1: entered promiscuous mode [ 86.206283][ T7149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.208470][ T7149] Cannot create hsr debugfs directory [ 86.245184][ T45] hsr_slave_0: left promiscuous mode [ 86.253724][ T45] hsr_slave_1: left promiscuous mode [ 86.257639][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.260015][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.270352][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.272495][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.311225][ T45] veth1_macvtap: left promiscuous mode [ 86.313058][ T45] veth0_macvtap: left promiscuous mode [ 86.314681][ T45] veth1_vlan: left promiscuous mode [ 86.316280][ T45] veth0_vlan: left promiscuous mode [ 86.549991][ T5940] Bluetooth: hci3: command tx timeout [ 86.616775][ T7196] netlink: 83 bytes leftover after parsing attributes in process `syz.1.325'. [ 86.922398][ T7199] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 87.211384][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.327'. [ 87.292020][ T7207] loop6: detected capacity change from 0 to 262144 [ 87.350546][ T45] team0 (unregistering): Port device team_slave_1 removed [ 87.480643][ C3] I/O error, dev loop6, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 87.485582][ T45] team0 (unregistering): Port device team_slave_0 removed [ 87.485973][ C2] I/O error, dev loop6, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 87.491545][ C2] Buffer I/O error on dev loop6, logical block 32752, async page read [ 87.546229][ T39] kauditd_printk_skb: 730 callbacks suppressed [ 87.546246][ T39] audit: type=1400 audit(1736543168.495:41586): avc: denied { search } for pid=7208 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.556646][ T39] audit: type=1400 audit(1736543168.495:41587): avc: denied { search } for pid=7208 comm="rm" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.565891][ T39] audit: type=1400 audit(1736543168.495:41588): avc: denied { search } for pid=7208 comm="rm" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.996070][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.327'. [ 88.024916][ T39] audit: type=1400 audit(1736543168.975:41589): avc: denied { read write } for pid=5941 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.049480][ T39] audit: type=1400 audit(1736543168.975:41590): avc: denied { read write open } for pid=5941 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.058791][ T39] audit: type=1400 audit(1736543168.975:41591): avc: denied { ioctl } for pid=5941 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.087159][ T39] audit: type=1400 audit(1736543168.985:41592): avc: denied { read write } for pid=5937 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.110997][ T7214] syzkaller0: entered allmulticast mode [ 88.121012][ T39] audit: type=1400 audit(1736543168.985:41593): avc: denied { read write open } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.128767][ T39] audit: type=1400 audit(1736543168.995:41594): avc: denied { ioctl } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.146397][ T39] audit: type=1400 audit(1736543169.025:41595): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 88.205908][ T7221] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 88.361490][ T7149] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.388016][ T7149] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.413415][ T7149] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.428046][ T7149] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.639639][ T5940] Bluetooth: hci3: command tx timeout [ 88.652046][ T7149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.693531][ T7233] netlink: 156 bytes leftover after parsing attributes in process `syz.1.334'. [ 88.699045][ T7149] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.723962][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.726047][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.753843][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.755956][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.853075][ T7237] bridge3: entered promiscuous mode [ 89.858518][ T7149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.987300][ T7261] netlink: 64 bytes leftover after parsing attributes in process `syz.1.340'. [ 89.991957][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 90.146419][ T7266] openvswitch: netlink: Actions may not be safe on all matching packets [ 90.230202][ T7266] input: syz1 as /devices/virtual/input/input8 [ 90.720121][ T5940] Bluetooth: hci3: command tx timeout [ 90.899139][ T7281] vlan0: entered allmulticast mode [ 90.902750][ T7281] bond0: entered allmulticast mode [ 90.904261][ T7281] bond_slave_0: entered allmulticast mode [ 90.905953][ T7281] bond_slave_1: entered allmulticast mode [ 90.915637][ T7281] bond0: left allmulticast mode [ 90.916940][ T7281] bond_slave_0: left allmulticast mode [ 90.918387][ T7281] bond_slave_1: left allmulticast mode [ 90.932474][ T7280] binder: 7273:7280 unknown command 0 [ 90.934009][ T7280] binder: 7273:7280 ioctl c0306201 200001c0 returned -22 [ 91.434354][ T7149] veth0_vlan: entered promiscuous mode [ 91.453577][ T7149] veth1_vlan: entered promiscuous mode [ 91.530717][ T7149] veth0_macvtap: entered promiscuous mode [ 91.547609][ T7149] veth1_macvtap: entered promiscuous mode [ 91.581899][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.584774][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.587567][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.590696][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.593487][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.596427][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.599784][ T7149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.609270][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.612471][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.615180][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.618107][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.621437][ T7149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.631228][ T7149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.633662][ T7149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.636340][ T7149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.638953][ T7149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.783213][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.787082][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.826040][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.828248][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.549624][ T39] kauditd_printk_skb: 1057 callbacks suppressed [ 92.549634][ T39] audit: type=1400 audit(1736543174.496:42653): avc: denied { bpf } for pid=7324 comm="syz.3.354" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.570189][ T39] audit: type=1400 audit(1736543174.506:42654): avc: denied { read write } for pid=7322 comm="syz.1.353" name="video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 92.576765][ T39] audit: type=1400 audit(1736543174.506:42655): avc: denied { read write open } for pid=7322 comm="syz.1.353" path="/dev/video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 92.599503][ T39] audit: type=1400 audit(1736543174.506:42656): avc: denied { perfmon } for pid=7324 comm="syz.3.354" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.605533][ T39] audit: type=1400 audit(1736543174.506:42657): avc: denied { perfmon } for pid=7324 comm="syz.3.354" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.629461][ T39] audit: type=1400 audit(1736543174.506:42658): avc: denied { perfmon } for pid=7324 comm="syz.3.354" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.630452][ T7328] overlayfs: failed to resolve './file0': -2 [ 92.639529][ T39] audit: type=1400 audit(1736543174.506:42659): avc: denied { perfmon } for pid=7324 comm="syz.3.354" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.655636][ T39] audit: type=1400 audit(1736543174.506:42660): avc: denied { perfmon } for pid=7324 comm="syz.3.354" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.663464][ T39] audit: type=1400 audit(1736543174.506:42661): avc: denied { ioctl } for pid=7322 comm="syz.1.353" path="/dev/video2" dev="devtmpfs" ino=957 ioctlcmd=0x5613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 92.673400][ T39] audit: type=1400 audit(1736543174.506:42662): avc: