last executing test programs: 31.731866147s ago: executing program 0 (id=405): r0 = socket$kcm(0x29, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {r1, r2+60000000}}, 0x0) r3 = gettid() rt_sigaction(0x16, &(0x7f00000001c0)={0x0, 0x90000000, 0x0, {[0x4000fffffffd]}}, 0x0, 0x8, &(0x7f0000000200)) tkill(r3, 0x16) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000000906010300000032000000001c01078008000840000000800500070002000000f3fe06400000000020000880140007801800018014000240fc0200000000000000000000000000000000020073797a320000000004000780"], 0x49}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4008014) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x0, 0x4, 0xfffffffd}) 28.506717622s ago: executing program 0 (id=456): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x1a, 0xa, 0x3, "b75c89e7a20c8eac1638b5394c000000000006000000000000e8ff00", 0x32314d54}) r1 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x10, "0062ba7d82e7ff00000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x20000) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 28.505021334s ago: executing program 0 (id=458): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffc, @multicast2}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001fd9f40909ad3b696c85000000000081101000000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 28.441855346s ago: executing program 0 (id=461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002cbd7000ffdbdf2504040000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000110) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000100)="420f01c40fc76f0066ba4100ec420f01f840db8386000000c4e2290c5cd1982e0f0019420f35440f2046b9800000c00f3235000400000f30", 0x38}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="1400000016000b63d25a80648c2594f91124fc60e698730fb3f52aefb34e4ddc413e8233316fb7cde0f60c49fb4593d600860ddd84570d8f5e2f7f3e4d6851d835fcaa5b20f3a8772a69717ba40cdb20d733a687102e3703c06cd2028f1d5bc599ba9fef9ce1c1f522638a288cae76213ebd23358d0cc660000000", 0x7b}], 0x1}, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000140), 0x5a, 0x0) ioctl$X86_IOC_RDMSR_REGS(r7, 0xc02063a0, &(0x7f0000000340)=[0x1, 0x1, 0x8000, 0x0, 0x1, 0xe5, 0x5, 0x184]) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x4) r9 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000080)=0x2, 0x4) listen(r9, 0xa2b) listen(r9, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000240)={[{0x784, 0x6, 0xe9, 0x5, 0x8, 0xa, 0x3, 0x0, 0x1, 0x14, 0xed, 0x8, 0x7}, {0x40, 0x9560, 0x1, 0x6, 0x2, 0xf, 0x7, 0x6, 0x2, 0xd5, 0x9, 0x1, 0x5}, {0x3, 0x1, 0x8, 0x2, 0xf8, 0x40, 0x8, 0xed, 0xc, 0x6f, 0x6b, 0x2, 0x1}], 0x8001}) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85a00000c}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 28.110376851s ago: executing program 0 (id=463): r0 = socket(0xa, 0x5, 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0xeec9, 0x8000, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) setuid(0xee01) r5 = accept4$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000500)=@req3={0x80000001, 0x2, 0x0, 0x3, 0x40, 0x8, 0x1ff}, 0x1c) write$binfmt_script(r4, &(0x7f0000000040), 0x55af) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000040)={0x0, r1, 0x31, {0x5, 0x10001}, 0x6}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x3, @loopback, 0x4c}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @loopback}], 0x3c) setxattr$trusted_overlay_opaque(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380), &(0x7f00000003c0), 0x2, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0xffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000015c0)=ANY=[@ANYBLOB="18deff00000000de8300000007000000ac1414aa00000000"], 0x18, 0x8000}, 0x20000000) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x49ae57ea648cf403) 27.232872126s ago: executing program 0 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x121000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x3, 0x9, 0x10001, 0x6, 0x7}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x30, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x1, @mcast1, @loopback}}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x2d8, 0x20, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0x0, 0xf4, 0x2, 0xfd, 0xd4, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0xd, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0xf, 0x3, 0xca}, {0x6000, 0xdddd0000, 0x3, 0x0, 0x6, 0x7, 0x11, 0x21, 0xc, 0x0, 0x6, 0x4}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x9}, {0xffff1000, 0x4, 0x9, 0x7f, 0x3, 0x9, 0x9, 0x6, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x1, 0xff, 0x3, 0x80, 0x1, 0xfc}, {0xdddd1000, 0x6000, 0xb, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x2, 0xd, 0x4, 0x3, 0x3, 0xa, 0x0, 0x54, 0x6, 0x2, 0x6}, {0x3000, 0x5}, {0xeefee000, 0x9}, 0xc000000b, 0x0, 0xdddd1000, 0x22a0, 0x9, 0x0, 0xe6e70c00, [0x1, 0x401, 0x0, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffe, 0xf6a, 0x0, [{0x9, 0x5, 0x8, '\x00', 0xb4}, {0x83, 0xd2, 0x0, '\x00', 0x4b}, {0xf9, 0x9d, 0x7, '\x00', 0x40}, {0x0, 0x9, 0x40, '\x00', 0x6}, {0x9, 0x10, 0x8, '\x00', 0xa8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xf, 0x47, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x9, 0x26, '\x00', 0x5}, {0x9, 0x5c, 0x6, '\x00', 0x4}, {0x1, 0xd, 0x15, '\x00', 0x9}, {0x8, 0x5, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0x0, '\x00', 0xfd}, {0x6, 0x9b, 0x42, '\x00', 0x23}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xe7, 0x6, 0x9, '\x00', 0x4}, {0xf, 0x6, 0x6}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x41, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x5}, {0x15, 0xfd, 0x6, '\x00', 0x1c}, {0x92, 0x6, 0x7, '\x00', 0x42}]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = io_uring_setup(0x3803, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) close_range(r7, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}}, 0x20000000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x5, 0x3c5, 0x6, 0x1, 0x80000001, 0x3, 0x6, 0x100000001, 0x4, 0xff, 0x2, 0x5, 0x7, 0xfff, 0x1, 0x6], 0x10000, 0x325010}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000040)={[{0x1, 0x71c, 0x7d, 0x80, 0x2, 0x40, 0x4, 0xf6, 0xfd, 0x7, 0x66, 0x81, 0xc}, {0x3, 0x30a2, 0x30, 0x4, 0x3, 0x9, 0x1, 0x95, 0x3, 0xf1, 0x2, 0xff, 0x2}, {0x7fffffff, 0x5, 0x1, 0x2e, 0x3, 0x4, 0xdf, 0x5, 0x80, 0x1, 0xb, 0x4, 0xffffffffffff8001}], 0x8}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) 19.733335883s ago: executing program 1 (id=599): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) getpeername(r2, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 19.666862383s ago: executing program 1 (id=601): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r3, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/93, 0x5d}, 0x100}], 0x1, 0x40003012, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) lseek(r1, 0x1, 0x3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x12, r0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}}) 19.508177518s ago: executing program 1 (id=606): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={r4, @in6={{0xa, 0x0, 0x6, @empty}}, 0xfffd, 0x80}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r4, 0x7}, &(0x7f0000000040)=0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r0}, 0x38) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') setreuid(0x0, 0xee01) fchdir(r6) write$tun(r5, &(0x7f0000001240)={@val={0x0, 0x200}, @void, @eth={@random="ad65d0fc00", @multicast, @void, {@ipv6={0x86dd, @generic={0xd, 0x6, "8bc073", 0x13d8, 0x2c, 0x4459c964ae53e1b4, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, {[@hopopts={0x11, 0x1d, '\x00', [@enc_lim={0x4, 0x1, 0xf3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xc000}, @hao={0xc9, 0x10, @mcast2}, @generic={0xb5, 0xc9, "9fbfef9595d60758d7451baf912e9562d830a502e2f6e80c553732571be471d0da32bab586462b76eb11f835f1c26acac9697805ffc407e249f728e42d12f756f6092074db6eb8229511e9bac087611ad959b7558ed002dca2e753afc521e8bbdcceabe8bbc995911e49ef048a845eccd4e3b63bcc18a35ee4a73ca446e1b3659676a9fef96de52826e98d1ebc54a8c4c60e62a693d104ce4cbabc73abde1eebf1c099c05c081004e70049501622afe5847707aacbfd550d7e04fc04f903690c898a0e50f3a32de274"}]}, @routing={0x33, 0x10, 0xc326941e862deda1, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x14}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x3b}]}, @routing={0x5c, 0x4, 0x1, 0xfa, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @hopopts={0x3b, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0x89, 0x15, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @generic={0xd, 0x88, "bd5bf9acdb3fb90900cec666ddafaec7a44e12c5bcd58589252347cf399ab2bb885f3746c8b0b077f48f456566f69cddfa378028aee491e6facef1039e3209cda6561a7aa8e903562b0858e2670b211400ed50499421cdcf407a605e65b210dcaf4f67762b7a6df7b80a6eff6a9f334f2f159573fc05b39e4a1dbf3cbae83ab869640aaf79f7072c"}, @generic={0x2a, 0x1a, "6a3c664e4b3907f7d58828040a91894bcea90067cf04e60adec8"}, @pad1]}, @hopopts={0x32, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x6}]}, @dstopts={0x36bb5a8d02a55a1c, 0x3, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @pad1, @pad1]}, @hopopts={0x5e, 0x21, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x70}, @generic={0x2, 0xfd, "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"}, @enc_lim={0x4, 0x1, 0x3}]}], "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"}}}}}}, 0x1412) syz_clone3(&(0x7f0000000100)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000440)={r4, @in6={{0xa, 0x0, 0x6, @empty}}, 0xfffd, 0x80}, &(0x7f0000000500)=0x90) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r4, 0x7}, &(0x7f0000000040)=0x8) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r0}, 0x38) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') (async) setreuid(0x0, 0xee01) (async) fchdir(r6) (async) write$tun(r5, &(0x7f0000001240)={@val={0x0, 0x200}, @void, @eth={@random="ad65d0fc00", @multicast, @void, {@ipv6={0x86dd, @generic={0xd, 0x6, "8bc073", 0x13d8, 0x2c, 0x4459c964ae53e1b4, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, {[@hopopts={0x11, 0x1d, '\x00', [@enc_lim={0x4, 0x1, 0xf3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xc000}, @hao={0xc9, 0x10, @mcast2}, @generic={0xb5, 0xc9, "9fbfef9595d60758d7451baf912e9562d830a502e2f6e80c553732571be471d0da32bab586462b76eb11f835f1c26acac9697805ffc407e249f728e42d12f756f6092074db6eb8229511e9bac087611ad959b7558ed002dca2e753afc521e8bbdcceabe8bbc995911e49ef048a845eccd4e3b63bcc18a35ee4a73ca446e1b3659676a9fef96de52826e98d1ebc54a8c4c60e62a693d104ce4cbabc73abde1eebf1c099c05c081004e70049501622afe5847707aacbfd550d7e04fc04f903690c898a0e50f3a32de274"}]}, @routing={0x33, 0x10, 0xc326941e862deda1, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x14}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x3b}]}, @routing={0x5c, 0x4, 0x1, 0xfa, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @hopopts={0x3b, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0x89, 0x15, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @generic={0xd, 0x88, "bd5bf9acdb3fb90900cec666ddafaec7a44e12c5bcd58589252347cf399ab2bb885f3746c8b0b077f48f456566f69cddfa378028aee491e6facef1039e3209cda6561a7aa8e903562b0858e2670b211400ed50499421cdcf407a605e65b210dcaf4f67762b7a6df7b80a6eff6a9f334f2f159573fc05b39e4a1dbf3cbae83ab869640aaf79f7072c"}, @generic={0x2a, 0x1a, "6a3c664e4b3907f7d58828040a91894bcea90067cf04e60adec8"}, @pad1]}, @hopopts={0x32, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x6}]}, @dstopts={0x36bb5a8d02a55a1c, 0x3, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @pad1, @pad1]}, @hopopts={0x5e, 0x21, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x70}, @generic={0x2, 0xfd, "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"}, @enc_lim={0x4, 0x1, 0x3}]}], "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"}}}}}}, 0x1412) (async) syz_clone3(&(0x7f0000000100)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) (async) 19.144441301s ago: executing program 2 (id=612): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB=',r']) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x8003, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, 0x0, 0x30, 0x40400d1}}], 0x1, 0x10) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) pipe(&(0x7f00000000c0)) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) syz_open_dev$audion(&(0x7f0000000100), 0x10001, 0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}]) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r6, 0x540a, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b\x00\x00\x00Z\x00\n']) r8 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 18.962697677s ago: executing program 1 (id=614): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.899102774s ago: executing program 1 (id=615): fsopen(&(0x7f0000000080)='omfs\x00', 0x1) r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r2 = fanotify_init(0x81, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'macsec0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a000004050001001b"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getsockopt$bt_hci(r4, 0x0, 0x1, 0x0, &(0x7f0000001600)) fanotify_mark(r2, 0x105, 0x40001032, r1, 0x0) read$FUSE(r2, &(0x7f0000002300)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000080)=0x3, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2) 18.00017387s ago: executing program 2 (id=617): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x88c42, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0413c500000000000109022400010000a00005000000010300000009210000fd01220700090581030004000000"], 0x0) 17.999613754s ago: executing program 1 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff0a000e001c165d"], 0x34}}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x8, 0x2, 0x3, "a677c17a5a000000009e7379d557d1ea22000000000200000000004000", 0x30314742}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@allocspi={0x11c, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private2, @in=@private}, {@in6=@private1, 0x0, 0x33}, @in=@empty, {}, {}, {}, 0x8000000}, 0x0, 0xfdffff00}, [@lifetime_val={0x24, 0x9, {0x7, 0x40002, 0x6, 0x9}}]}, 0x11c}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000002d000100000000000000000004000080250011802fe5af660e49035a45f4bfb9f42cf4a03da9dc13dd24291214b225a0c4824cdc01000000352997f05fdf6a87a9d49e384f3d6eacb9c77d1079ceb324dc39a958d6f3675634f8aeaf8a5e18dfebe00638d52103ff6db9c5430a88d12cc41cf97da89ec84bd6df5dbecf9397bb5f5edc"], 0x3c}], 0x1}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x4, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r5, 0x4) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x6, 0x185400) ioctl$USBDEVFS_GET_SPEED(r6, 0x551f) 17.80925513s ago: executing program 3 (id=619): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='totmaps\x00') pread64(r0, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000002240)=ANY=[@ANYBLOB="b40900000000000061111800000000008510000002000000850000000700000095000000000000009500000000000000df2a0f6da75fe4dca3f27962e86e5b58a94f526397504bd40874ffa95bd1cb37541353a755a8093f37038a9eaaed9d33ba030c1bb904680d631d6058c782039871231e07c65218c2584b212138e6eef6b9061c9778eb97c0c67a3fa951e7bc8be833fd8a5ff514c2b4ab216d8ecb7bd4091147d3e66f5e36e12f2c9625514accf7c96733c6717c4ec697aa0ff3254f4102f1c01f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYRES16=r4]) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000dc0)=0x6, 0x4) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) (async) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$P9_RGETLOCK(r0, &(0x7f0000002340)=ANY=[@ANYBLOB="2000000037020001050000000000000002000000000000006b81f80d77456c9e5c359d8c498af8b81a3c6b946181dfd7acfa5271d208d16658226918e98fdb35f29eaf9357c2d686277fd6104a411422516f673a53f202898225ed63000000", @ANYRES32=r7, @ANYBLOB="0200ffff"], 0x20) ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r9, 0x80104592, &(0x7f0000000580)={0x0, 0x0, 