denied { bpf } for pid=7324 comm="syz.3.354" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.684321][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.356'. [ 92.789874][ T5940] Bluetooth: hci3: command tx timeout [ 92.865087][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 92.978542][ T7347] netlink: 'syz.4.361': attribute type 10 has an invalid length. [ 93.017935][ T7347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.026278][ T7347] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 93.137631][ T7352] xt_hashlimit: size too large, truncated to 1048576 [ 93.141245][ T7353] xt_hashlimit: size too large, truncated to 1048576 [ 94.319795][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.323019][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.340497][ T7384] bridge0: entered allmulticast mode [ 94.348053][ T7384] bridge_slave_1: left allmulticast mode [ 94.349684][ T7386] netlink: 'syz.3.369': attribute type 2 has an invalid length. [ 94.351988][ T7386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.369'. [ 94.359496][ T7384] bridge_slave_1: left promiscuous mode [ 94.362341][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.367520][ T7384] bridge_slave_0: left allmulticast mode [ 94.369158][ T7384] bridge_slave_0: left promiscuous mode [ 94.379519][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.811354][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.372'. [ 94.813961][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.372'. [ 94.863714][ T7395] gretap0: entered promiscuous mode [ 94.877496][ T7395] batadv_slave_1: entered promiscuous mode [ 94.921529][ T7402] netlink: 256 bytes leftover after parsing attributes in process `syz.4.374'. [ 94.925431][ T7401] netlink: 256 bytes leftover after parsing attributes in process `syz.4.374'. [ 95.062358][ T7411] 9pnet_fd: Insufficient options for proto=fd [ 95.129513][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.243337][ T7421] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 95.280200][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 95.305180][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 95.308573][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 95.316247][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.319335][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.327482][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.333638][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.478731][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'. [ 95.555555][ T25] usb 5-1: GET_CAPABILITIES returned 0 [ 95.557347][ T25] usbtmc 5-1:16.0: can't read capabilities [ 95.619259][ T7441] syzkaller1: entered promiscuous mode [ 95.621152][ T7441] syzkaller1: entered allmulticast mode [ 95.763272][ T25] usb 5-1: USB disconnect, device number 6 [ 95.833512][ T7448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=7448 comm=syz.3.385 [ 95.902962][ T7450] overlayfs: cannot append lower layer [ 96.475866][ T7458] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 96.829865][ T25] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 96.879998][ T7469] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=7469 comm=syz.0.390 [ 96.885231][ T7468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=7468 comm=syz.0.390 [ 96.981663][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 97.010000][ T25] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 97.013022][ T25] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 97.015769][ T25] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.018490][ T25] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.034030][ T25] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.036564][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.271616][ T25] usb 9-1: GET_CAPABILITIES returned 0 [ 97.273734][ T25] usbtmc 9-1:16.0: can't read capabilities [ 97.496652][ T25] usb 9-1: USB disconnect, device number 2 [ 97.584623][ T39] kauditd_printk_skb: 1487 callbacks suppressed [ 97.584639][ T39] audit: type=1400 audit(1736543179.536:44150): avc: denied { create } for pid=7488 comm="syz.0.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.595708][ T39] audit: type=1400 audit(1736543179.546:44151): avc: denied { search } for pid=5652 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.602550][ T39] audit: type=1400 audit(1736543179.546:44152): avc: denied { search } for pid=5652 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.608461][ T39] audit: type=1400 audit(1736543179.546:44153): avc: denied { search } for pid=5652 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.617697][ T39] audit: type=1400 audit(1736543179.546:44154): avc: denied { read } for pid=5652 comm="dhcpcd" name="n111" dev="tmpfs" ino=3315 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.626145][ T39] audit: type=1400 audit(1736543179.546:44155): avc: denied { read open } for pid=5652 comm="dhcpcd" path="/run/udev/data/n111" dev="tmpfs" ino=3315 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.639239][ T39] audit: type=1400 audit(1736543179.546:44156): avc: denied { getattr } for pid=5652 comm="dhcpcd" path="/run/udev/data/n111" dev="tmpfs" ino=3315 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.645854][ T39] audit: type=1400 audit(1736543179.566:44157): avc: denied { execute } for pid=7488 comm="syz.0.396" dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.651737][ T39] audit: type=1400 audit(1736543179.566:44158): avc: denied { execute_no_trans } for pid=7488 comm="syz.0.396" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A6DE0202864656C6574656429 dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.659827][ T39] audit: type=1400 audit(1736543179.586:44159): avc: denied { module_request } for pid=7488 comm="syz.0.396" kmod="binfmt-0000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 97.745270][ T7492] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 98.226399][ T7497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.230937][ T7497] bond0: (slave bond1): Enslaving as an active interface with an up link [ 98.668422][ T7508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.400'. [ 98.811457][ T7516] random: crng reseeded on system resumption [ 98.828696][ T7518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'. [ 98.840607][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'. [ 99.086194][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 99.589572][ T5995] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.779470][ T5995] usb 5-1: Using ep0 maxpacket: 8 [ 99.785926][ T5995] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 99.789058][ T5995] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 99.799438][ T5995] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.802227][ T5995] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.805792][ T5995] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.808611][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.855714][ T7546] netlink: 'syz.4.409': attribute type 8 has an invalid length. [ 99.857926][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 100.049460][ T5995] usb 5-1: GET_CAPABILITIES returned 0 [ 100.051186][ T5995] usbtmc 5-1:16.0: can't read capabilities [ 100.247728][ T25] usb 5-1: USB disconnect, device number 7 [ 100.306761][ T7554] overlayfs: statfs failed on './file0' [ 100.533562][ T7560] netlink: 52 bytes leftover after parsing attributes in process `syz.4.416'. [ 100.682560][ T7571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=7571 comm=syz.4.417 [ 100.691700][ T7571] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.694586][ T7571] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.697190][ T7571] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.700206][ T7571] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.846443][ T7577] bond2 (unregistering): Released all slaves [ 100.875740][ T7582] program syz.4.420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.879272][ T7581] program syz.4.420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.937393][ T7583] XFS (nullb0): Invalid superblock magic number [ 101.149798][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 101.265393][ T7600] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 101.606380][ T7619] program syz.4.431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.789874][ T7629] netlink: 'syz.3.432': attribute type 1 has an invalid length. [ 101.792116][ T7629] NCSI netlink: No device for ifindex 0 [ 101.840118][ T6001] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 101.981852][ T7634] program syz.3.433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.009525][ T6001] usb 5-1: Using ep0 maxpacket: 8 [ 102.028223][ T6001] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 102.032097][ T6001] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 102.034896][ T6001] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.037694][ T6001] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.041387][ T6001] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.043941][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.265145][ T6001] usb 5-1: GET_CAPABILITIES returned 0 [ 102.266633][ T6001] usbtmc 5-1:16.0: can't read capabilities [ 102.482097][ T30] usb 5-1: USB disconnect, device number 8 [ 102.590158][ T39] kauditd_printk_skb: 1678 callbacks suppressed [ 102.590169][ T39] audit: type=1400 audit(1736543184.546:45838): avc: denied { search } for pid=7637 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.598758][ T39] audit: type=1400 audit(1736543184.546:45839): avc: denied { search } for pid=7637 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.605800][ T39] audit: type=1400 audit(1736543184.556:45840): avc: denied { search } for pid=7637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.612347][ T39] audit: type=1400 audit(1736543184.556:45841): avc: denied { read } for pid=7637 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.618444][ T39] audit: type=1400 audit(1736543184.556:45842): avc: denied { read open } for pid=7637 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.624778][ T39] audit: type=1400 audit(1736543184.556:45843): avc: denied { getattr } for pid=7637 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.633083][ T39] audit: type=1400 audit(1736543184.566:45844): avc: denied { search } for pid=7637 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.638671][ T39] audit: type=1400 audit(1736543184.566:45845): avc: denied { search } for pid=7637 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.646183][ T39] audit: type=1400 audit(1736543184.566:45846): avc: denied { search } for pid=7637 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.669585][ T39] audit: type=1400 audit(1736543184.566:45847): avc: denied { search } for pid=7637 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.669806][ T7655] netlink: 100 bytes leftover after parsing attributes in process `syz.4.438'. [ 103.135777][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 103.524384][ T7699] xt_l2tp: v2 tid > 0xffff: 150994944 [ 103.602088][ T7699] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 103.635969][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 103.651799][ T7699] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.707191][ T7699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.711846][ T7699] bond0: (slave bond2): Enslaving as an active interface with an up link [ 103.959601][ T6001] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.109474][ T6001] usb 5-1: Using ep0 maxpacket: 8 [ 104.137515][ T6001] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 104.145244][ T6001] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 104.152410][ T6001] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.155237][ T6001] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.158826][ T6001] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.161462][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.352506][ T7729] block nbd4: not configured, cannot reconfigure [ 104.403730][ T6001] usb 5-1: GET_CAPABILITIES returned 0 [ 104.405396][ T6001] usbtmc 5-1:16.0: can't read capabilities [ 104.517396][ T7738] No source specified [ 104.605990][ T5995] usb 5-1: USB disconnect, device number 9 [ 105.151297][ T7756] ptrace attach of "/syz-executor exec"[7149] was attempted by ""[7756] [ 105.531011][ T7764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.467'. [ 105.571516][ T7767] input: syz1 as /devices/virtual/input/input9 [ 105.768008][ T7771] netlink: 184 bytes leftover after parsing attributes in process `syz.1.470'. [ 105.928519][ T7782] openvswitch: netlink: IP tunnel dst address not specified [ 106.390449][ T7791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.599496][ T6652] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 106.760990][ T6652] usb 9-1: Using ep0 maxpacket: 8 [ 106.772603][ T6652] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 106.775799][ T6652] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.782136][ T6652] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.785224][ T6652] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.788903][ T6652] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.799758][ T6652] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.845609][ T7793] fuse: Bad value for 'user_id' [ 106.847041][ T7793] fuse: Bad value for 'user_id' [ 106.983988][ T7798] netlink: 'syz.3.477': attribute type 4 has an invalid length. [ 106.986304][ T7798] netlink: 17 bytes leftover after parsing attributes in process `syz.3.477'. [ 107.034071][ T6652] usb 9-1: GET_CAPABILITIES returned 0 [ 107.035787][ T6652] usbtmc 9-1:16.0: can't read capabilities [ 107.238389][ T5989] usb 9-1: USB disconnect, device number 3 [ 107.323836][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 107.329288][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.332880][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.341760][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.344435][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.347764][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.350488][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.353892][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.356510][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.362863][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.365525][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.368771][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.371467][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.374832][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 107.377435][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 107.601951][ T39] kauditd_printk_skb: 1183 callbacks suppressed [ 107.601967][ T39] audit: type=1400 audit(1736543189.556:47031): avc: denied { read write } for pid=5936 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.619291][ T39] audit: type=1400 audit(1736543189.556:47032): avc: denied { read write open } for pid=5936 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.631565][ T39] audit: type=1400 audit(1736543189.556:47033): avc: denied { ioctl } for pid=5936 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.655741][ T39] audit: type=1400 audit(1736543189.606:47034): avc: denied { unmount } for pid=5937 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 107.672449][ T39] audit: type=1400 audit(1736543189.626:47035): avc: denied { read write } for pid=5937 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.680642][ T39] audit: type=1400 audit(1736543189.636:47036): avc: denied { read write open } for pid=5937 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 107.687689][ T39] audit: type=1400 audit(1736543189.636:47037): avc: denied { create } for pid=7814 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.698661][ T39] audit: type=1400 audit(1736543189.636:47038): avc: denied { listen } for pid=7814 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.705594][ T39] audit: type=1400 audit(1736543189.636:47039): avc: denied { write } for pid=7814 comm="syz.0.490" lport=60076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.713218][ T39] audit: type=1400 audit(1736543189.646:47040): avc: denied { connect } for pid=7814 comm="syz.0.490" lport=60076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 107.790288][ T7821] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 107.810764][ T7818] tc_dump_action: action bad kind [ 107.863835][ T7823] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 108.099504][ T6652] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 108.191694][ T7841] hpfs: hpfs_map_sector(): read error [ 108.216282][ T7841] Bluetooth: MGMT ver 1.23 [ 108.275654][ T6652] usb 