0x0}) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000006a2ddcf6177a810019008864450006907800000000ac1414aa00004e2200000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5405000090780000"], 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) shutdown(r1, 0x0) pread64(r1, &(0x7f0000000040)=""/58, 0x3a, 0x8) 17.658235564s ago: executing program 3 (id=620): mknod(&(0x7f0000000040)='./file0/file0\x00', 0x1000, 0x8) (async) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x1000, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48140, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000003380)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) (async) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = socket$inet6(0x2d, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_aout(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="070106074c"], 0x4b8) (async) write$binfmt_aout(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="070106074c"], 0x4b8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r8, 0x0, 0x30, 0x0, @val=@tracing={0x0, 0xc009}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r8, 0x0, 0x30, 0x0, @val=@tracing={0x0, 0xc009}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000280)={0x9, {0x0, 0xffffffff, 0xfff, 0x9}}) 17.413098707s ago: executing program 3 (id=621): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x480503) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000040), &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x9, 0x6, 0x34325241, 0x5, 0x17, 0x2, 0x4, 0x4, 0x1, 0x0, 0x1, 0x2}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x4b, 0x2, 0x1, "8baadc000000000000ffffffff000000000000000000000000001c00", 0x32315241}) ioctl$SIOCSIFHWADDR(r2, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000080)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000280)={'comedi_parport\x00', [0x4f29, 0x5, 0x3ff, 0x601, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x805, 0x7ff, 0x2, 0x1, 0x2, 0x4, 0x1, 0x0, 0x5, 0x1a44b, 0x3, 0x201, 0xbe8, 0xfffffff9, 0x9, 0x20001e56, 0x9, 0x2000003, 0x3c, 0x8, 0x4, 0x8000000, 0x1]}) read(r6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r5}) 17.412660762s ago: executing program 3 (id=622): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000100)=@manufact={0x4, 0x0, 0x800, "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"}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x78, 0x942c2) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = syz_io_uring_setup(0x6430, &(0x7f0000000180)={0x0, 0xa4c8, 0x8, 0x3, 0x64}, &(0x7f00000000c0)=0x0, &(0x7f00000006c0)=0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0x2, 0x6, 0x8, 0x7}, 0x15, [0x401, 0x7ff, 0x401, 0x8, 0x10000, 0x45, 0x203, 0x401, 0x7, 0x290, 0xfc, 0x80000000, 0x8, 0x3, 0xfffffd05, 0x9, 0x50d6, 0x7ff, 0xa, 0x0, 0xd4, 0x4, 0x5, 0x1d231da2, 0x6, 0x5, 0x0, 0x9, 0x0, 0x3, 0x101, 0x0, 0x800, 0xfffffffa, 0x9, 0x7, 0x8, 0x7, 0xf94d, 0x7, 0x3, 0xffffff00, 0xbeb, 0x575c, 0x2, 0x57, 0x2, 0x0, 0x4, 0x5, 0x1, 0x2, 0x1, 0x3, 0x6, 0x670, 0x9, 0x8000, 0x2, 0x9e, 0x0, 0x2, 0x1, 0x80000001], [0x4, 0x8000, 0xa, 0xfffff2e1, 0x9ca4, 0x7b, 0x0, 0x7f, 0x72a8, 0x400, 0x86, 0x2, 0x4, 0x56e, 0x0, 0x4, 0x100, 0x88a, 0x2, 0x8, 0xb2, 0x106c, 0xa2b8, 0xc60, 0x6740, 0xf2f1, 0x5, 0x1, 0x5, 0xfffffffd, 0x3, 0x0, 0x7fffffff, 0x1, 0x81, 0x6, 0x6, 0x0, 0x183, 0x401, 0x6, 0xf, 0xd349, 0x9, 0x6, 0x0, 0x9, 0x0, 0x7fff, 0x2, 0xffffffb1, 0x1, 0x1ff, 0x6, 0x9, 0x1, 0x2, 0x800, 0x4, 0x3, 0x4, 0x7fffffff, 0x9, 0x7], [0x4, 0x5, 0x8, 0x2, 0x5, 0x80, 0x7, 0x3, 0x8, 0xb5, 0xfffffffa, 0x100, 0x0, 0x1, 0x1, 0x7, 0x8a85, 0x4, 0x430fb4df, 0x3, 0x7, 0x8, 0x8, 0x2, 0x2, 0x9, 0x0, 0x54e934b9, 0x37, 0x10001, 0x5, 0x8000, 0x2e, 0x4, 0x6, 0x6, 0x5, 0xcf9, 0x6, 0x9, 0x2, 0xe, 0xffffff0e, 0xfffffffe, 0xffffffff, 0x0, 0xfffffffd, 0x5, 0x0, 0xa, 0x7fffffff, 0xffffffc0, 0x5, 0x6, 0xfff, 0x101, 0x7, 0xa, 0x2, 0x3, 0x5, 0x81, 0xfffffff8, 0xb6], [0xff, 0x2, 0x4, 0x1, 0x6, 0x7, 0x2, 0x8, 0x19, 0x0, 0x0, 0x7fff, 0xd, 0x1, 0x5, 0x5, 0x4, 0x9, 0x5, 0x200, 0x7, 0xffffff7f, 0x4689, 0xe97f, 0x80000000, 0x5, 0x0, 0x80000000, 0x5, 0xfffff800, 0xe, 0x26419272, 0x80000001, 0x3, 0xfff, 0x8, 0xef7, 0x4ff, 0x1, 0xfffffff0, 0x7, 0x7b9, 0x52a, 0x5, 0x0, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x2, 0xb2a, 0x3, 0x189f, 0x9, 0x9, 0xffff, 0xd, 0xfb9, 0x77, 0x5, 0xfffffffc, 0x6e, 0x1]}, 0x45c) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d0200000000000000000000000038"], 0x51) close(r8) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) dup3(r1, r6, 0x0) r9 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r9, 0x0, 0x0, 0x56, 0x200440c0, 0x1}) io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket(0xb, 0x1, 0x3) 17.239450339s ago: executing program 3 (id=623): r0 = gettid() syz_emit_ethernet(0x52, &(0x7f0000001880)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x1c, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_ns={0x87, 0x0, 0x0, @loopback}}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) syz_open_procfs(r0, &(0x7f0000000380)='mountinfo\x00') 16.750724344s ago: executing program 2 (id=624): unshare(0x8000000) r0 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}, "ffb00afe4e70"}}}}}}}, 0x0) r4 = syz_open_dev$vcsa(0x0, 0x1, 0x45c0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10f, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="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", 0x0, 0x10, 0x20, 0x0, 0x0}) close_range(r4, r1, 0x2) 16.5460092s ago: executing program 2 (id=625): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000004c40)={@empty}, 0x14) 16.541820871s ago: executing program 2 (id=626): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x1, 0x1, "3a8e07ca5de21f00000000000000000000004b5c00", 0x33424752}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}]}}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@RTM_NEWNSID={0x14, 0x58, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2000c801}, 0x8040) 16.492466263s ago: executing program 2 (id=627): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) close(r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000040)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xb723, 0x2, 0x0, 0xfffffffe, 0xfffffffd}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x2400c000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000001240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000827bd7000fcdbdf256500000008000300", @ANYRES32=r8, @ANYBLOB="0c009900018000003e00000008000200000000000800010005000000080001000008000008000200000000003a4f5e651ee0f3fa60f3c5f6cf9f955fe7a8bd05d2749321c7aa94969228cb103ed4e94f45b775010355b91e749ab918c1655aa375507a9b0f2538e795"], 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0xfa8, 0x0, @wg=@data={0x4, 0x4, 0x8, "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"}}}}, 0xfce) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r12, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10008010) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x20004040}, 0x20040050) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr=0x64010101, @local}, 0x8) 16.334250865s ago: executing program 3 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000006006000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000ad6000/0x4000)=nil, 0x4000) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000080)={{0x5, 0x1, 0x0, 0x8, 'syz1\x00', 0x200}, 0x0, 0x20, 0x9, 0x0, 0x0, 0xf2, 'syz0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x400003, 0xc1, &(0x7f000000cf3d)=""/193, 0x0, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000180)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x6e45491b}}, 0x50) syz_io_uring_setup(0x4ebe, &(0x7f0000000700)={0x0, 0x882a, 0x1, 0x2, 0x1bc, 0x0, r3}, &(0x7f0000000780), &(0x7f00000007c0)) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x5, '\x00', r7, r3, 0x2, 0x2, 0x4}, 0x50) write$FUSE_WRITE(r3, &(0x7f0000000500)={0x18, 0x0, r5, {0x59}}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f00000005c0)={{0x6, 0x2, 0x173, 0x200, 'syz0\x00', 0x1}, 0x0, 0x200, 0x22, r6, 0x3, 0x5b1a, 'syz1\x00', &(0x7f0000000580)=['user_id', 'kfree\x00', '\x00'], 0xe}) write$uinput_user_dev(r9, &(0x7f0000000080)={'syz0\x00', {}, 0x7ff, [0x0, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xedc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40003, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x8ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x1], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x84, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 10.272325369s ago: executing program 32 (id=485): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x121000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x6c}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x3, 0x9, 0x10001, 0x6, 0x7}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x30, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x1, @mcast1, @loopback}}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x2d8, 0x20, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0x0, 0xf4, 0x2, 0xfd, 0xd4, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0xd, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0xf, 0x3, 0xca}, {0x6000, 0xdddd0000, 0x3, 0x0, 0x6, 0x7, 0x11, 0x21, 0xc, 0x0, 0x6, 0x4}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x9}, {0xffff1000, 0x4, 0x9, 0x7f, 0x3, 0x9, 0x9, 0x6, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x1, 0xff, 0x3, 0x80, 0x1, 0xfc}, {0xdddd1000, 0x6000, 0xb, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x2, 0xd, 0x4, 0x3, 0x3, 0xa, 0x0, 0x54, 0x6, 0x2, 0x6}, {0x3000, 0x5}, {0xeefee000, 0x9}, 0xc000000b, 0x0, 0xdddd1000, 0x22a0, 0x9, 0x0, 0xe6e70c00, [0x1, 0x401, 0x0, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffe, 0xf6a, 0x0, [{0x9, 0x5, 0x8, '\x00', 0xb4}, {0x83, 0xd2, 0x0, '\x00', 0x4b}, {0xf9, 0x9d, 0x7, '\x00', 0x40}, {0x0, 0x9, 0x40, '\x00', 0x6}, {0x9, 0x10, 0x8, '\x00', 0xa8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xf, 0x47, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x9, 0x26, '\x00', 0x5}, {0x9, 0x5c, 0x6, '\x00', 0x4}, {0x1, 0xd, 0x15, '\x00', 0x9}, {0x8, 0x5, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0x0, '\x00', 0xfd}, {0x6, 0x9b, 0x42, '\x00', 0x23}, {0x7, 0x2, 0x4, '\x00', 0x3}, {0xe7, 0x6, 0x9, '\x00', 0x4}, {0xf, 0x6, 0x6}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x41, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x5}, {0x15, 0xfd, 0x6, '\x00', 0x1c}, {0x92, 0x6, 0x7, '\x00', 0x42}]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = io_uring_setup(0x3803, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r9, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) close_range(r7, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}}, 0x20000000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x5, 0x3c5, 0x6, 0x1, 0x80000001, 0x3, 0x6, 0x100000001, 0x4, 0xff, 0x2, 0x5, 0x7, 0xfff, 0x1, 0x6], 0x10000, 0x325010}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000040)={[{0x1, 0x71c, 0x7d, 0x80, 0x2, 0x40, 0x4, 0xf6, 0xfd, 0x7, 0x66, 0x81, 0xc}, {0x3, 0x30a2, 0x30, 0x4, 0x3, 0x9, 0x1, 0x95, 0x3, 0xf1, 0x2, 0xff, 0x2}, {0x7fffffff, 0x5, 0x1, 0x2e, 0x3, 0x4, 0xdf, 0x5, 0x80, 0x1, 0xb, 0x4, 0xffffffffffff8001}], 0x8}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}}, 0x0) 1.11825824s ago: executing program 33 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000fdffffff0a000e001c165d"], 0x34}}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x8, 0x2, 0x3, "a677c17a5a000000009e7379d557d1ea22000000000200000000004000", 0x30314742}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@allocspi={0x11c, 0x16, 0x411, 0x0, 0x0, {{{@in6=@private2, @in=@private}, {@in6=@private1, 0x0, 0x33}, @in=@empty, {}, {}, {}, 0x8000000}, 0x0, 0xfdffff00}, [@lifetime_val={0x24, 0x9, {0x7, 0x40002, 0x6, 0x9}}]}, 0x11c}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000002d000100000000000000000004000080250011802fe5af660e49035a45f4bfb9f42cf4a03da9dc13dd24291214b225a0c4824cdc01000000352997f05fdf6a87a9d49e384f3d6eacb9c77d1079ceb324dc39a958d6f3675634f8aeaf8a5e18dfebe00638d52103ff6db9c5430a88d12cc41cf97da89ec84bd6df5dbecf9397bb5f5edc"], 0x3c}], 0x1}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x4, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r5, 0x4) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x6, 0x185400) ioctl$USBDEVFS_GET_SPEED(r6, 0x551f) 8.66588ms ago: executing program 34 (id=627): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) close(r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000040)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xb723, 0x2, 0x0, 0xfffffffe, 0xfffffffd}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x2400c000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000001240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000827bd7000fcdbdf256500000008000300", @ANYRES32=r8, @ANYBLOB="0c009900018000003e00000008000200000000000800010005000000080001000008000008000200000000003a4f5e651ee0f3fa60f3c5f6cf9f955fe7a8bd05d2749321c7aa94969228cb103ed4e94f45b775010355b91e749ab918c1655aa375507a9b0f2538e795"], 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1e, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0xfa8, 0x0, @wg=@data={0x4, 0x4, 0x8, "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"}}}}, 0xfce) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r12, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x10008010) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x20004040}, 0x20040050) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr=0x64010101, @local}, 0x8) 0s ago: executing program 35 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000006006000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) munmap(&(0x7f0000ad6000/0x4000)=nil, 0x4000) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000080)={{0x5, 0x1, 0x0, 0x8, 'syz1\x00', 0x200}, 0x0, 0x20, 0x9, 0x0, 0x0, 0xf2, 'syz0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="e5000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x400003, 0xc1, &(0x7f000000cf3d)=""/193, 0x0, 0x40, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000180)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x6e45491b}}, 0x50) syz_io_uring_setup(0x4ebe, &(0x7f0000000700)={0x0, 0x882a, 0x1, 0x2, 0x1bc, 0x0, r3}, &(0x7f0000000780), &(0x7f00000007c0)) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x5, '\x00', r7, r3, 0x2, 0x2, 0x4}, 0x50) write$FUSE_WRITE(r3, &(0x7f0000000500)={0x18, 0x0, r5, {0x59}}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f00000005c0)={{0x6, 0x2, 0x173, 0x200, 'syz0\x00', 0x1}, 0x0, 0x200, 0x22, r6, 0x3, 0x5b1a, 'syz1\x00', &(0x7f0000000580)=['user_id', 'kfree\x00', '\x00'], 0xe}) write$uinput_user_dev(r9, &(0x7f0000000080)={'syz0\x00', {}, 0x7ff, [0x0, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xedc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40003, 0x0, 0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x8ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x1], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x84, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): [ 43.506952][ T40] audit: type=1400 audit(1756526432.916:60): avc: denied { rlimitinh } for pid=5880 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.514095][ T40] audit: type=1400 audit(1756526432.926:61): avc: denied { siginh } for pid=5880 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:62481' (ED25519) to the list of known hosts. [ 44.428331][ T40] audit: type=1400 audit(1756526433.866:62): avc: denied { name_bind } for pid=5887 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 44.460808][ T40] audit: type=1400 audit(1756526433.896:63): avc: denied { write } for pid=5888 comm="sh" path="pipe:[5879]" dev="pipefs" ino=5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.482857][ T40] audit: type=1400 audit(1756526433.916:64): avc: denied { execute } for pid=5888 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 44.493885][ T40] audit: type=1400 audit(1756526433.916:65): avc: denied { execute_no_trans } for pid=5888 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 46.839617][ T40] audit: type=1400 audit(1756526436.276:66): avc: denied { mounton } for pid=5888 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 46.852086][ T5888] cgroup: Unknown subsys name 'net' [ 47.029964][ T5888] cgroup: Unknown subsys name 'cpuset' [ 47.034166][ T5888] cgroup: Unknown subsys name 'rlimit' [ 47.272169][ T5946] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 48.014737][ T5888] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.649070][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 51.649081][ T40] audit: type=1400 audit(1756526441.086:80): avc: denied { execmem } for pid=5968 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 51.912645][ T40] audit: type=1400 audit(1756526441.346:81): avc: denied { create } for pid=5972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.930755][ T40] audit: type=1400 audit(1756526441.346:82): avc: denied { read write } for pid=5972 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.944499][ T40] audit: type=1400 audit(1756526441.346:83): avc: denied { open } for pid=5972 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.953873][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.956503][ T40] audit: type=1400 audit(1756526441.356:84): avc: denied { ioctl } for pid=5972 comm="syz-executor" path="socket:[5901]" dev="sockfs" ino=5901 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.959863][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.977772][ T5980] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.977867][ T5984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.981016][ T5980] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.983466][ T5984] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.985939][ T5980] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.988377][ T5984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.990493][ T5980] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.993095][ T5984] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.995379][ T5980] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.997746][ T5984] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.007053][ T5986] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.007716][ T5987] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.010213][ T40] audit: type=1400 audit(1756526441.446:85): avc: denied { read } for pid=5976 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.014162][ T5987] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.024354][ T40] audit: type=1400 audit(1756526441.446:86): avc: denied { open } for pid=5976 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.026359][ T5987] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.035157][ T40] audit: type=1400 audit(1756526441.446:87): avc: denied { mounton } for pid=5976 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 52.038943][ T5987] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.046184][ T5986] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.051488][ T5986] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.054405][ T5986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.192439][ T40] audit: type=1400 audit(1756526441.626:88): avc: denied { module_request } for pid=5976 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 52.226214][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 52.453257][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.457344][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.460231][ T5976] bridge_slave_0: entered allmulticast mode [ 52.464015][ T5976] bridge_slave_0: entered promiscuous mode [ 52.492222][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 52.499412][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.502397][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.505502][ T5976] bridge_slave_1: entered allmulticast mode [ 52.513688][ T5976] bridge_slave_1: entered promiscuous mode [ 52.584089][ T5979] chnl_net:caif_netlink_parms(): no params data found [ 52.635041][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.643810][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.650412][ T5981] chnl_net:caif_netlink_parms(): no params data found [ 52.752920][ T5976] team0: Port device team_slave_0 added [ 52.780760][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.783776][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.787132][ T5972] bridge_slave_0: entered allmulticast mode [ 52.791768][ T5972] bridge_slave_0: entered promiscuous mode [ 52.826610][ T5976] team0: Port device team_slave_1 added [ 52.858283][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.861750][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.864667][ T5972] bridge_slave_1: entered allmulticast mode [ 52.869604][ T5972] bridge_slave_1: entered promiscuous mode [ 52.947844][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.950340][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.960508][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.997839][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.039380][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.041740][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.053067][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.064086][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.068057][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.071405][ T5979] bridge_slave_0: entered allmulticast mode [ 53.075016][ T5979] bridge_slave_0: entered promiscuous mode [ 53.079974][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.083028][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.086146][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.089952][ T5981] bridge_slave_0: entered allmulticast mode [ 53.092747][ T5981] bridge_slave_0: entered promiscuous mode [ 53.097797][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.100338][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.102961][ T5979] bridge_slave_1: entered allmulticast mode [ 53.105965][ T5979] bridge_slave_1: entered promiscuous mode [ 53.154886][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.157833][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.160274][ T5981] bridge_slave_1: entered allmulticast mode [ 53.163189][ T5981] bridge_slave_1: entered promiscuous mode [ 53.242013][ T5972] team0: Port device team_slave_0 added [ 53.275752][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.285940][ T5976] hsr_slave_0: entered promiscuous mode [ 53.290420][ T5976] hsr_slave_1: entered promiscuous mode [ 53.295715][ T5972] team0: Port device team_slave_1 added [ 53.302262][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.309377][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.317097][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.428775][ T5979] team0: Port device team_slave_0 added [ 53.448392][ T5981] team0: Port device team_slave_0 added [ 53.475013][ T5979] team0: Port device team_slave_1 added [ 53.479311][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.481574][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.491014][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.496843][ T5981] team0: Port device team_slave_1 added [ 53.535322][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.538434][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.548486][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.595278][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.597768][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.606928][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.612454][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.614825][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.624959][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.648560][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.650990][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.660755][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.665770][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.668648][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.677355][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.765517][ T5972] hsr_slave_0: entered promiscuous mode [ 53.768561][ T5972] hsr_slave_1: entered promiscuous mode [ 53.771331][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 53.773590][ T5972] Cannot create hsr debugfs directory [ 53.833991][ T5979] hsr_slave_0: entered promiscuous mode [ 53.837045][ T5979] hsr_slave_1: entered promiscuous mode [ 53.839278][ T5979] debugfs: 'hsr0' already exists in 'hsr' [ 53.841635][ T5979] Cannot create hsr debugfs directory [ 53.851347][ T5981] hsr_slave_0: entered promiscuous mode [ 53.854703][ T5981] hsr_slave_1: entered promiscuous mode [ 53.857620][ T5981] debugfs: 'hsr0' already exists in 'hsr' [ 53.859581][ T5981] Cannot create hsr debugfs directory [ 54.068329][ T5986] Bluetooth: hci2: command tx timeout [ 54.068949][ T5331] Bluetooth: hci3: command tx timeout [ 54.077106][ T5331] Bluetooth: hci1: command tx timeout [ 54.077905][ T5986] Bluetooth: hci0: command tx timeout [ 54.207895][ T5976] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.215763][ T5976] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.227454][ T5976] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.234896][ T5976] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.300706][ T5972] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.307519][ T5972] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.317483][ T5972] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.348876][ T5972] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.391986][ T5979] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.399949][ T5979] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.407119][ T5979] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.412741][ T5979] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.486359][ T5981] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.494349][ T5981] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.500070][ T5981] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.509174][ T5981] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.520346][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.560305][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.580184][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.583616][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.599803][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.602229][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.611411][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.643641][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.660903][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.663392][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.680068][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.682370][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.700991][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.733160][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.744886][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.747858][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.756177][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.760395][ T40] audit: type=1400 audit(1756526444.196:89): avc: denied { sys_module } for pid=5976 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.767047][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.772227][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.799585][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.813662][ T5979] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.817157][ T5979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.832967][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.835872][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.843766][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.846685][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.895148][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.949234][ T5976] veth0_vlan: entered promiscuous mode [ 54.962859][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.968426][ T5976] veth1_vlan: entered promiscuous mode [ 55.023673][ T5976] veth0_macvtap: entered promiscuous mode [ 55.029680][ T5976] veth1_macvtap: entered promiscuous mode [ 55.033667][ T5972] veth0_vlan: entered promiscuous mode [ 55.042869][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.060511][ T5972] veth1_vlan: entered promiscuous mode [ 55.065563][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.077392][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.081986][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.100751][ T1149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.111655][ T1149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.116212][ T1149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.132677][ T1149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.165432][ T5979] veth0_vlan: entered promiscuous mode [ 55.174614][ T5981] veth0_vlan: entered promiscuous mode [ 55.181581][ T5972] veth0_macvtap: entered promiscuous mode [ 55.203986][ T5981] veth1_vlan: entered promiscuous mode [ 55.209357][ T5979] veth1_vlan: entered promiscuous mode [ 55.215034][ T5972] veth1_macvtap: entered promiscuous mode [ 55.220729][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.224155][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.256075][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.272985][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.277315][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.277926][ T5979] veth0_macvtap: entered promiscuous mode [ 55.280164][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.295249][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.299988][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.308731][ T5979] veth1_macvtap: entered promiscuous mode [ 55.313303][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.319761][ T5981] veth0_macvtap: entered promiscuous mode [ 55.323497][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.338332][ T5981] veth1_macvtap: entered promiscuous mode [ 55.354927][ T5976] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.359307][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.374976][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.395160][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.411624][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.414419][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.427887][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.431002][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.441313][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.444896][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.449275][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.477977][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.481050][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.485879][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.490326][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.496672][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.509398][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.531910][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.534738][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.575873][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.579116][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.610802][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.613662][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.653364][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.655911][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.665034][ T57] IPVS: starting estimator thread 0... [ 55.680733][ T6077] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6077 comm=syz.2.8 [ 55.700199][ T6077] affs: No valid root block on device sr0 [ 55.726615][ T6087] FAULT_INJECTION: forcing a failure. [ 55.726615][ T6087] name failslab, interval 1, probability 0, space 0, times 1 [ 55.733070][ T6087] CPU: 2 UID: 0 PID: 6087 Comm: syz.3.10 Not tainted syzkaller #0 PREEMPT(full) [ 55.733091][ T6087] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.733099][ T6087] Call Trace: [ 55.733104][ T6087] [ 55.733109][ T6087] dump_stack_lvl+0x16c/0x1f0 [ 55.733130][ T6087] should_fail_ex+0x512/0x640 [ 55.733146][ T6087] ? fs_reclaim_acquire+0xae/0x150 [ 55.733167][ T6087] ? tomoyo_encode2+0x100/0x3e0 [ 55.733187][ T6087] should_failslab+0xc2/0x120 [ 55.733205][ T6087] __kmalloc_noprof+0xd2/0x510 [ 55.733219][ T6087] ? d_absolute_path+0x136/0x1a0 [ 55.733278][ T6087] tomoyo_encode2+0x100/0x3e0 [ 55.733301][ T6087] tomoyo_encode+0x29/0x50 [ 55.733320][ T6087] tomoyo_realpath_from_path+0x18f/0x6e0 [ 55.733346][ T6087] tomoyo_path2_perm+0x2a1/0x710 [ 55.733363][ T6087] ? tomoyo_path2_perm+0x293/0x710 [ 55.733381][ T6087] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 55.733401][ T6087] ? __pfx_ovl_lookup+0x10/0x10 [ 55.733416][ T6087] ? lockdep_unlock+0x64/0xe0 [ 55.733447][ T6087] ? do_raw_spin_unlock+0x172/0x230 [ 55.733463][ T6087] ? _raw_spin_unlock+0x28/0x50 [ 55.733480][ T6087] tomoyo_path_link+0xae/0x100 [ 55.733493][ T6087] ? __pfx_tomoyo_path_link+0x10/0x10 [ 55.733504][ T6087] ? make_vfsgid+0xf1/0x140 [ 55.733523][ T6087] ? __pfx_make_vfsgid+0x10/0x10 [ 55.733548][ T6087] security_path_link+0x12f/0x2b0 [ 55.733568][ T6087] do_linkat+0x412/0x5a0 [ 55.733589][ T6087] ? __pfx_do_linkat+0x10/0x10 [ 55.733605][ T6087] ? strncpy_from_user+0x203/0x2e0 [ 55.733621][ T6087] ? getname_flags.part.0+0x1c5/0x550 [ 55.733645][ T6087] __x64_sys_link+0x7d/0xa0 [ 55.733663][ T6087] do_syscall_64+0xcd/0x4c0 [ 55.733695][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.733725][ T6087] RIP: 0033:0x7f0fc1d8ebe9 [ 55.733737][ T6087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.733755][ T6087] RSP: 002b:00007f0fc2c2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 55.733768][ T6087] RAX: ffffffffffffffda RBX: 00007f0fc1fc5fa0 RCX: 00007f0fc1d8ebe9 [ 55.733777][ T6087] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200 [ 55.733785][ T6087] RBP: 00007f0fc2c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 55.733793][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.733800][ T6087] R13: 00007f0fc1fc6038 R14: 00007f0fc1fc5fa0 R15: 00007ffce97df8e8 [ 55.733818][ T6087] [ 55.733958][ T6087] ERROR: Out of memory at tomoyo_realpath_from_path. [ 55.777972][ T6083] IPVS: using max 42 ests per chain, 100800 per kthread [ 55.789281][ T6092] warning: `syz.2.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.849151][ T6098] bond0: Error: Cannot enslave bond to itself. [ 55.963142][ T6103] fuse: Bad value for 'fd' [ 56.164820][ T5986] Bluetooth: hci2: command tx timeout [ 56.166974][ T5331] Bluetooth: hci1: command tx timeout [ 56.167820][ T5986] Bluetooth: hci3: command tx timeout [ 56.586751][ T6097] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.589204][ T6097] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.596344][ T6097] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 56.600035][ T6097] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.601971][ T6097] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 56.606414][ T6097] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 56.611656][ T6097] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.615786][ T6097] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 56.619721][ T6097] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 56.625455][ T6097] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.628297][ T6097] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.632370][ T6097] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 56.720485][ T6116] netlink: 'syz.1.18': attribute type 1 has an invalid length. [ 56.723237][ T6116] netlink: 212 bytes leftover after parsing attributes in process `syz.1.18'. [ 56.726314][ T6116] netlink: 'syz.1.18': attribute type 1 has an invalid length. [ 56.750432][ T40] kauditd_printk_skb: 73 callbacks suppressed [ 56.750454][ T40] audit: type=1400 audit(1756526446.122:163): avc: denied { read write } for pid=6117 comm="syz.2.19" name="virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.755236][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 56.763603][ T40] audit: type=1400 audit(1756526446.122:164): avc: denied { open } for pid=6117 comm="syz.2.19" path="/dev/virtual_nci" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.776583][ T40] audit: type=1400 audit(1756526446.141:165): avc: denied { read write } for pid=6115 comm="syz.1.18" name="video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 56.788598][ T40] audit: type=1400 audit(1756526446.141:166): avc: denied { open } for pid=6115 comm="syz.1.18" path="/dev/video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 56.801461][ T40] audit: type=1400 audit(1756526446.141:167): avc: denied { ioctl } for pid=6115 comm="syz.1.18" path="/dev/video0" dev="devtmpfs" ino=955 ioctlcmd=0x565e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 56.817020][ T40] audit: type=1400 audit(1756526446.141:168): avc: denied { create } for pid=6115 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.827214][ T40] audit: type=1400 audit(1756526446.141:169): avc: denied { write } for pid=6115 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.836365][ T40] audit: type=1400 audit(1756526446.150:170): avc: denied { ioctl } for pid=6115 comm="syz.1.18" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.854849][ T40] audit: type=1400 audit(1756526446.150:171): avc: denied { perfmon } for pid=6115 comm="syz.1.18" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 56.863636][ T40] audit: type=1400 audit(1756526446.159:172): avc: denied { kexec_image_load } for pid=6117 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 56.888874][ T6126] FAULT_INJECTION: forcing a failure. [ 56.888874][ T6126] name failslab, interval 1, probability 0, space 0, times 0 [ 56.894706][ T6126] CPU: 3 UID: 0 PID: 6126 Comm: syz.3.21 Not tainted syzkaller #0 PREEMPT(full) [ 56.894725][ T6126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.894732][ T6126] Call Trace: [ 56.894737][ T6126] [ 56.894742][ T6126] dump_stack_lvl+0x16c/0x1f0 [ 56.894762][ T6126] should_fail_ex+0x512/0x640 [ 56.894777][ T6126] ? fs_reclaim_acquire+0xae/0x150 [ 56.894795][ T6126] ? tomoyo_encode2+0x100/0x3e0 [ 56.894814][ T6126] should_failslab+0xc2/0x120 [ 56.894829][ T6126] __kmalloc_noprof+0xd2/0x510 [ 56.894842][ T6126] ? d_absolute_path+0x136/0x1a0 [ 56.894862][ T6126] tomoyo_encode2+0x100/0x3e0 [ 56.894883][ T6126] tomoyo_encode+0x29/0x50 [ 56.894900][ T6126] tomoyo_realpath_from_path+0x18f/0x6e0 [ 56.894920][ T6126] ? tomoyo_profile+0x47/0x60 [ 56.894934][ T6126] tomoyo_path_perm+0x274/0x460 [ 56.894949][ T6126] ? tomoyo_path_perm+0x260/0x460 [ 56.894965][ T6126] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 56.894983][ T6126] ? __kernel_text_address+0xd/0x40 [ 56.895013][ T6126] ? kasan_save_stack+0x42/0x60 [ 56.895025][ T6126] ? kasan_save_stack+0x33/0x60 [ 56.895036][ T6126] ? kasan_save_track+0x14/0x30 [ 56.895047][ T6126] ? kasan_save_free_info+0x3b/0x60 [ 56.895064][ T6126] ? __kasan_slab_free+0x60/0x70 [ 56.895079][ T6126] security_inode_getattr+0x116/0x290 [ 56.895098][ T6126] vfs_getattr+0x25/0x60 [ 56.895115][ T6126] ovl_copy_up_one+0x159/0x38e0 [ 56.895133][ T6126] ? __lock_acquire+0x62e/0x1ce0 [ 56.895155][ T6126] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 56.895172][ T6126] ? find_held_lock+0x2b/0x80 [ 56.895188][ T6126] ? avc_has_perm_noaudit+0x117/0x3b0 [ 56.895202][ T6126] ? __lock_acquire+0x62e/0x1ce0 [ 56.895244][ T6126] ? dget_parent+0xf8/0x5e0 [ 56.895268][ T6126] ovl_copy_up_flags+0x18d/0x200 [ 56.895283][ T6126] ovl_link+0x30/0x220 [ 56.895301][ T6126] ? bpf_lsm_inode_link+0x9/0x10 [ 56.895317][ T6126] vfs_link+0x836/0xe50 [ 56.895331][ T6126] do_linkat+0x46c/0x5a0 [ 56.895367][ T6126] ? __pfx_do_linkat+0x10/0x10 [ 56.895382][ T6126] ? strncpy_from_user+0x203/0x2e0 [ 56.895397][ T6126] ? getname_flags.part.0+0x1c5/0x550 [ 56.895419][ T6126] __x64_sys_link+0x7d/0xa0 [ 56.895435][ T6126] do_syscall_64+0xcd/0x4c0 [ 56.895451][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.895464][ T6126] RIP: 0033:0x7f0fc1d8ebe9 [ 56.895475][ T6126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.895488][ T6126] RSP: 002b:00007f0fc2c2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 56.895505][ T6126] RAX: ffffffffffffffda RBX: 00007f0fc1fc5fa0 RCX: 00007f0fc1d8ebe9 [ 56.895513][ T6126] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200 [ 56.895520][ T6126] RBP: 00007f0fc2c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 56.895527][ T6126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.895534][ T6126] R13: 00007f0fc1fc6038 R14: 00007f0fc1fc5fa0 R15: 00007ffce97df8e8 [ 56.895550][ T6126] [ 56.895580][ T6126] ERROR: Out of memory at tomoyo_realpath_from_path. [ 56.929932][ T6132] hfs: can't find a HFS filesystem on dev sr0 [ 57.013354][ T6128] kvm: pic: non byte write [ 57.064055][ T6143] overlay: Unknown parameter 'appraise' [ 57.096338][ T6146] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 57.101926][ T6146] random: crng reseeded on system resumption [ 57.111189][ T6146] netlink: 'syz.3.27': attribute type 13 has an invalid length. [ 57.113967][ T6146] netlink: 'syz.3.27': attribute type 3 has an invalid length. [ 57.116875][ T6146] netlink: 224 bytes leftover after parsing attributes in process `syz.3.27'. [ 57.182628][ T6153] bridge_slave_0: left allmulticast mode [ 57.184564][ T6153] bridge_slave_0: left promiscuous mode [ 57.187509][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.198449][ T6153] bridge_slave_1: left allmulticast mode [ 57.202822][ T6153] bridge_slave_1: left promiscuous mode [ 57.205310][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.217812][ T6153] bond0: (slave bond_slave_0): Releasing backup interface [ 57.229715][ T6153] bond0: (slave bond_slave_1): Releasing backup interface [ 57.244779][ T6153] team0: Port device team_slave_0 removed [ 57.251874][ T6153] team0: Port device team_slave_1 removed [ 57.256357][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.259523][ T6153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.264584][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.270544][ T6153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.297107][ T6154] team0: Mode changed to "loadbalance" [ 57.297505][ T6148] netlink: 'syz.1.28': attribute type 10 has an invalid length. [ 57.308376][ T6148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.311774][ T6148] team0: Port device bond0 added [ 57.315217][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 57.351184][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.406332][ T6148] team0 (unregistering): Port device bond0 removed [ 57.478971][ T6044] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 57.533627][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 57.538860][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 57.545486][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 57.550141][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.552863][ T24] usb 5-1: Product: syz [ 57.554579][ T24] usb 5-1: Manufacturer: syz [ 57.556155][ T24] usb 5-1: SerialNumber: syz [ 57.560798][ T24] usb 5-1: config 0 descriptor?? [ 57.568389][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 57.571927][ T24] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 57.662668][ T6044] usb 8-1: not running at top speed; connect to a high speed hub [ 57.666227][ T6044] usb 8-1: config 1 interface 0 has no altsetting 0 [ 57.671169][ T6044] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 57.674681][ T6044] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.677457][ T6044] usb 8-1: Product: syz [ 57.679030][ T6044] usb 8-1: Manufacturer: à  [ 57.681776][ T6044] usb 8-1: SerialNumber: syz [ 57.903842][ T6150] mmap: syz.3.29 (6150) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.940258][ T6044] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 4 proto 2 vid 0x04B8 pid 0x0202 [ 57.948331][ T6044] usb 8-1: USB disconnect, device number 2 [ 57.960888][ T6044] usblp0: removed [ 57.973309][ T6162] 9pnet: Unknown protocol version 9p2000.uµ;9}Å„·O&¥eîªuê1À}Í‚Gȳnüm¤û.§ñól……ks¬˜rº¼b–™¶¸Ç–§ƒ>´µÊfCµe:+<[‡á|¡ [ 58.045614][ T5986] Bluetooth: hci0: command 0x040f tx timeout [ 58.210682][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 58.596703][ T6169] kernel profiling enabled (shift: 63) [ 58.599891][ T6169] profiling shift: 63 too large [ 58.663733][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 58.701087][ T6173] netlink: 'syz.3.36': attribute type 10 has an invalid length. [ 58.704031][ T6173] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 58.708012][ T6173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.737846][ T6173] 8021q: VLANs not supported on caif0 [ 58.815761][ T5986] Bluetooth: hci2: command 0x0419 tx timeout [ 58.815791][ T5977] Bluetooth: hci1: command 0x0419 tx timeout [ 58.955358][ T6186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11792 sclass=netlink_route_socket pid=6186 comm=syz.3.41 [ 59.157172][ T838] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.275995][ T6199] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.45'. [ 59.279129][ T6199] netlink: zone id is out of range [ 59.281119][ T6199] netlink: zone id is out of range [ 59.282723][ T6199] netlink: get zone limit has 8 unknown bytes [ 59.286928][ T6199] netlink: 'syz.3.45': attribute type 2 has an invalid length. [ 59.328518][ T838] usb 7-1: Using ep0 maxpacket: 8 [ 59.332991][ T838] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 59.338716][ T838] usb 7-1: config 0 has no interface number 0 [ 59.340702][ T838] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 59.344716][ T838] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 59.351921][ T838] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 59.356568][ T838] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 59.361889][ T838] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 59.365791][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.371417][ T838] usb 7-1: config 0 descriptor?? [ 59.384627][ T838] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 59.599036][ T6182] netlink: 16122 bytes leftover after parsing attributes in process `syz.2.39'. [ 59.618508][ T838] usb 7-1: USB disconnect, device number 2 [ 59.625036][ T838] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 59.675169][ T6222] Zero length message leads to an empty skb [ 59.755554][ T24] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 59.758664][ T24] em28xx 5-1:0.0: board has no eeprom [ 59.819890][ T24] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 59.822496][ T24] em28xx 5-1:0.0: dvb set to bulk mode. [ 59.824451][ T2299] em28xx 5-1:0.0: Binding DVB extension [ 59.866501][ T2299] em28xx 5-1:0.0: Registering input extension [ 60.114446][ T1027] usb 5-1: USB disconnect, device number 2 [ 60.124998][ T1027] em28xx 5-1:0.0: Disconnecting em28xx [ 60.136119][ T1027] em28xx 5-1:0.0: Closing input extension [ 60.150659][ T1027] em28xx 5-1:0.0: Freeing device [ 60.269640][ T5977] Bluetooth: hci0: command 0x040f tx timeout [ 60.272794][ T6271] : entered promiscuous mode [ 60.314607][ T6277] syz.0.62 uses obsolete (PF_INET,SOCK_PACKET) [ 60.349958][ T6280] FAULT_INJECTION: forcing a failure. [ 60.349958][ T6280] name failslab, interval 1, probability 0, space 0, times 0 [ 60.356533][ T6280] CPU: 3 UID: 0 PID: 6280 Comm: syz.2.64 Not tainted syzkaller #0 PREEMPT(full) [ 60.356554][ T6280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.356561][ T6280] Call Trace: [ 60.356567][ T6280] [ 60.356572][ T6280] dump_stack_lvl+0x16c/0x1f0 [ 60.356595][ T6280] should_fail_ex+0x512/0x640 [ 60.356609][ T6280] ? __kvmalloc_node_noprof+0x124/0x620 [ 60.356624][ T6280] should_failslab+0xc2/0x120 [ 60.356638][ T6280] __kvmalloc_node_noprof+0x137/0x620 [ 60.356649][ T6280] ? simple_xattr_alloc+0x41/0xa0 [ 60.356669][ T6280] ? simple_xattr_alloc+0x41/0xa0 [ 60.356683][ T6280] simple_xattr_alloc+0x41/0xa0 [ 60.356698][ T6280] simple_xattr_set+0x3d/0x3e0 [ 60.356716][ T6280] shmem_xattr_handler_set+0x31b/0x3b0 [ 60.356734][ T6280] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 60.356747][ T6280] __vfs_setxattr+0x172/0x1e0 [ 60.356761][ T6280] ? __pfx___vfs_setxattr+0x10/0x10 [ 60.356777][ T6280] __vfs_setxattr_noperm+0x127/0x660 [ 60.356796][ T6280] __vfs_setxattr_locked+0x182/0x260 [ 60.356812][ T6280] vfs_setxattr+0x145/0x360 [ 60.356826][ T6280] ? __pfx_vfs_setxattr+0x10/0x10 [ 60.356838][ T6280] ? __pfx_shmem_encode_fh+0x10/0x10 [ 60.356859][ T6280] ovl_check_setxattr+0x181/0x320 [ 60.356875][ T6280] ovl_set_impure+0x13e/0x1e0 [ 60.356886][ T6280] ovl_copy_up_one+0x914/0x38e0 [ 60.356902][ T6280] ? __lock_acquire+0x62e/0x1ce0 [ 60.356924][ T6280] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 60.356939][ T6280] ? find_held_lock+0x2b/0x80 [ 60.356954][ T6280] ? avc_has_perm_noaudit+0x117/0x3b0 [ 60.356972][ T6280] ? __lock_acquire+0x62e/0x1ce0 [ 60.357011][ T6280] ? dget_parent+0xf8/0x5e0 [ 60.357034][ T6280] ovl_copy_up_flags+0x18d/0x200 [ 60.357048][ T6280] ovl_link+0x30/0x220 [ 60.357065][ T6280] ? bpf_lsm_inode_link+0x9/0x10 [ 60.357079][ T6280] vfs_link+0x836/0xe50 [ 60.357093][ T6280] do_linkat+0x46c/0x5a0 [ 60.357109][ T6280] ? __pfx_do_linkat+0x10/0x10 [ 60.357122][ T6280] ? strncpy_from_user+0x203/0x2e0 [ 60.357136][ T6280] ? getname_flags.part.0+0x1c5/0x550 [ 60.357157][ T6280] __x64_sys_link+0x7d/0xa0 [ 60.357171][ T6280] do_syscall_64+0xcd/0x4c0 [ 60.357229][ T6280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.357244][ T6280] RIP: 0033:0x7ffb1eb8ebe9 [ 60.357255][ T6280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.357270][ T6280] RSP: 002b:00007ffb1fada038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 60.357283][ T6280] RAX: ffffffffffffffda RBX: 00007ffb1edc5fa0 RCX: 00007ffb1eb8ebe9 [ 60.357290][ T6280] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200 [ 60.357296][ T6280] RBP: 00007ffb1fada090 R08: 0000000000000000 R09: 0000000000000000 [ 60.357302][ T6280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.357308][ T6280] R13: 00007ffb1edc6038 R14: 00007ffb1edc5fa0 R15: 00007ffeefcc6118 [ 60.357323][ T6280] [ 60.387091][ T838] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.514907][ T6286] netlink: 32 bytes leftover after parsing attributes in process `syz.2.65'. [ 60.572730][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 60.601053][ T5977] Bluetooth: hci0: unexpected event for opcode 0x0c24 [ 60.665311][ T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.669356][ T838] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.673603][ T838] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.680681][ T838] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.684111][ T838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.695029][ T838] usb 8-1: config 0 descriptor?? [ 60.743354][ T6302] FAULT_INJECTION: forcing a failure. [ 60.743354][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 60.744464][ T6297] netlink: 'syz.1.72': attribute type 1 has an invalid length. [ 60.748119][ T6302] CPU: 1 UID: 0 PID: 6302 Comm: syz.0.73 Not tainted syzkaller #0 PREEMPT(full) [ 60.748139][ T6302] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.748147][ T6302] Call Trace: [ 60.748153][ T6302] [ 60.748159][ T6302] dump_stack_lvl+0x16c/0x1f0 [ 60.748182][ T6302] should_fail_ex+0x512/0x640 [ 60.748215][ T6302] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 60.748232][ T6302] should_failslab+0xc2/0x120 [ 60.748247][ T6302] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 60.748261][ T6302] ? __d_alloc+0x32/0xae0 [ 60.748281][ T6302] __d_alloc+0x32/0xae0 [ 60.748299][ T6302] d_alloc_parallel+0x111/0x1480 [ 60.748328][ T6302] ? avc_has_perm_noaudit+0x117/0x3b0 [ 60.748345][ T6302] ? map_id_range_up+0x2ce/0x3b0 [ 60.748361][ T6302] ? __pfx_d_alloc_parallel+0x10/0x10 [ 60.748383][ T6302] ? lockdep_init_map_type+0x5c/0x280 [ 60.748397][ T6302] ? lockdep_init_map_type+0x5c/0x280 [ 60.748412][ T6302] __lookup_slow+0x193/0x460 [ 60.748438][ T6302] ? __pfx___lookup_slow+0x10/0x10 [ 60.748459][ T6302] ? pcpu_init_md_blocks+0x1e0/0x3a0 [ 60.748482][ T6302] ? pcpu_init_md_blocks+0x1e0/0x3a0 [ 60.748501][ T6302] ? d_lookup+0xe7/0x190 [ 60.748524][ T6302] lookup_one+0x115/0x170 [ 60.748545][ T6302] ovl_lookup_temp+0x1a8/0x2b0 [ 60.748565][ T6302] ? __pfx_ovl_lookup_temp+0x10/0x10 [ 60.748584][ T6302] ? __pfx_down_write_nested+0x10/0x10 [ 60.748603][ T6302] ovl_create_temp+0x53/0xb0 [ 60.748627][ T6302] ovl_copy_up_one+0xc18/0x38e0 [ 60.748644][ T6302] ? __lock_acquire+0x5b0/0x1ce0 [ 60.748671][ T6302] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 60.748691][ T6302] ? avc_has_perm_noaudit+0x117/0x3b0 [ 60.748735][ T6302] ? dget_parent+0xf8/0x5e0 [ 60.748760][ T6302] ovl_copy_up_flags+0x18d/0x200 [ 60.748776][ T6302] ovl_link+0x30/0x220 [ 60.748794][ T6302] ? bpf_lsm_inode_link+0x9/0x10 [ 60.748811][ T6302] vfs_link+0x836/0xe50 [ 60.748826][ T6302] do_linkat+0x46c/0x5a0 [ 60.748845][ T6302] ? __pfx_do_linkat+0x10/0x10 [ 60.748860][ T6302] ? strncpy_from_user+0x203/0x2e0 [ 60.748876][ T6302] ? getname_flags.part.0+0x1c5/0x550 [ 60.748899][ T6302] __x64_sys_link+0x7d/0xa0 [ 60.748915][ T6302] do_syscall_64+0xcd/0x4c0 [ 60.748933][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.748946][ T6302] RIP: 0033:0x7f149f58ebe9 [ 60.748960][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.748972][ T6302] RSP: 002b:00007f14a0471038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 60.748985][ T6302] RAX: ffffffffffffffda RBX: 00007f149f7c5fa0 RCX: 00007f149f58ebe9 [ 60.748993][ T6302] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200 [ 60.749001][ T6302] RBP: 00007f14a0471090 R08: 0000000000000000 R09: 0000000000000000 [ 60.749026][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.749034][ T6302] R13: 00007f149f7c6038 R14: 00007f149f7c5fa0 R15: 00007ffe54d4dc38 [ 60.749052][ T6302] [ 60.867743][ T6297] netlink: 228 bytes leftover after parsing attributes in process `syz.1.72'. [ 60.935484][ T6307] overlay: ./file0 is not a directory [ 61.038092][ T5977] Bluetooth: hci2: command 0x0419 tx timeout [ 61.050349][ T5977] Bluetooth: hci1: command 0x0419 tx timeout [ 61.053519][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 61.061789][ T6314] netlink: 'syz.1.78': attribute type 1 has an invalid length. [ 61.064861][ T6314] netlink: 'syz.1.78': attribute type 3 has an invalid length. [ 61.075176][ T6314] pim6reg: entered allmulticast mode [ 61.110052][ T1167] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.114240][ T1167] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.117639][ T1167] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.120806][ T1167] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.155561][ T2299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.317661][ T2299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.322019][ T2299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.325793][ T2299] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 61.328884][ T2299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.334188][ T2299] usb 5-1: config 0 descriptor?? [ 61.346288][ T838] usbhid 8-1:0.0: can't add hid device: -71 [ 61.348344][ T838] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 61.352635][ T838] usb 8-1: USB disconnect, device number 3 [ 61.621864][ T6333] FAULT_INJECTION: forcing a failure. [ 61.621864][ T6333] name failslab, interval 1, probability 0, space 0, times 0 [ 61.628771][ T6333] CPU: 0 UID: 0 PID: 6333 Comm: syz.0.82 Not tainted syzkaller #0 PREEMPT(full) [ 61.628788][ T6333] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.628795][ T6333] Call Trace: [ 61.628800][ T6333] [ 61.628805][ T6333] dump_stack_lvl+0x16c/0x1f0 [ 61.628824][ T6333] should_fail_ex+0x512/0x640 [ 61.628838][ T6333] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 61.628854][ T6333] should_failslab+0xc2/0x120 [ 61.628869][ T6333] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 61.628883][ T6333] ? shmem_alloc_inode+0x25/0x50 [ 61.628901][ T6333] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 61.628917][ T6333] shmem_alloc_inode+0x25/0x50 [ 61.628931][ T6333] alloc_inode+0x64/0x240 [ 61.628950][ T6333] new_inode+0x22/0x1c0 [ 61.628970][ T6333] shmem_get_inode+0x19a/0xfb0 [ 61.628991][ T6333] shmem_mknod+0x1a8/0x450 [ 61.629010][ T6333] vfs_mknod+0x5da/0x8e0 [ 61.629024][ T6333] ovl_create_real+0x3bb/0x780 [ 61.629044][ T6333] ovl_create_temp+0x64/0xb0 [ 61.629064][ T6333] ovl_copy_up_one+0xc18/0x38e0 [ 61.629079][ T6333] ? __lock_acquire+0x5b0/0x1ce0 [ 61.629102][ T6333] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 61.629122][ T6333] ? avc_has_perm_noaudit+0x117/0x3b0 [ 61.629163][ T6333] ? dget_parent+0xf8/0x5e0 [ 61.629224][ T6333] ovl_copy_up_flags+0x18d/0x200 [ 61.629241][ T6333] ovl_link+0x30/0x220 [ 61.629258][ T6333] ? bpf_lsm_inode_link+0x9/0x10 [ 61.629273][ T6333] vfs_link+0x836/0xe50 [ 61.629287][ T6333] do_linkat+0x46c/0x5a0 [ 61.629305][ T6333] ? __pfx_do_linkat+0x10/0x10 [ 61.629320][ T6333] ? strncpy_from_user+0x203/0x2e0 [ 61.629335][ T6333] ? getname_flags.part.0+0x1c5/0x550 [ 61.629357][ T6333] __x64_sys_link+0x7d/0xa0 [ 61.629372][ T6333] do_syscall_64+0xcd/0x4c0 [ 61.629388][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.629401][ T6333] RIP: 0033:0x7f149f58ebe9 [ 61.629413][ T6333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.629425][ T6333] RSP: 002b:00007f14a0471038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 61.629437][ T6333] RAX: ffffffffffffffda RBX: 00007f149f7c5fa0 RCX: 00007f149f58ebe9 [ 61.629445][ T6333] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200 [ 61.629452][ T6333] RBP: 00007f14a0471090 R08: 0000000000000000 R09: 0000000000000000 [ 61.629459][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.629466][ T6333] R13: 00007f149f7c6038 R14: 00007f149f7c5fa0 R15: 00007ffe54d4dc38 [ 61.629482][ T6333] [ 61.848426][ T6350] affs: No valid root block on device nbd2 [ 61.935286][ T6356] misc userio: The device must be registered before sending interrupts [ 61.950707][ T6362] kvm: user requested TSC rate below hardware speed [ 61.959191][ T6360] ip6gretap1: entered promiscuous mode [ 61.961273][ T6360] ip6gretap1: entered allmulticast mode [ 61.992959][ T6356] random: crng reseeded on system resumption [ 62.057981][ T6368] trusted_key: encrypted_key: insufficient parameters specified [ 62.062136][ T6368] misc userio: No port type given on /dev/userio [ 62.189889][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 62.189906][ T40] audit: type=1400 audit(1756526451.212:285): avc: denied { bind } for pid=6382 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.200964][ T6388] __nla_validate_parse: 2 callbacks suppressed [ 62.200984][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 62.201002][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 62.201034][ T6388] netlink: 'syz.0.100': attribute type 18 has an invalid length. [ 62.248388][ T40] audit: type=1400 audit(1756526451.278:286): avc: denied { connect } for pid=6389 comm="syz.2.101" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.271997][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 62.423318][ T6398] netlink: 88 bytes leftover after parsing attributes in process `syz.1.104'. [ 62.443122][ T40] audit: type=1400 audit(1756526451.455:287): avc: denied { create } for pid=6400 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.451555][ T40] audit: type=1400 audit(1756526451.455:288): avc: denied { bind } for pid=6400 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.458447][ T40] audit: type=1400 audit(1756526451.465:289): avc: denied { bind } for pid=6400 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.465087][ T40] audit: type=1400 audit(1756526451.465:290): avc: denied { read } for pid=6400 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.507618][ T40] audit: type=1400 audit(1756526451.512:291): avc: denied { write } for pid=6400 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 62.517946][ T40] audit: type=1400 audit(1756526451.521:292): avc: denied { getopt } for pid=6400 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 62.582773][ T40] audit: type=1400 audit(1756526451.586:293): avc: denied { audit_write } for pid=6404 comm="syz.1.106" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 62.591838][ T40] audit: type=1400 audit(1756526451.586:294): avc: denied { read write } for pid=6404 comm="syz.1.106" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 62.884193][ T6423] ptrace attach of "/syz-executor exec"[5976] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 62.891268][ T6423] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 63.111574][ T6427] can0: slcan on ttyS3. [ 63.209136][ T6427] can0 (unregistered): slcan off ttyS3. [ 63.260904][ T5977] Bluetooth: hci1: command 0x0419 tx timeout [ 63.260972][ T5986] Bluetooth: hci2: command 0x0419 tx timeout [ 63.535258][ T6441] kvm: MWAIT instruction emulated as NOP! [ 63.694316][ T5986] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 63.863506][ T6444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.866987][ T6444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.328991][ T6457] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 64.872584][ T6475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1056 sclass=netlink_route_socket pid=6475 comm=syz.0.124 [ 64.913723][ T6477] FAULT_INJECTION: forcing a failure. [ 64.913723][ T6477] name failslab, interval 1, probability 0, space 0, times 0 [ 64.919324][ T6477] CPU: 3 UID: 0 PID: 6477 Comm: syz.2.125 Not tainted syzkaller #0 PREEMPT(full) [ 64.919341][ T6477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 64.919347][ T6477] Call Trace: [ 64.919351][ T6477] [ 64.919355][ T6477] dump_stack_lvl+0x16c/0x1f0 [ 64.919393][ T6477] should_fail_ex+0x512/0x640 [ 64.919412][ T6477] ? __kvmalloc_node_noprof+0x124/0x620 [ 64.919425][ T6477] should_failslab+0xc2/0x120 [ 64.919444][ T6477] __kvmalloc_node_noprof+0x137/0x620 [ 64.919454][ T6477] ? vfs_link+0x836/0xe50 [ 64.919465][ T6477] ? ovl_copy_xattr+0x1c6/0xd60 [ 64.919475][ T6477] ? __pfx_shmem_listxattr+0x10/0x10 [ 64.919493][ T6477] ? ovl_copy_xattr+0x1c6/0xd60 [ 64.919503][ T6477] ovl_copy_xattr+0x1c6/0xd60 [ 64.919520][ T6477] ovl_copy_up_metadata+0x1ac/0x890 [ 64.919532][ T6477] ? __pfx_ovl_copy_up_metadata+0x10/0x10 [ 64.919545][ T6477] ? down_write_nested+0x151/0x210 [ 64.919558][ T6477] ? __pfx_down_write_nested+0x10/0x10 [ 64.919573][ T6477] ? lock_two_directories+0x225/0x2d0 [ 64.919591][ T6477] ovl_copy_up_one+0x2623/0x38e0 [ 64.919604][ T6477] ? __lock_acquire+0x5b0/0x1ce0 [ 64.919624][ T6477] ? __pfx_ovl_copy_up_one+0x10/0x10 [ 64.919641][ T6477] ? avc_has_perm_noaudit+0x117/0x3b0 [ 64.919678][ T6477] ? dget_parent+0xf8/0x5e0 [ 64.919699][ T6477] ovl_copy_up_flags+0x18d/0x200 [ 64.919713][ T6477] ovl_link+0x30/0x220 [ 64.919729][ T6477] ? bpf_lsm_inode_link+0x9/0x10 [ 64.919742][ T6477] vfs_link+0x836/0xe50 [ 64.919754][ T6477] do_linkat+0x46c/0x5a0 [ 64.919770][ T6477] ? __pfx_do_linkat+0x10/0x10 [ 64.919783][ T6477] ? strncpy_from_user+0x203/0x2e0 [ 64.919797][ T6477] ? getname_flags.part.0+0x1c5/0x550 [ 64.919816][ T6477] __x64_sys_link+0x7d/0xa0 [ 64.919830][ T6477] do_syscall_64+0xcd/0x4c0 [ 64.919844][ T6477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.919856][ T6477] RIP: 0033:0x7ffb1eb8ebe9 [ 64.919865][ T6477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.919875][ T6477] RSP: 002b:00007ffb1fada038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 64.919887][ T6477] RAX: ffffffffffffffda RBX: 00007ffb1edc5fa0 RCX: 00007ffb1eb8ebe9 [ 64.919893][ T6477] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000200000000200 [ 64.919900][ T6477] RBP: 00007ffb1fada090 R08: 0000000000000000 R09: 0000000000000000 [ 64.919906][ T6477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.919912][ T6477] R13: 00007ffb1edc6038 R14: 00007ffb1edc5fa0 R15: 00007ffeefcc6118 [ 64.919926][ T6477] [ 64.931296][ T6479] binder: 6478:6479 ioctl c0306201 0 returned -14 [ 64.992501][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.126'. [ 65.279264][ T6495] Bluetooth: MGMT ver 1.23 [ 65.318043][ T6499] fuse: Unknown parameter 'grŠup_i$' [ 65.420929][ T61] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.424844][ T61] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.429257][ T61] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.434531][ T61] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.484001][ T5986] Bluetooth: hci2: command 0x0419 tx timeout [ 65.520654][ T6523] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 65.651669][ T5986] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 65.653358][ T6537] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.141'. [ 65.692270][ T6539] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 65.881605][ T34] cfg80211: failed to load regulatory.db [ 65.973281][ T6547] netlink: 16 bytes leftover after parsing attributes in process `syz.0.144'. [ 66.065545][ T6560] sg_write: process 87 (syz.1.147) changed security contexts after opening file descriptor, this is not allowed. [ 66.170415][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.149'. [ 66.333716][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 66.409929][ T6586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.154'. [ 66.456055][ T6588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.482548][ T6588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.512255][ T6588] 8021q: adding VLAN 0 to HW filter on device bond3 [ 66.532828][ T6588] 8021q: adding VLAN 0 to HW filter on device bond4 [ 66.549746][ T6588] 8021q: adding VLAN 0 to HW filter on device bond5 [ 66.567854][ T6588] 8021q: adding VLAN 0 to HW filter on device bond6 [ 66.582821][ T6588] 8021q: adding VLAN 0 to HW filter on device bond7 [ 66.596035][ T6588] 8021q: adding VLAN 0 to HW filter on device bond8 [ 66.610071][ T6588] 8021q: adding VLAN 0 to HW filter on device bond9 [ 66.624867][ T6588] 8021q: adding VLAN 0 to HW filter on device bond10 [ 66.651710][ T6588] 8021q: adding VLAN 0 to HW filter on device bond11 [ 66.665930][ T6588] 8021q: adding VLAN 0 to HW filter on device bond12 [ 66.680067][ T6588] 8021q: adding VLAN 0 to HW filter on device bond13 [ 66.700318][ T6588] 8021q: adding VLAN 0 to HW filter on device bond14 [ 66.718265][ T6588] 8021q: adding VLAN 0 to HW filter on device bond15 [ 66.732910][ T6588] 8021q: adding VLAN 0 to HW filter on device bond16 [ 66.748917][ T6588] 8021q: adding VLAN 0 to HW filter on device bond17 [ 66.763327][ T6588] 8021q: adding VLAN 0 to HW filter on device bond18 [ 66.768425][ T2299] usbhid 5-1:0.0: can't add hid device: -32 [ 66.770605][ T2299] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 66.782767][ T6588] 8021q: adding VLAN 0 to HW filter on device bond19 [ 66.803078][ T6588] 8021q: adding VLAN 0 to HW filter on device bond20 [ 66.813188][ T6615] nbd: must specify at least one socket [ 66.819771][ T6588] 8021q: adding VLAN 0 to HW filter on device bond21 [ 66.839336][ T6588] 8021q: adding VLAN 0 to HW filter on device bond22 [ 66.855098][ T6588] 8021q: adding VLAN 0 to HW filter on device bond23 [ 66.867927][ T6588] 8021q: adding VLAN 0 to HW filter on device bond24 [ 66.882543][ T6588] 8021q: adding VLAN 0 to HW filter on device bond25 [ 66.898651][ T6588] 8021q: adding VLAN 0 to HW filter on device bond26 [ 66.917614][ T6588] 8021q: adding VLAN 0 to HW filter on device bond27 [ 66.933486][ T6588] 8021q: adding VLAN 0 to HW filter on device bond28 [ 66.950800][ T6588] 8021q: adding VLAN 0 to HW filter on device bond29 [ 66.966374][ T6588] 8021q: adding VLAN 0 to HW filter on device bond30 [ 66.991012][ T6588] 8021q: adding VLAN 0 to HW filter on device bond31 [ 66.992293][ T54] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 67.008517][ T6588] 8021q: adding VLAN 0 to HW filter on device bond32 [ 67.027941][ T6588] 8021q: adding VLAN 0 to HW filter on device bond33 [ 67.049309][ T6588] 8021q: adding VLAN 0 to HW filter on device bond34 [ 67.070591][ T6588] 8021q: adding VLAN 0 to HW filter on device bond35 [ 67.085725][ T6634] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 67.096497][ T6588] 8021q: adding VLAN 0 to HW filter on device bond36 [ 67.115709][ T6588] 8021q: adding VLAN 0 to HW filter on device bond37 [ 67.135851][ T6588] 8021q: adding VLAN 0 to HW filter on device bond38 [ 67.151732][ T54] usb 6-1: Using ep0 maxpacket: 16 [ 67.159369][ T54] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 67.164599][ T54] usb 6-1: config 0 has no interface number 0 [ 67.170095][ T54] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 67.174483][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.178365][ T54] usb 6-1: Product: syz [ 67.180090][ T6588] 8021q: adding VLAN 0 to HW filter on device bond39 [ 67.180368][ T54] usb 6-1: Manufacturer: syz [ 67.180386][ T54] usb 6-1: SerialNumber: syz [ 67.188793][ T54] usb 6-1: config 0 descriptor?? [ 67.230835][ T6588] 8021q: adding VLAN 0 to HW filter on device bond40 [ 67.248767][ T6588] 8021q: adding VLAN 0 to HW filter on device bond41 [ 67.269594][ T6588] 8021q: adding VLAN 0 to HW filter on device bond42 [ 67.272234][ T6645] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 67.275028][ T6645] netlink: 'syz.2.162': attribute type 4 has an invalid length. [ 67.285416][ T6588] 8021q: adding VLAN 0 to HW filter on device bond43 [ 67.301618][ T6588] 8021q: adding VLAN 0 to HW filter on device bond44 [ 67.316665][ T6588] 8021q: adding VLAN 0 to HW filter on device bond45 [ 67.333653][ T6588] 8021q: adding VLAN 0 to HW filter on device bond46 [ 67.406195][ T6656] trusted_key: syz.0.164 sent an empty control message without MSG_MORE. [ 67.698124][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 67.698140][ T40] audit: type=1400 audit(1756526456.377:347): avc: denied { ioctl } for pid=6663 comm="syz.0.166" path="socket:[13542]" dev="sockfs" ino=13542 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.736987][ T40] audit: type=1326 audit(1756526456.405:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.167" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149f58ebe9 code=0x7ffc0000 [ 67.747136][ T40] audit: type=1326 audit(1756526456.405:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.167" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149f58ebe9 code=0x7ffc0000 [ 67.755483][ T40] audit: type=1326 audit(1756526456.405:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.167" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f149f58ebe9 code=0x7ffc0000 [ 67.762347][ T6668] netlink: 'syz.3.168': attribute type 4 has an invalid length. [ 67.765936][ T40] audit: type=1326 audit(1756526456.405:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.167" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149f58ebe9 code=0x7ffc0000 [ 67.775646][ T40] audit: type=1326 audit(1756526456.405:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.167" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149f58ebe9 code=0x7ffc0000 [ 67.792308][ T40] audit: type=1326 audit(1756526456.405:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.167" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f149f58ebe9 code=0x7ffc0000 [ 67.802840][ T40] audit: type=1326 audit(1756526456.405:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.167" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149f58ebe9 code=0x7ffc0000 [ 67.822821][ T40] audit: type=1326 audit(1756526456.405:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.167" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149f58ebe9 code=0x7ffc0000 [ 67.831749][ T40] audit: type=1326 audit(1756526456.405:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6665 comm="syz.0.167" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f149f58ebe9 code=0x7ffc0000 [ 67.844125][ T5986] Bluetooth: hci0: unexpected event for opcode 0x080d [ 67.848852][ T6675] tipc: Started in network mode [ 67.853361][ T6675] tipc: Node identity a63ddee3689e, cluster identity 4711 [ 67.857101][ T6675] tipc: Enabled bearer , priority 0 [ 67.860046][ T6675] syzkaller0: entered promiscuous mode [ 67.861812][ T6675] syzkaller0: entered allmulticast mode [ 67.880863][ T6675] tipc: Resetting bearer [ 67.891644][ T6674] tipc: Resetting bearer [ 67.902184][ T6674] tipc: Disabling bearer [ 67.983165][ T6687] __nla_validate_parse: 1 callbacks suppressed [ 67.983176][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 68.150983][ T6701] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=122 sclass=netlink_tcpdiag_socket pid=6701 comm=syz.3.175 [ 68.499420][ T6725] IPVS: Error connecting to the multicast addr [ 68.585267][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.3.188'. [ 68.643971][ T6743] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.658174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.661831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.673264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 68.832976][ T6744] Invalid option length (374) for dns_resolver key [ 68.957496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 69.165539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.171658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.267042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.384655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 69.384932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 69.417178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.636450][ T78] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.666493][ T6749] evm: overlay not supported [ 69.794677][ T54] usb 6-1: USB disconnect, device number 2 [ 70.027693][ T6755] tmpfs: User quota inode hardlimit too large. [ 70.428668][ T6765] tipc: Trying to set illegal importance in message [ 70.491902][ T6774] netlink: 504 bytes leftover after parsing attributes in process `syz.3.200'. [ 70.581261][ T6781] overlayfs: failed to resolve 'verity=require': -2 [ 70.583423][ T6779] netlink: 164 bytes leftover after parsing attributes in process `syz.2.202'. [ 70.591073][ T6779] netlink: 164 bytes leftover after parsing attributes in process `syz.2.202'. [ 70.595869][ T6779] netlink: 60 bytes leftover after parsing attributes in process `syz.2.202'. [ 71.374098][ T6836] netem: incorrect ge model size [ 71.376292][ T6836] netem: change failed [ 71.438786][ T6841] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 71.476874][ T6847] loop2: detected capacity change from 0 to 7 [ 71.488445][ T5990] Dev loop2: unable to read RDB block 7 [ 71.492575][ T5990] loop2: AHDI p1 p2 p3 [ 71.494185][ T5990] loop2: partition table partially beyond EOD, truncated [ 71.498618][ T5990] loop2: p1 start 1601398130 is beyond EOD, truncated [ 71.503408][ T5990] loop2: p2 start 1702059890 is beyond EOD, truncated [ 71.513782][ T6847] Dev loop2: unable to read RDB block 7 [ 71.517053][ T6847] loop2: AHDI p1 p2 p3 [ 71.519085][ T6847] loop2: partition table partially beyond EOD, truncated [ 71.522759][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.213'. [ 71.523997][ T6847] loop2: p1 start 1601398130 is beyond EOD, truncated [ 71.528107][ T6847] loop2: p2 start 1702059890 is beyond EOD, truncated [ 71.560718][ T6854] netlink: 72 bytes leftover after parsing attributes in process `syz.0.214'. [ 71.575757][ T6858] netlink: 132 bytes leftover after parsing attributes in process `syz.1.215'. [ 71.602669][ T1149] Bluetooth: hci4: Frame reassembly failed (-84) [ 71.604964][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 71.671320][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 72.164963][ T5977] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 72.169008][ T5977] Bluetooth: hci0: Injecting HCI hardware error event [ 72.173373][ T5977] Bluetooth: hci0: hardware error 0x00 [ 72.638749][ T6888] SELinux: truncated policydb string identifier [ 72.642542][ T6888] SELinux: failed to load policy [ 72.830291][ T6899] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 72.833927][ T6900] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 72.883276][ T6907] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 72.913393][ T6907] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.938256][ T6907] bond2: (slave ip6erspan0): making interface the new active one [ 72.944751][ T6907] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 72.958119][ T6907] process 'syz.3.228' launched './file0' with NULL argv: empty string added [ 73.057194][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 73.057206][ T40] audit: type=1400 audit(1756526461.383:403): avc: denied { accept } for pid=6926 comm="syz.3.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.125994][ T6937] 9pnet: p9_errstr2errno: server reported unknown error @íÿÿÿÿÿÿÿÿ [ 73.173026][ T40] audit: type=1400 audit(1756526461.495:404): avc: denied { setopt } for pid=6938 comm="syz.3.238" lport=34365 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 73.183514][ T40] audit: type=1400 audit(1756526461.495:405): avc: denied { accept } for pid=6938 comm="syz.3.238" lport=34365 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 73.212440][ T6947] befs: (nullb0): No write support. Marking filesystem read-only [ 73.217238][ T6947] befs: (nullb0): invalid magic header [ 73.777013][ T5986] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.777255][ T5331] Bluetooth: hci4: command 0x1003 tx timeout [ 73.821395][ T40] audit: type=1400 audit(1756526462.104:406): avc: denied { create } for pid=6949 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.821895][ T6952] __nla_validate_parse: 3 callbacks suppressed [ 73.821904][ T6952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.241'. [ 73.829647][ T40] audit: type=1400 audit(1756526462.104:407): avc: denied { connect } for pid=6949 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.846586][ T40] audit: type=1400 audit(1756526462.104:408): avc: denied { getopt } for pid=6950 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.888352][ T6954] syzkaller0: entered promiscuous mode [ 73.890623][ T6954] syzkaller0: entered allmulticast mode [ 73.987637][ T6963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.246'. [ 73.992573][ T6963] veth1_vlan: Device is already in use. [ 73.996671][ T40] audit: type=1400 audit(1756526462.263:409): avc: denied { connect } for pid=6962 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.005823][ T40] audit: type=1400 audit(1756526462.263:410): avc: denied { write } for pid=6962 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 74.008184][ T6963] 9p: Unknown Cache mode or invalid value fs [ 74.053056][ T40] audit: type=1400 audit(1756526462.309:411): avc: denied { name_connect } for pid=6968 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 74.053697][ T6970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.246'. [ 74.064331][ T6970] veth1_vlan: Device is already in use. [ 74.110817][ T40] audit: type=1400 audit(1756526462.375:412): avc: denied { create } for pid=6968 comm="syz.2.