9-1: config 0 has an invalid interface number: 120 but max is 0 [ 108.278020][ T6652] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.289759][ T6652] usb 9-1: config 0 has no interface number 0 [ 108.291669][ T6652] usb 9-1: too many endpoints for config 0 interface 120 altsetting 255: 255, using maximum allowed: 30 [ 108.294852][ T6652] usb 9-1: config 0 interface 120 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 108.298702][ T6652] usb 9-1: config 0 interface 120 has no altsetting 0 [ 108.310362][ T6652] usb 9-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 108.313064][ T6652] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.318871][ T6652] usb 9-1: config 0 descriptor?? [ 108.540960][ T7827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.671561][ C0] I/O error, dev loop6, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 108.678056][ C0] I/O error, dev loop6, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.679500][ T5989] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 108.681683][ C0] Buffer I/O error on dev loop6, logical block 32752, async page read [ 108.820460][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.824615][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 108.849500][ T5989] usb 6-1: Using ep0 maxpacket: 8 [ 108.875595][ T5989] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 108.878863][ T5989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 108.890427][ T5989] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.893376][ T5989] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.897070][ T5989] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.909727][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.072688][ T7873] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 109.141085][ T5989] usb 6-1: GET_CAPABILITIES returned 0 [ 109.142782][ T5989] usbtmc 6-1:16.0: can't read capabilities [ 109.347220][ T6001] usb 6-1: USB disconnect, device number 8 [ 109.834353][ T7886] netlink: 'syz.0.503': attribute type 26 has an invalid length. [ 110.205000][ T7884] hfsplus: unable to find HFS+ superblock [ 110.837101][ T7912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.510'. [ 110.861336][ T5995] usb 9-1: USB disconnect, device number 4 [ 110.907791][ T5940] Bluetooth: unknown link type 5 [ 110.909300][ T5940] Bluetooth: hci1: connection err: -111 [ 111.173007][ T7936] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 111.319531][ T57] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 111.479533][ T57] usb 9-1: Using ep0 maxpacket: 8 [ 111.489662][ T57] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 111.492825][ T57] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 111.495679][ T57] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.503444][ T57] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.507348][ T57] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.512001][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.746377][ T57] usb 9-1: GET_CAPABILITIES returned 0 [ 111.748090][ T57] usbtmc 9-1:16.0: can't read capabilities [ 111.869674][ T7953] random: crng reseeded on system resumption [ 111.954389][ T57] usb 9-1: USB disconnect, device number 5 [ 112.150747][ T7953] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.242290][ T7963] netlink: 80 bytes leftover after parsing attributes in process `syz.1.523'. [ 112.472272][ T7969] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 112.474727][ T7969] [U] J"—e:ÀÆ" [ 112.615414][ T7975] syz.4.527: attempt to access beyond end of device [ 112.615414][ T7975] loop4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 112.620160][ T7975] ADFS-fs (loop4): error: unable to read block 3, try 0 [ 112.624726][ T39] kauditd_printk_skb: 1122 callbacks suppressed [ 112.624735][ T39] audit: type=1400 audit(1736543194.576:48163): avc: denied { read write } for pid=7973 comm="syz.4.527" name="radio6" dev="devtmpfs" ino=1019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 112.642113][ T39] audit: type=1400 audit(1736543194.576:48164): avc: denied { read write open } for pid=7973 comm="syz.4.527" path="/dev/radio6" dev="devtmpfs" ino=1019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 112.666752][ T39] audit: type=1400 audit(1736543194.576:48165): avc: denied { write } for pid=7972 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.675495][ T39] audit: type=1400 audit(1736543194.576:48166): avc: denied { ioctl } for pid=7973 comm="syz.4.527" path="/dev/radio6" dev="devtmpfs" ino=1019 ioctlcmd=0x5652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 112.699530][ T39] audit: type=1400 audit(1736543194.586:48167): avc: denied { read } for pid=7972 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.705224][ T39] audit: type=1400 audit(1736543194.586:48168): avc: denied { append } for pid=7973 comm="syz.4.527" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 112.729546][ T39] audit: type=1400 audit(1736543194.586:48169): avc: denied { append open } for pid=7973 comm="syz.4.527" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 112.737764][ T39] audit: type=1400 audit(1736543194.586:48170): avc: denied { read } for pid=7972 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.754404][ C3] blk_print_req_error: 20 callbacks suppressed [ 112.754422][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0 [ 112.768561][ T39] audit: type=1400 audit(1736543194.586:48171): avc: denied { ioctl } for pid=7973 comm="syz.4.527" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 112.771887][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.781184][ C3] buffer_io_error: 14 callbacks suppressed [ 112.781196][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.789519][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.789919][ T39] audit: type=1400 audit(1736543194.586:48172): avc: denied { write } for pid=7972 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.792665][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.811024][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 112.813645][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.872599][ T7986] bridge_slave_0: left allmulticast mode [ 112.874292][ T7986] bridge_slave_0: left promiscuous mode [ 112.876071][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.909465][ T7986] bridge_slave_1: left allmulticast mode [ 112.911169][ T7986] bridge_slave_1: left promiscuous mode [ 112.912926][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.933091][ T7986] bond0: (slave bond_slave_0): Releasing backup interface [ 112.942949][ T7986] bond0: (slave bond_slave_1): Releasing backup interface [ 112.974160][ T7986] team0: Port device team_slave_0 removed [ 112.983793][ T7986] team0: Port device team_slave_1 removed [ 112.985760][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.989134][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.008884][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.029682][ T7986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.459523][ T57] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 113.536534][ T8025] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 113.609475][ T57] usb 9-1: Using ep0 maxpacket: 8 [ 113.622745][ T57] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 113.626884][ T57] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 113.630484][ T57] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.639462][ T57] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.643174][ T57] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.649541][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.757500][ T5940] Bluetooth: unknown link type 5 [ 113.759001][ T5940] Bluetooth: hci1: connection err: -111 [ 113.763925][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 113.767518][ T8027] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 113.818346][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 18 prio class 0 [ 113.823255][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.825954][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.831528][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.834128][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.838390][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.840953][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.844350][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.846983][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.851942][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.854629][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.857993][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.862507][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.905237][ T8016] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 113.913467][ T57] usb 9-1: GET_CAPABILITIES returned 0 [ 113.915103][ T57] usbtmc 9-1:16.0: can't read capabilities [ 113.955631][ T8014] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 114.102881][ T8035] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 114.123636][ T5989] usb 9-1: USB disconnect, device number 6 [ 114.715888][ T8055] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 115.549487][ T57] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 115.709469][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 115.742178][ T57] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 115.745376][ T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 115.748209][ T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 115.751126][ T57] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.754795][ T57] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.757364][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.963047][ T8120] random: crng reseeded on system resumption [ 115.966454][ T8109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 115.986393][ T57] usb 6-1: GET_CAPABILITIES returned 0 [ 115.988035][ T57] usbtmc 6-1:16.0: can't read capabilities [ 116.195693][ T57] usb 6-1: USB disconnect, device number 9 [ 116.800157][ T8137] netlink: 76 bytes leftover after parsing attributes in process `syz.3.572'. [ 117.071723][ T5940] Bluetooth: unknown link type 5 [ 117.073328][ T5940] Bluetooth: hci1: connection err: -111 [ 117.479032][ T8166] netlink: 'syz.0.580': attribute type 4 has an invalid length. [ 117.483365][ T8165] netlink: 132 bytes leftover after parsing attributes in process `syz.0.580'. [ 117.630150][ T39] kauditd_printk_skb: 1428 callbacks suppressed [ 117.630166][ T39] audit: type=1400 audit(1736543199.576:49601): avc: denied { read open } for pid=8173 comm="syz.0.582" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.642213][ T39] audit: type=1400 audit(1736543199.576:49602): avc: denied { ioctl } for pid=8173 comm="syz.0.582" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 117.651230][ T39] audit: type=1400 audit(1736543199.606:49603): avc: denied { read } for pid=8173 comm="syz.0.582" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.666462][ T39] audit: type=1400 audit(1736543199.606:49604): avc: denied { read open } for pid=8173 comm="syz.0.582" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.676189][ T39] audit: type=1400 audit(1736543199.616:49605): avc: denied { read write } for pid=8175 comm="syz.4.583" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.684719][ T39] audit: type=1400 audit(1736543199.616:49606): avc: denied { read write open } for pid=8175 comm="syz.4.583" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.698662][ T39] audit: type=1400 audit(1736543199.616:49607): avc: denied { ioctl } for pid=8175 comm="syz.4.583" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.707598][ T39] audit: type=1400 audit(1736543199.616:49608): avc: denied { ioctl } for pid=8175 comm="syz.4.583" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.749664][ T39] audit: type=1400 audit(1736543199.636:49609): avc: denied { ioctl } for pid=8175 comm="syz.4.583" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.756932][ T39] audit: type=1400 audit(1736543199.636:49610): avc: denied { ioctl } for pid=8175 comm="syz.4.583" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.899526][ T30] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 118.070832][ T30] usb 9-1: Using ep0 maxpacket: 8 [ 118.082767][ T30] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 118.085989][ T30] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 118.088846][ T30] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.094368][ T30] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.099794][ T30] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.102418][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.150394][ C2] blk_print_req_error: 24 callbacks suppressed [ 118.150407][ C2] I/O error, dev loop6, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 118.169514][ C0] I/O error, dev loop6, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 118.173219][ C0] buffer_io_error: 17 callbacks suppressed [ 118.173230][ C0] Buffer I/O error on dev loop6, logical block 32752, async page read [ 118.355501][ T30] usb 9-1: GET_CAPABILITIES returned 0 [ 118.357094][ T30] usbtmc 9-1:16.0: can't read capabilities [ 118.574054][ T6001] usb 9-1: USB disconnect, device number 7 [ 118.950556][ T5940] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 118.953028][ T5940] Bluetooth: hci3: Injecting HCI hardware error event [ 118.955985][ T5940] Bluetooth: hci3: hardware error 0x00 [ 119.047177][ T5950] Bluetooth: unknown link type 5 [ 119.049049][ T5950] Bluetooth: hci1: connection err: -111 [ 119.081101][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0 [ 119.084924][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.087594][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.091463][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.094123][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.097559][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.100222][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.111970][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.114610][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.120793][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.123475][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.127603][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.130268][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.134261][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.136924][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.297419][ T8231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.595'. [ 119.335339][ T8233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8233 comm=syz.0.596 [ 119.653273][ T8240] bond0: (slave macvlan2): Opening slave failed [ 119.920921][ C2] Buffer I/O error on dev loop6, logical block 32752, async page read [ 120.014432][ T8253] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 120.709845][ C3] Buffer I/O error on dev loop6, logical block 32752, async page read [ 120.848153][ T8278] overlayfs: upper fs does not support file handles, falling back to index=off. [ 121.119484][ T5940] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 121.652238][ T8307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26128 sclass=netlink_route_socket pid=8307 comm=syz.0.616 [ 121.676519][ T8318] nfs4: Bad value for 'source' [ 122.371765][ T8328] trusted_key: encrypted_key: master key parameter '' is invalid [ 122.642413][ T39] kauditd_printk_skb: 1709 callbacks suppressed [ 122.642424][ T39] audit: type=1400 audit(1736543204.586:51320): avc: denied { write } for pid=8336 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.669738][ T39] audit: type=1400 audit(1736543204.596:51321): avc: denied { write } for pid=8336 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.679543][ T39] audit: type=1400 audit(1736543204.596:51322): avc: denied { write } for pid=8336 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.685025][ T39] audit: type=1400 audit(1736543204.596:51323): avc: denied { write } for pid=8336 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.709471][ T39] audit: type=1400 audit(1736543204.596:51324): avc: denied { write } for pid=8336 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.715083][ T39] audit: type=1400 audit(1736543204.596:51325): avc: denied { write } for pid=8336 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.725193][ T39] audit: type=1400 audit(1736543204.596:51326): avc: denied { write } for pid=8336 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.735954][ T8337] audit: audit_backlog=65 > audit_backlog_limit=64 [ 122.737201][ T8339] audit: audit_backlog=66 > audit_backlog_limit=64 [ 122.739533][ T39] audit: type=1400 audit(1736543204.596:51327): avc: denied { write } for pid=8336 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.184185][ T8354] 9pnet_fd: Insufficient options for proto=fd [ 123.206731][ T8354] Cannot find add_set index 0 as target [ 123.416884][ T8356] netlink: 92 bytes leftover after parsing attributes in process `syz.1.627'. [ 123.717307][ C0] blk_print_req_error: 17 callbacks suppressed [ 123.717319][ C0] I/O error, dev loop6, sector 262016 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 123.727868][ C0] I/O error, dev loop6, sector 262016 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.730711][ C0] buffer_io_error: 9 callbacks suppressed [ 123.730718][ C0] Buffer I/O error on dev loop6, logical block 32752, async page read [ 123.839791][ T8371] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 123.844945][ T8371] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 124.024069][ T8376] xt_bpf: check failed: parse error [ 124.311151][ T6001] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 124.380053][ T8388] usb usb9: usbfs: process 8388 (syz.4.637) did not claim interface 47 before use [ 124.420877][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 124.424656][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.427304][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.431941][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.434587][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.438798][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.441476][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.448884][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 124.451549][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 124.549606][ T6001] usb 6-1: Using ep0 maxpacket: 8 [ 124.563682][ T6001] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 124.567400][ T6001] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 124.570395][ T6001] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.573216][ T6001] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.576946][ T6001] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.589449][ T6001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.790835][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.640'. [ 124.809767][ T6001] usb 6-1: GET_CAPABILITIES returned 0 [ 124.811396][ T6001] usbtmc 6-1:16.0: can't read capabilities [ 125.015427][ T6001] usb 6-1: USB disconnect, device number 10 [ 125.364417][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.646'. [ 125.984256][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 125.988106][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.990903][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.994305][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.997040][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 126.300198][ C2] Buffer I/O error on dev loop6, logical block 32752, async page read [ 126.793388][ T8450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26640 sclass=netlink_route_socket pid=8450 comm=syz.4.655 [ 126.856200][ T7451] udevd[7451]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 126.875193][ T7376] udevd[7376]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 126.903779][ T6916] udevd[6916]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 126.950432][ T8450] 9pnet_fd: Insufficient options for proto=fd [ 126.972988][ T7452] udevd[7452]: inotify_add_watch(7, /dev/loop4, 10) failed: No such file or directory [ 127.011291][ T8453] netlink: 60 bytes leftover after parsing attributes in process `syz.1.656'. [ 127.332211][ T8463] input: syz0 as /devices/virtual/input/input12 [ 127.568746][ T5940] Bluetooth: unknown link type 5 [ 127.570861][ T5940] Bluetooth: hci1: connection err: -111 [ 127.719458][ T39] kauditd_printk_skb: 1610 callbacks suppressed [ 127.719468][ T39] audit: type=1400 audit(1736543209.666:52868): avc: denied { create } for pid=8481 comm="syz.4.666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.726809][ T39] audit: type=1400 audit(1736543209.666:52869): avc: denied { ioctl } for pid=8481 comm="syz.4.666" path="socket:[24178]" dev="sockfs" ino=24178 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.734299][ T39] audit: type=1400 audit(1736543209.666:52870): avc: denied { module_request } for pid=8481 comm="syz.4.666" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 127.753025][ T39] audit: type=1400 audit(1736543209.706:52871): avc: denied { read write } for pid=8485 comm="syz.3.667" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.760250][ T39] audit: type=1400 audit(1736543209.716:52872): avc: denied { read write open } for pid=8485 comm="syz.3.667" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 127.767490][ T39] audit: type=1400 audit(1736543209.716:52873): avc: denied { create } for pid=8485 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.776702][ T39] audit: type=1400 audit(1736543209.716:52874): avc: denied { ioctl } for pid=8485 comm="syz.3.667" path="socket:[24950]" dev="sockfs" ino=24950 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.785757][ T39] audit: type=1400 audit(1736543209.716:52875): avc: denied { create } for pid=8485 comm="syz.3.667" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.794124][ T39] audit: type=1400 audit(1736543209.716:52876): avc: denied { ioctl } for pid=8485 comm="syz.3.667" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24952 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 127.801860][ T39] audit: type=1400 audit(1736543209.716:52877): avc: denied { ioctl } for pid=8485 comm="syz.3.667" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=24952 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 128.221620][ T8495] /dev/nullb0: Can't lookup blockdev [ 128.279496][ T8498] nfs4: Unknown parameter 'rdošˆ' [ 128.433327][ T8511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8511 comm=syz.1.676 [ 128.523736][ T8520] netlink: 'syz.4.677': attribute type 12 has an invalid length. [ 128.529046][ T8520] netlink: 140 bytes leftover after parsing attributes in process `syz.4.677'. [ 128.539013][ T8520] /dev/nullb0: Can't lookup blockdev [ 128.541280][ T5940] Bluetooth: unknown link type 5 [ 128.543191][ T5940] Bluetooth: hci1: connection err: -111 [ 128.884582][ T8526] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 128.887443][ T8526] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 129.067538][ T8533] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 129.164407][ T8537] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 129.206098][ T8537] Illegal XDP return value 244379738 on prog (id 98) dev syz_tun, expect packet loss! [ 129.450599][ T8550] netlink: 'syz.1.686': attribute type 10 has an invalid length. [ 129.476356][ T8550] veth0_vlan: left promiscuous mode [ 129.487292][ T8550] veth0_vlan: entered promiscuous mode [ 129.495859][ T8550] team0: Device veth0_vlan failed to register rx_handler [ 129.606593][ T8557] dns_resolver: Unsupported content type (24) [ 129.834070][ T8568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.691'. [ 129.839510][ T8567] netlink: 40 bytes leftover after parsing attributes in process `syz.4.691'. [ 130.845941][ T8574] ================================================================== [ 130.848225][ T8574] BUG: KASAN: slab-use-after-free in isolate_migratepages_block+0x3ea4/0x5680 [ 130.850745][ T8574] Read of size 8 at addr ffff88802464ed48 by task syz.1.695/8574 [ 130.854061][ T8574] [ 130.855561][ T8574] CPU: 1 UID: 0 PID: 8574 Comm: syz.1.695 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 130.858607][ T8574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 130.861843][ T8574] Call Trace: [ 130.862823][ T8574] [ 130.863674][ T8574] dump_stack_lvl+0x116/0x1f0 [ 130.865033][ T8574] print_report+0xc3/0x620 [ 130.866352][ T8574] ? __virt_addr_valid+0x5e/0x590 [ 130.867791][ T8574] ? __phys_addr+0xc6/0x150 [ 130.869090][ T8574] kasan_report+0xd9/0x110 [ 130.870376][ T8574] ? isolate_migratepages_block+0x3ea4/0x5680 [ 130.872210][ T8574] ? isolate_migratepages_block+0x3ea4/0x5680 [ 130.873961][ T8574] kasan_check_range+0xef/0x1a0 [ 130.875354][ T8574] isolate_migratepages_block+0x3ea4/0x5680 [ 130.877038][ T8574] ? __folio_batch_add_and_move+0x612/0xc60 [ 130.878770][ T8574] ? __pfx_lru_add+0x10/0x10 [ 130.880087][ T8574] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 130.881903][ T8574] ? folio_putback_lru+0x85/0xd0 [ 130.883334][ T8574] ? putback_movable_pages+0x2a0/0x700 [ 130.884887][ T8574] compact_zone+0x1a5c/0x4280 [ 130.886261][ T8574] ? __pfx___lock_acquire+0x10/0x10 [ 130.887743][ T8574] ? __pfx___lock_acquire+0x10/0x10 [ 130.889229][ T8574] ? __pfx_compact_zone+0x10/0x10 [ 130.890693][ T8574] ? mark_held_locks+0x9f/0xe0 [ 130.892071][ T8574] compact_node+0x1a2/0x2d0 [ 130.893383][ T8574] ? __pfx_compact_node+0x10/0x10 [ 130.894823][ T8574] ? __pfx___flush_work+0x10/0x10 [ 130.896263][ T8574] ? __lru_add_drain_all+0xe7/0x6f0 [ 130.897749][ T8574] sysctl_compaction_handler+0x145/0x220 [ 130.899395][ T8574] proc_sys_call_handler+0x403/0x5d0 [ 130.900916][ T8574] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 130.902627][ T8574] ? splice_from_pipe_next+0x1f8/0x5d0 [ 130.904174][ T8574] iter_file_splice_write+0x90f/0x10b0 [ 130.905740][ T8574] ? __pfx_iter_file_splice_write+0x10/0x10 [ 130.907423][ T8574] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 130.909195][ T8574] ? splice_direct_to_actor+0x346/0xa40 [ 130.911191][ T8574] ? __pfx_iter_file_splice_write+0x10/0x10 [ 130.912891][ T8574] direct_splice_actor+0x18f/0x6c0 [ 130.914357][ T8574] splice_direct_to_actor+0x346/0xa40 [ 130.915898][ T8574] ? __pfx_direct_splice_actor+0x10/0x10 [ 130.917484][ T8574] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 130.919239][ T8574] ? __pfx___might_resched+0x10/0x10 [ 130.920758][ T8574] do_splice_direct+0x178/0x250 [ 130.922189][ T8574] ? __pfx_do_splice_direct+0x10/0x10 [ 130.923723][ T8574] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 130.925415][ T8574] do_sendfile+0xaed/0xe30 [ 130.926700][ T8574] ? __pfx_do_sendfile+0x10/0x10 [ 130.928156][ T8574] ? __might_fault+0xe3/0x190 [ 130.929559][ T8574] ? __might_fault+0xe3/0x190 [ 130.930921][ T8574] __x64_sys_sendfile64+0x155/0x220 [ 130.932430][ T8574] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 130.934082][ T8574] do_syscall_64+0xcd/0x250 [ 130.935426][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.937117][ T8574] RIP: 0033:0x7f41ed985d29 [ 130.938415][ T8574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.943948][ T8574] RSP: 002b:00007f41ee794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 130.946354][ T8574] RAX: ffffffffffffffda RBX: 00007f41edb75fa0 RCX: 00007f41ed985d29 [ 130.948609][ T8574] RDX: 00000000200000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 130.950850][ T8574] RBP: 00007f41eda01b08 R08: 0000000000000000 R09: 0000000000000000 [ 130.953125][ T8574] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 130.955399][ T8574] R13: 0000000000000000 R14: 00007f41edb75fa0 R15: 00007ffc0a190ed8 [ 130.957641][ T8574] [ 130.958537][ T8574] [ 130.959232][ T8574] Allocated by task 37: [ 130.960441][ T8574] kasan_save_stack+0x33/0x60 [ 130.961791][ T8574] kasan_save_track+0x14/0x30 [ 130.963044][ T8574] __kasan_slab_alloc+0x89/0x90 [ 130.964434][ T8574] kmem_cache_alloc_lru_noprof+0x226/0x3d0 [ 130.966131][ T8574] shmem_alloc_inode+0x25/0x50 [ 130.967506][ T8574] alloc_inode+0x5d/0x230 [ 130.968743][ T8574] new_inode+0x22/0x210 [ 130.969942][ T8574] shmem_get_inode+0x194/0xf00 [ 130.971312][ T8574] shmem_mknod+0x1a8/0x450 [ 130.972616][ T8574] vfs_mknod+0x5d7/0x8e0 [ 130.973844][ T8574] devtmpfs_work_loop+0x1a8/0x7d0 [ 130.975291][ T8574] devtmpfsd+0x4c/0x50 [ 130.976444][ T8574] kthread+0x2c1/0x3a0 [ 130.977603][ T8574] ret_from_fork+0x45/0x80 [ 130.978921][ T8574] ret_from_fork_asm+0x1a/0x30 [ 130.980307][ T8574] [ 130.981003][ T8574] Freed by task 29: [ 130.982148][ T8574] kasan_save_stack+0x33/0x60 [ 130.983499][ T8574] kasan_save_track+0x14/0x30 [ 130.984846][ T8574] kasan_save_free_info+0x3b/0x60 [ 130.986319][ T8574] __kasan_slab_free+0x51/0x70 [ 130.987696][ T8574] kmem_cache_free+0x152/0x4c0 [ 130.989095][ T8574] i_callback+0x43/0x70 [ 130.990309][ T8574] rcu_core+0x79d/0x14d0 [ 130.991539][ T8574] handle_softirqs+0x213/0x8f0 [ 130.992955][ T8574] run_ksoftirqd+0x3a/0x60 [ 130.994241][ T8574] smpboot_thread_fn+0x661/0xa30 [ 130.995690][ T8574] kthread+0x2c1/0x3a0 [ 130.996864][ T8574] ret_from_fork+0x45/0x80 [ 130.998156][ T8574] ret_from_fork_asm+0x1a/0x30 [ 130.999532][ T8574] [ 131.000229][ T8574] Last potentially related work creation: [ 131.001895][ T8574] kasan_save_stack+0x33/0x60 [ 131.003262][ T8574] __kasan_record_aux_stack+0xba/0xd0 [ 131.004800][ T8574] __call_rcu_common.constprop.0+0x99/0x7a0 [ 131.006511][ T8574] destroy_inode+0x12c/0x1b0 [ 131.007839][ T8574] evict+0x5ed/0x960 [ 131.008969][ T8574] iput+0x52a/0x890 [ 131.010088][ T8574] do_unlinkat+0x5c3/0x760 [ 131.011371][ T8574] __x64_sys_unlink+0xc5/0x110 [ 131.012769][ T8574] do_syscall_64+0xcd/0x250 [ 131.014073][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.015775][ T8574] [ 131.016466][ T8574] The buggy address belongs to the object at ffff88802464e880 [ 131.016466][ T8574] which belongs to the cache shmem_inode_cache of size 1544 [ 131.020632][ T8574] The buggy address is located 1224 bytes inside of [ 131.020632][ T8574] freed 1544-byte region [ffff88802464e880, ffff88802464ee88) [ 131.024534][ T8574] [ 131.025242][ T8574] The buggy address belongs to the physical page: [ 131.027059][ T8574] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802464e880 pfn:0x24648 [ 131.029928][ T8574] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 131.032338][ T8574] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 131.034590][ T8574] page_type: f5(slab) [ 131.035750][ T8574] raw: 00fff00000000040 ffff88801ca8e780 0000000000000000 0000000000000001 [ 131.038164][ T8574] raw: ffff88802464e880 0000000000130001 00000001f5000000 0000000000000000 [ 131.040590][ T8574] head: 00fff00000000040 ffff88801ca8e780 0000000000000000 0000000000000001 [ 131.043066][ T8574] head: ffff88802464e880 0000000000130001 00000001f5000000 0000000000000000 [ 131.045529][ T8574] head: 00fff00000000003 ffffea0000919201 ffffffffffffffff 0000000000000000 [ 131.047969][ T8574] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 131.050405][ T8574] page dumped because: kasan: bad access detected [ 131.052234][ T8574] page_owner tracks the page as allocated [ 131.053855][ T8574] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 37, tgid 37 (kdevtmpfs), ts 5659146001, free_ts 0 [ 131.059390][ T8574] post_alloc_hook+0x2d1/0x350 [ 131.060776][ T8574] get_page_from_freelist+0xfce/0x2f80 [ 131.062368][ T8574] __alloc_pages_noprof+0x223/0x25b0 [ 131.063877][ T8574] alloc_pages_mpol_noprof+0x2c9/0x610 [ 131.065436][ T8574] new_slab+0x2c9/0x410 [ 131.066652][ T8574] ___slab_alloc+0xd7d/0x17a0 [ 131.067995][ T8574] __slab_alloc.constprop.0+0x56/0xb0 [ 131.069525][ T8574] kmem_cache_alloc_lru_noprof+0xff/0x3d0 [ 131.071156][ T8574] shmem_alloc_inode+0x25/0x50 [ 131.072549][ T8574] alloc_inode+0x5d/0x230 [ 131.073801][ T8574] new_inode+0x22/0x210 [ 131.074993][ T8574] shmem_get_inode+0x194/0xf00 [ 131.076392][ T8574] shmem_mknod+0x1a8/0x450 [ 131.077677][ T8574] vfs_mknod+0x5d7/0x8e0 [ 131.078898][ T8574] devtmpfs_work_loop+0x1a8/0x7d0 [ 131.080385][ T8574] devtmpfsd+0x4c/0x50 [ 131.081565][ T8574] page_owner free stack trace missing [ 131.083134][ T8574] [ 131.083827][ T8574] Memory state around the buggy address: [ 131.085443][ T8574] ffff88802464ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.087718][ T8574] ffff88802464ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.089993][ T8574] >ffff88802464ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.092278][ T8574] ^ [ 131.094111][ T8574] ffff88802464ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.096417][ T8574] ffff88802464ee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 131.098707][ T8574] ================================================================== [ 131.105368][ T8574] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 131.107413][ T8574] CPU: 0 UID: 0 PID: 8574 Comm: syz.1.695 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 131.111362][ T8574] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 131.114430][ T8574] Call Trace: [ 131.115400][ T8574] [ 131.116251][ T8574] dump_stack_lvl+0x3d/0x1f0 [ 131.117595][ T8574] panic+0x71d/0x800 [ 131.118775][ T8574] ? __pfx_panic+0x10/0x10 [ 131.120067][ T8574] ? preempt_schedule_thunk+0x1a/0x30 [ 131.121615][ T8574] ? preempt_schedule_common+0x44/0xc0 [ 131.123303][ T8574] ? check_panic_on_warn+0x1f/0xb0 [ 131.125325][ T8574] check_panic_on_warn+0xab/0xb0 [ 131.127226][ T8574] end_report+0x117/0x180 [ 131.128950][ T8574] kasan_report+0xe9/0x110 [ 