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 74.192679][ T6980] netlink: 216 bytes leftover after parsing attributes in process `syz.0.250'. [ 74.195984][ T6980] openvswitch: netlink: Flow key attr not present in new flow. [ 74.386392][ T5977] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 74.468222][ T6988] input: syz1 as /devices/virtual/input/input7 [ 74.616497][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 74.741794][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 75.004921][ T7013] overlay: Unknown parameter 'smackfshat' [ 75.116528][ T7024] program syz.2.267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.118656][ T7025] input: syz1 as /devices/virtual/input/input8 [ 75.243373][ T7029] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 75.361760][ T7046] netdevsim netdevsim2: Direct firmware load for . [ 75.361760][ T7046] failed with error -2 [ 75.367548][ T7046] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 75.367548][ T7046] [ 75.412783][ T7036] netlink: 92 bytes leftover after parsing attributes in process `syz.1.271'. [ 75.466632][ T7053] capability: warning: `syz.0.276' uses deprecated v2 capabilities in a way that may be insecure [ 75.619303][ T7057] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.277'. [ 75.678964][ T7060] block nbd1: Attempted send on invalid socket [ 75.683398][ T7060] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.692004][ T7060] block nbd1: Attempted send on invalid socket [ 75.694537][ T7060] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.697739][ T7060] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 75.703481][ T7060] block nbd1: Attempted send on invalid socket [ 75.706528][ T7060] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.710981][ T7060] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 75.715531][ T7060] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 75.719282][ T7060] UDF-fs: Scanning with blocksize 512 failed [ 75.722258][ T7060] block nbd1: Attempted send on invalid socket [ 75.724302][ T7060] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.727613][ T7060] block nbd1: Attempted send on invalid socket [ 75.730069][ T7060] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.736567][ T7060] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 75.741293][ T7060] block nbd1: Attempted send on invalid socket [ 75.743688][ T7060] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.746737][ T7060] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 75.750484][ T7060] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 75.753488][ T7060] UDF-fs: Scanning with blocksize 1024 failed [ 75.756753][ T7060] block nbd1: Attempted send on invalid socket [ 75.759316][ T7060] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.762656][ T7060] block nbd1: Attempted send on invalid socket [ 75.764886][ T7060] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.768615][ T7060] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 75.772118][ T7060] block nbd1: Attempted send on invalid socket [ 75.774493][ T7060] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.777813][ T7060] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 75.782436][ T7060] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 75.784928][ T7060] UDF-fs: Scanning with blocksize 2048 failed [ 75.788335][ T7060] block nbd1: Attempted send on invalid socket [ 75.790646][ T7060] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.794015][ T7060] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 75.797889][ T7060] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 75.801620][ T7060] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 75.804138][ T7060] UDF-fs: Scanning with blocksize 4096 failed [ 75.806207][ T7060] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 76.102501][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.283'. [ 76.211111][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 76.989212][ T7111] sctp: [Deprecated]: syz.2.294 (pid 7111) Use of int in max_burst socket option deprecated. [ 76.989212][ T7111] Use struct sctp_assoc_value instead [ 77.008902][ T7111] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.013167][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.266002][ T7124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.605661][ T7139] bridge_slave_0: left allmulticast mode [ 77.608252][ T7139] bridge_slave_0: left promiscuous mode [ 77.612686][ T7139] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.619595][ T7139] bridge_slave_1: left allmulticast mode [ 77.621460][ T7139] bridge_slave_1: left promiscuous mode [ 77.623326][ T7139] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.630854][ T7139] bond0: (slave bond_slave_0): Releasing backup interface [ 77.639466][ T7139] bond0: (slave bond_slave_1): Releasing backup interface [ 77.651115][ T7139] team0: Port device team_slave_0 removed [ 77.659788][ T7139] team0: Port device team_slave_1 removed [ 77.662351][ T7139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.665292][ T7139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.670866][ T7139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.673929][ T7139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.782657][ T7146] fuse: Unknown parameter '0x0000000000000006' [ 77.972756][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.051092][ T7157] tmpfs: Bad value for 'mpol' [ 78.342850][ T7169] comedi comedi3: comedi_config --init_data is deprecated [ 78.352791][ T7169] netlink: 'syz.1.313': attribute type 10 has an invalid length. [ 78.414855][ T7173] JFS: discard option not supported on device [ 78.420847][ T7173] Mount JFS Failure: -5 [ 78.487877][ T40] kauditd_printk_skb: 59 callbacks suppressed [ 78.487896][ T40] audit: type=1400 audit(1756526466.464:472): avc: denied { getopt } for pid=7180 comm="syz.2.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.583450][ T7184] xt_socket: unknown flags 0x20 [ 78.616811][ T7186] fuse: Bad value for 'fd' [ 78.643612][ T7189] sit0: entered allmulticast mode [ 78.747271][ T7197] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 78.947010][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.951963][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.123845][ T7204] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.188767][ T40] audit: type=1400 audit(1756526467.119:473): avc: denied { connect } for pid=7205 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 79.243125][ T40] audit: type=1400 audit(1756526467.175:474): avc: denied { write } for pid=7205 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 79.620956][ T40] audit: type=1400 audit(1756526467.521:475): avc: denied { view } for pid=7221 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 79.660729][ T40] audit: type=1400 audit(1756526467.568:476): avc: denied { setopt } for pid=7226 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.666486][ T7228] __nla_validate_parse: 14 callbacks suppressed [ 79.666504][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 79.670015][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 79.684802][ T40] audit: type=1400 audit(1756526467.587:477): avc: denied { write } for pid=7226 comm="syz.1.332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 79.740224][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 79.779767][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 79.788088][ T40] audit: type=1400 audit(1756526467.680:478): avc: denied { setopt } for pid=7250 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.798293][ T40] audit: type=1400 audit(1756526467.690:479): avc: denied { connect } for pid=7250 comm="syz.2.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.805736][ T40] audit: type=1400 audit(1756526467.690:480): avc: denied { read } for pid=7250 comm="syz.2.338" laddr=fe80::ac2c:a7ff:fe4d:8a27 lport=2 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 79.878842][ T7264] netlink: 'syz.2.342': attribute type 10 has an invalid length. [ 79.897069][ T7264] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 79.905440][ T40] audit: type=1400 audit(1756526467.793:481): avc: denied { getopt } for pid=7263 comm="syz.2.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.957996][ T7269] netlink: 'syz.1.344': attribute type 11 has an invalid length. [ 79.982765][ T7270] bridge1: entered promiscuous mode [ 80.001216][ T7267] batadv_slave_0: entered promiscuous mode [ 80.004519][ T7267] ip6gretap0: entered promiscuous mode [ 80.016602][ T7267] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.118925][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.122942][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.147212][ T7286] netlink: 'syz.0.348': attribute type 83 has an invalid length. [ 80.403077][ T5985] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 80.565343][ T5985] usb 6-1: No LPM exit latency info found, disabling LPM. [ 80.570077][ T5985] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 80.574478][ T5985] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.582395][ T5985] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.586627][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.589621][ T5985] usb 6-1: Product: 倊 [ 80.591421][ T5985] usb 6-1: Manufacturer: у [ 80.593164][ T5985] usb 6-1: SerialNumber: ç¾¾é½šâ¤’ê§ ä¥„ä˜¨â°€æ¬™é¶·ë²¶è¸¤ëž„â¿±ì©³èŠ˜é¦¿è–£æŒ [ 80.615354][ T7314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.625527][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.632099][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.770451][ T7325] netlink: 'syz.3.361': attribute type 10 has an invalid length. [ 80.773726][ T7325] netlink: 40 bytes leftover after parsing attributes in process `syz.3.361'. [ 80.900838][ T5977] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 81.056276][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.060558][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.278781][ T5977] Bluetooth: hci3: connection err: -111 [ 81.279600][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.285027][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.286060][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.293490][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.305195][ T5985] usb 6-1: 0:2 : does not exist [ 81.316607][ T7360] netlink: 44 bytes leftover after parsing attributes in process `syz.3.372'. [ 81.320804][ T7360] netlink: 'syz.3.372': attribute type 6 has an invalid length. [ 81.326424][ T7360] netlink: 'syz.3.372': attribute type 5 has an invalid length. [ 81.330357][ T7360] netlink: 'syz.3.372': attribute type 4 has an invalid length. [ 81.331351][ T5985] usb 6-1: USB disconnect, device number 3 [ 81.335134][ T7359] netlink: 44 bytes leftover after parsing attributes in process `syz.3.372'. [ 81.335882][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 81.338432][ T7359] netlink: 'syz.3.372': attribute type 6 has an invalid length. [ 81.345144][ T7359] netlink: 'syz.3.372': attribute type 5 has an invalid length. [ 81.348066][ T7359] netlink: 'syz.3.372': attribute type 4 has an invalid length. [ 81.474343][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 81.542497][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 81.667959][ T34] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 81.671977][ T34] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 81.676715][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 81.681810][ T34] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 81.686236][ T34] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 81.690058][ T34] usb 7-1: Product: syz [ 81.691477][ T34] usb 7-1: Manufacturer: syz [ 81.693135][ T34] usb 7-1: SerialNumber: syz [ 81.696324][ T34] usb 7-1: config 0 descriptor?? [ 81.700338][ T34] hub 7-1:0.0: bad descriptor, ignoring hub [ 81.702526][ T34] hub 7-1:0.0: probe with driver hub failed with error -5 [ 81.707319][ T34] usb 7-1: selecting invalid altsetting 0 [ 81.883890][ T7369] UHID_CREATE from different security context by process 216 (syz.1.375), this is not allowed. [ 82.002922][ T7378] tmpfs: Bad value for 'mpol' [ 82.215219][ T7388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=7388 comm=syz.1.382 [ 82.363491][ T839] usb 7-1: USB disconnect, device number 3 [ 82.551792][ T839] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 82.697987][ T7416] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.702429][ T7416] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.723585][ T839] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 82.726826][ T839] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 82.731173][ T839] usb 7-1: config 0 interface 0 has no altsetting 0 [ 82.736791][ T839] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 82.740012][ T839] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 82.742677][ T839] usb 7-1: Product: syz [ 82.744568][ T839] usb 7-1: Manufacturer: syz [ 82.746472][ T839] usb 7-1: SerialNumber: syz [ 82.751056][ T839] usb 7-1: config 0 descriptor?? [ 82.754877][ T839] hub 7-1:0.0: bad descriptor, ignoring hub [ 82.756789][ T839] hub 7-1:0.0: probe with driver hub failed with error -5 [ 82.761918][ T839] usb 7-1: selecting invalid altsetting 0 [ 82.803130][ T7416] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.807111][ T7416] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.850371][ T7420] netlink: 256 bytes leftover after parsing attributes in process `syz.1.394'. [ 82.905948][ T7416] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.910650][ T7416] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.938097][ T7425] fuseblk: Unknown parameter 'fl' [ 83.008262][ T7416] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.013043][ T7416] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.025537][ T7427] sp0: Synchronizing with TNC [ 83.030413][ T7427] sp0: Found TNC [ 83.035833][ T7427] overlay: ./file0\ is not a directory [ 83.038828][ T7426] [U] è` [ 83.083427][ T1149] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.086391][ T838] usb 7-1: USB disconnect, device number 4 [ 83.088363][ T1149] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.103447][ T46] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.107652][ T46] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.118694][ T46] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.121972][ T46] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.131764][ T46] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.134802][ T46] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.553356][ T7484] openvswitch: netlink: Flow key attr not present in new flow. [ 83.596162][ T7488] (syz.2.409,7488,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 83.600710][ T7488] (syz.2.409,7488,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 83.941089][ T5985] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 84.111506][ T5985] usb 7-1: Using ep0 maxpacket: 16 [ 84.116215][ T5985] usb 7-1: config 0 has no interfaces? [ 84.120995][ T5985] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 84.128320][ T5985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.132021][ T5985] usb 7-1: Product: syz [ 84.133881][ T5985] usb 7-1: Manufacturer: syz [ 84.135735][ T5985] usb 7-1: SerialNumber: syz [ 84.142349][ T5985] usb 7-1: config 0 descriptor?? [ 84.219929][ T7496] hugetlbfs: Bad value for 'uid' [ 84.222036][ T7496] hugetlbfs: Bad value for 'uid' [ 84.225328][ T7496] hugetlbfs: Bad value for 'uid' [ 84.227193][ T7496] hugetlbfs: Bad value for 'uid' [ 84.263174][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.266130][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.266940][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 84.266952][ T40] audit: type=1400 audit(1756526471.872:492): avc: denied { watch watch_reads } for pid=7499 comm="syz.1.413" path="pipe:[5892]" dev="pipefs" ino=5892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 