131.130714][ T8574] ? isolate_migratepages_block+0x3ea4/0x5680 [ 131.132454][ T8574] ? isolate_migratepages_block+0x3ea4/0x5680 [ 131.134188][ T8574] kasan_check_range+0xef/0x1a0 [ 131.135591][ T8574] isolate_migratepages_block+0x3ea4/0x5680 [ 131.137276][ T8574] ? __folio_batch_add_and_move+0x612/0xc60 [ 131.139029][ T8574] ? __pfx_lru_add+0x10/0x10 [ 131.140367][ T8574] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 131.142100][ T8574] ? folio_putback_lru+0x85/0xd0 [ 131.143463][ T8574] ? putback_movable_pages+0x2a0/0x700 [ 131.145013][ T8574] compact_zone+0x1a5c/0x4280 [ 131.146380][ T8574] ? __pfx___lock_acquire+0x10/0x10 [ 131.147861][ T8574] ? __pfx___lock_acquire+0x10/0x10 [ 131.149739][ T8574] ? __pfx_compact_zone+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 131.151760][ T8574] ? mark_held_locks+0x9f/0xe0 [ 131.153871][ T8574] compact_node+0x1a2/0x2d0 [ 131.155717][ T8574] ? __pfx_compact_node+0x10/0x10 [ 131.157729][ T8574] ? __pfx___flush_work+0x10/0x10 [ 131.159463][ T8574] ? __lru_add_drain_all+0xe7/0x6f0 [ 131.161435][ T8574] sysctl_compaction_handler+0x145/0x220 [ 131.163697][ T8574] proc_sys_call_handler+0x403/0x5d0 [ 131.165752][ T8574] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 131.168124][ T8574] ? splice_from_pipe_next+0x1f8/0x5d0 [ 131.170326][ T8574] iter_file_splice_write+0x90f/0x10b0 [ 131.172545][ T8574] ? __pfx_iter_file_splice_write+0x10/0x10 [ 131.174606][ T8574] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 131.176774][ T8574] ? splice_direct_to_actor+0x346/0xa40 [ 131.178993][ T8574] ? __pfx_iter_file_splice_write+0x10/0x10 [ 131.181363][ T8574] direct_splice_actor+0x18f/0x6c0 [ 131.183431][ T8574] splice_direct_to_actor+0x346/0xa40 [ 131.185527][ T8574] ? __pfx_direct_splice_actor+0x10/0x10 [ 131.187139][ T8574] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 131.188886][ T8574] ? __pfx___might_resched+0x10/0x10 [ 131.190994][ T8574] do_splice_direct+0x178/0x250 [ 131.192955][ T8574] ? __pfx_do_splice_direct+0x10/0x10 [ 131.195130][ T8574] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 131.197544][ T8574] do_sendfile+0xaed/0xe30 [ 131.199403][ T8574] ? __pfx_do_sendfile+0x10/0x10 [ 131.201394][ T8574] ? __might_fault+0xe3/0x190 [ 131.203454][ T8574] ? __might_fault+0xe3/0x190 [ 131.205401][ T8574] __x64_sys_sendfile64+0x155/0x220 [ 131.207527][ T8574] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 131.209830][ T8574] do_syscall_64+0xcd/0x250 [ 131.211697][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.214127][ T8574] RIP: 0033:0x7f41ed985d29 [ 131.215965][ T8574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.222274][ T8574] RSP: 002b:00007f41ee794038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 131.224640][ T8574] RAX: ffffffffffffffda RBX: 00007f41edb75fa0 RCX: 00007f41ed985d29 [ 131.226924][ T8574] RDX: 00000000200000c0 RSI: 0000000000000003 RDI: 0000000000000004 [ 131.229469][ T8574] RBP: 00007f41eda01b08 R08: 0000000000000000 R09: 0000000000000000 [ 131.232507][ T8574] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 131.235952][ T8574] R13: 0000000000000000 R14: 00007f41edb75fa0 R15: 00007ffc0a190ed8 [ 131.238935][ T8574] [ 131.240690][ T8574] Kernel Offset: disabled [ 131.242439][ T8574] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:06:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffffc9000d7bf568 RCX=0000000000000000 RDX=1ffff92001af7ead RSI=ffffc9000d7bfef8 RDI=ffffc9000d7bf568 RBP=ffffc9000d7bf5f8 RSP=ffffc9000d7bf550 R8 =ffffc9000d7bf59c R9 =ffffffff9101e782 R10=ffffc9000d7bf568 R11=00000000000113db R12=ffffffff8185d2b0 R13=ffffc9000d7bf628 R14=0000000000000000 R15=ffff88802a5f4880 RIP=ffffffff81493985 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055556bfa6500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5480776038 CR3=00000000323d8000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54812ad100 00007f548074b440 00007f548074b458 00007f548074b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851bf3b5 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc9000d6fece8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000035 R14=ffffffff851bf350 R15=0000000000000000 RIP=ffffffff851bf3df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f41ee7946c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7b44a5b150 CR3=0000000051214000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055559020d700 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000008 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000009 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555590281212 0000555590280b70 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080001900303ff ffffff0401800304 100006100003ffff ffff0406005fbe3c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 06a40300020006a2 0300020006a00308 8080080006980307 85f4ce0800069003 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc0316040006b803 00040006b4031804 0006b00300000016 080606a803000400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000fc0030210000f b003481000079003 00040006c4030804 0006c00300040006 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a2c0a810000f8004 0100001808060601 54a80008000fe003 0010000fd0030010 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0140a2c0a810000f 8004010000180806 060154a80008000f e0030010000fd003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0010000fc0030210 000fb00348100007 900300040006c403 08040006c0030004 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0006bc0316040006 b80300040006b403 18040006b0030000 0016080606a80300 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040006a403000200 06a20300020006a0 0308808008000698 030785f4ce080006 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000002 RCX=ffffffff8175dcfc RDX=fffffbfff20be8ab RSI=ffffffff8bd1ed20 RDI=ffffffff8bd1ed60 RBP=0000000000000000 RSP=ffffc9000489fc08 R8 =0000000000000000 R9 =fffffbfff20be8aa R10=ffffffff905f4557 R11=0000000000000001 R12=0000000000000001 R13=000000000003d90c R14=0000000000000001 R15=0000000000000000 RIP=ffffffff8b29ff68 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555772a1500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555772c4608 CR3=00000000300b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6ac4ff60 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ede202a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ede202aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ede202aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ede202ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ede202b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1ede202c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff96e53cc8 RBX=0000000000000019 RCX=ffffffff8175d18e RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff96e53cc0 RBP=0000000000000002 RSP=ffffc9000d28f598 R8 =0000000000000000 R9 =fffffbfff2dca798 R10=ffffffff96e53cc7 R11=0000000000000003 R12=0000000000000000 R13=ffff888022edc880 R14=0000000000000019 R15=ffff888022edd3d8 RIP=ffffffff81fcb4ba RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f403f7646d0 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5ce9461d4da6627f de29dcdaccb73200 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9436ce84da353f81 b127abb840ab9481 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0aa8f5f653ffbb59 e8a10e3c5e56ae86 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 683796eb5c001c09 02015931c1ce5b13 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003580 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006600000031 2ce2000072b20000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00505bff00505ce4 0050602b00505fd4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00505ce031fd0000 0cce000015280000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bc8a00006bcc0000 0000011029ac0000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c36a2a5126159c95 ab77952d107cf0b2 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 680c9585b712fa25 7b1574d25a113f7e ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f403f74b488 00007f403f74b480 00007f403f74b478 00007f403f74b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f40402ad100 00007f403f74b440 00007f403f740004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f403f74b498 00007f403f74b490 00007f403f74b488 00007f403f74b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000