84.270513][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.283966][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.286773][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.289473][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.291732][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.295141][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.297629][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.301056][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.304899][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.307589][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.310129][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.312432][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.315249][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.317575][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.319754][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.322117][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.325083][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.328308][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.330673][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.332900][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.335218][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.337556][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.339732][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.342119][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.344729][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.347308][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.349667][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.352194][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.354328][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.356574][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.359290][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.361686][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.363900][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.364619][ T40] audit: type=1400 audit(1756526471.966:493): avc: denied { append } for pid=7493 comm="syz.2.411" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.366480][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.380523][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.382949][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.385455][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.388397][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.391963][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.394328][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.396483][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.398870][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.401621][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.404133][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.406806][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.409248][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.411841][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.414182][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.416826][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.419493][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.422548][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.424953][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.425210][ T40] audit: type=1400 audit(1756526472.022:494): avc: denied { read } for pid=7504 comm="syz.1.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.427484][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.439648][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.442359][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.444962][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.447396][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.449782][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.452005][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.454621][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.456756][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.459238][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.461976][ T5986] Bluetooth: hci3: unexpected event for opcode 0x0c24 [ 84.537783][ T5985] usb 7-1: USB disconnect, device number 5 [ 84.776416][ T7449] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.779499][ T7449] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.782739][ T7449] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.785739][ T7449] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.876941][ T40] audit: type=1400 audit(1756526472.443:495): avc: denied { bind } for pid=7525 comm="syz.3.421" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.886235][ T40] audit: type=1400 audit(1756526472.443:496): avc: denied { name_bind } for pid=7525 comm="syz.3.421" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 84.897189][ T40] audit: type=1400 audit(1756526472.443:497): avc: denied { node_bind } for pid=7525 comm="syz.3.421" saddr=fc01::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 84.964679][ T40] audit: type=1400 audit(1756526472.527:498): avc: denied { append } for pid=7530 comm="syz.3.423" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.973111][ T40] audit: type=1400 audit(1756526472.537:499): avc: denied { set_context_mgr } for pid=7530 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 84.980370][ T40] audit: type=1400 audit(1756526472.546:500): avc: denied { map } for pid=7530 comm="syz.3.423" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 84.989123][ T40] audit: type=1400 audit(1756526472.546:501): avc: denied { call } for pid=7530 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 85.108577][ T7535] capability: warning: `syz.2.425' uses 32-bit capabilities (legacy support in use) [ 85.234863][ T7540] usb usb4: usbfs: process 7540 (syz.3.428) did not claim interface 0 before use [ 85.241470][ T7540] program syz.3.428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.275501][ T7544] __nla_validate_parse: 10 callbacks suppressed [ 85.275514][ T7544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.429'. [ 85.351018][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.430'. [ 85.360478][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 85.368804][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 85.752037][ T7562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.435'. [ 86.263298][ T7581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.442'. [ 86.279831][ T7585] tmpfs: Bad value for 'nr_blocks' [ 86.286130][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 86.289131][ T7584] netlink: 24 bytes leftover after parsing attributes in process `syz.3.443'. [ 86.382031][ T7601] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (18) [ 86.482458][ T7619] sp0: Synchronizing with TNC [ 86.594266][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 86.607941][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 86.798389][ T7644] validate_nla: 2 callbacks suppressed [ 86.798404][ T7644] netlink: 'syz.1.462': attribute type 10 has an invalid length. [ 87.339934][ T7649] ======================================================= [ 87.339934][ T7649] WARNING: The mand mount option has been deprecated and [ 87.339934][ T7649] and is ignored by this kernel. Remove the mand [ 87.339934][ T7649] option from the mount to silence this warning. [ 87.339934][ T7649] ======================================================= [ 87.412065][ T5986] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 87.414209][ T7658] netlink: 'syz.3.466': attribute type 13 has an invalid length. [ 87.454851][ T7665] dns_resolver: Unsupported server list version (0) [ 87.822106][ T7720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7720 comm=syz.3.482 [ 87.823555][ T7719] netlink: 'syz.3.482': attribute type 5 has an invalid length. [ 87.830068][ T7719] netlink: 'syz.3.482': attribute type 7 has an invalid length. [ 87.836679][ T7719] : entered promiscuous mode [ 87.941990][ T7736] nbd_handle_cmd: 4 callbacks suppressed [ 87.942006][ T7736] block nbd3: Attempted send on invalid socket [ 87.946707][ T7736] blk_print_req_error: 4 callbacks suppressed [ 87.946718][ T7736] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.959002][ T7736] block nbd3: Attempted send on invalid socket [ 87.962026][ T7736] I/O error, dev nbd3, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.965546][ T7736] Mount JFS Failure: -5 [ 87.967508][ T7736] jfs_mount failed w/return code = -5 [ 88.187583][ T7748] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.190019][ T7748] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 88.196734][ T7748] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.206932][ T7758] loop2: detected capacity change from 0 to 7 [ 88.219490][ T5990] loop2: [ 88.220382][ T7748] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 88.220742][ T5990] loop2: partition table partially beyond EOD, truncated [ 88.238832][ T7758] loop2: [ 88.240061][ T7758] loop2: partition table partially beyond EOD, truncated [ 88.247046][ T7758] pimreg3: entered allmulticast mode [ 88.508710][ T7775] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 88.511413][ T7775] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 88.522950][ T7775] vhci_hcd vhci_hcd.0: Device attached [ 88.526088][ T7776] vhci_hcd: connection closed [ 88.527905][ T78] vhci_hcd: stop threads [ 88.532502][ T78] vhci_hcd: release socket [ 88.534529][ T78] vhci_hcd: disconnect device [ 89.189712][ T7781] usb usb8: usbfs: process 7781 (syz.3.497) did not claim interface 0 before use [ 90.161400][ T7827] ipvlan2: entered promiscuous mode [ 90.164033][ T7827] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 90.296687][ T7846] overlay: Unknown parameter 'workdiredit' [ 90.650196][ T7858] syz_tun: entered allmulticast mode [ 90.701243][ T7861] __nla_validate_parse: 8 callbacks suppressed [ 90.701258][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 90.769574][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 90.769596][ T40] audit: type=1400 audit(1756526477.954:534): avc: denied { map } for pid=7868 comm="syz.2.525" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.108528][ T7901] vxcan1: tx address claim with dlc 0 [ 91.223092][ T7905] netlink: 156 bytes leftover after parsing attributes in process `syz.3.536'. [ 91.331918][ T40] audit: type=1400 audit(1756526478.488:535): avc: denied { read } for pid=7906 comm="syz.3.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 91.473739][ T40] audit: type=1400 audit(1756526478.609:536): avc: denied { create } for pid=7914 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 91.481555][ T40] audit: type=1400 audit(1756526478.628:537): avc: denied { ioctl } for pid=7914 comm="syz.1.539" path="socket:[20947]" dev="sockfs" ino=20947 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 91.489799][ T40] audit: type=1400 audit(1756526478.628:538): avc: denied { getopt } for pid=7914 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 91.702689][ T7921] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.776344][ T40] audit: type=1400 audit(1756526478.899:539): avc: denied { unmount } for pid=5981 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 91.883700][ T7929] syzkaller0: entered promiscuous mode [ 91.886048][ T7929] syzkaller0: entered allmulticast mode [ 91.913753][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 91.917263][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 91.920775][ T7925] netlink: 'syz.2.542': attribute type 19 has an invalid length. [ 93.231943][ T7934] bridge_slave_0: left allmulticast mode [ 93.235292][ T7934] bridge_slave_0: left promiscuous mode [ 93.237788][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.251829][ T7934] bridge_slave_1: left allmulticast mode [ 93.254721][ T7934] bridge_slave_1: left promiscuous mode [ 93.257316][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.266532][ T7934] bond0: (slave bond_slave_0): Releasing backup interface [ 93.278404][ T1027] hid-generic 0007:0BF4:0004.0002: unknown main item tag 0x0 [ 93.286271][ T1027] hid-generic 0007:0BF4:0004.0002: unknown main item tag 0x0 [ 93.286736][ T7934] bond0: (slave bond_slave_1): Releasing backup interface [ 93.289016][ T1027] hid-generic 0007:0BF4:0004.0002: unknown main item tag 0x0 [ 93.298841][ T1027] hid-generic 0007:0BF4:0004.0002: unknown main item tag 0x0 [ 93.303232][ T1027] hid-generic 0007:0BF4:0004.0002: unknown main item tag 0x0 [ 93.305756][ T1027] hid-generic 0007:0BF4:0004.0002: unknown main item tag 0x0 [ 93.309303][ T1027] hid-generic 0007:0BF4:0004.0002: unknown main item tag 0x0 [ 93.309403][ T7934] team0: Port device team_slave_0 removed [ 93.312929][ T1027] hid-generic 0007:0BF4:0004.0002: unknown main item tag 0x0 [ 93.317978][ T1027] hid-generic 0007:0BF4:0004.0002: unknown main item tag 0x0 [ 93.320997][ T1027] hid-generic 0007:0BF4:0004.0002: unknown main item tag 0x0 [ 93.322172][ T7934] team0: Port device team_slave_1 removed [ 93.327392][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.330358][ T7934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.332035][ T1027] hid-generic 0007:0BF4:0004.0002: hidraw1: HID v0.08 Device [syz1] on syz0 [ 93.341002][ T7934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.343790][ T7934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.358513][ T7934] bond2: (slave ip6erspan0): Releasing active interface [ 93.368769][ T7935] vxcan1: entered promiscuous mode [ 93.373886][ T7935] team0: Port device vxcan1 added [ 93.388446][ T7940] fido_id[7940]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.406764][ T7939] 9pnet_fd: Insufficient options for proto=fd [ 93.505160][ T7958] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 93.512271][ T40] audit: type=1400 audit(1756526480.528:540): avc: denied { shutdown } for pid=7960 comm="syz.2.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.513838][ T7958] macvtap1: entered allmulticast mode [ 93.522444][ T7958] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 93.528641][ T7958] batman_adv: batadv0: Adding interface: macvtap1 [ 93.531790][ T7958] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.545628][ T7958] batman_adv: batadv0: Interface activated: macvtap1 [ 93.681162][ T40] audit: type=1400 audit(1756526480.687:541): avc: denied { accept } for pid=7972 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 93.700421][ T40] audit: type=1326 audit(1756526480.705:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.1.555" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcaf38ebe9 code=0x7fc00000 [ 93.710154][ T40] audit: type=1326 audit(1756526480.705:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7964 comm="syz.1.555" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbcaf38ebe9 code=0x7fc00000 [ 93.807742][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.565'. [ 93.848634][ T5986] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 93.869724][ T7999] netlink: 60 bytes leftover after parsing attributes in process `syz.2.565'. [ 94.042261][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.569'. [ 94.110529][ T7992] ip6gretap1: left promiscuous mode [ 94.112692][ T7992] ip6gretap1: left allmulticast mode [ 94.128703][ T7999] netlink: 60 bytes leftover after parsing attributes in process `syz.2.565'. [ 94.137840][ T8006] netlink: 'syz.3.567': attribute type 29 has an invalid length. [ 94.160697][ T7451] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.164851][ T7451] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.173304][ T7451] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.311067][ T8021] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 94.313490][ T8021] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 94.316832][ T8021] vhci_hcd vhci_hcd.0: Device attached [ 94.449922][ T8021] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 94.452984][ T8021] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 94.461993][ T8021] vhci_hcd vhci_hcd.0: Device attached [ 94.465227][ T8022] usbip_core: unknown command [ 94.467226][ T8022] vhci_hcd: unknown pdu 201327616 [ 94.468222][ T8029] vhci_hcd: connection closed [ 94.471189][ T8022] usbip_core: unknown command [ 94.476120][ T7451] vhci_hcd: stop threads [ 94.481481][ T7451] vhci_hcd: release socket [ 94.489395][ T7451] vhci_hcd: disconnect device [ 94.491336][ T7451] vhci_hcd: stop threads [ 94.492735][ T7451] vhci_hcd: release socket [ 94.494276][ T7451] vhci_hcd: disconnect device [ 94.510602][ T54] vhci_hcd: vhci_device speed not set [ 94.564460][ T8034] loop6: detected capacity change from 0 to 63 [ 94.571428][ T8034] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 94.575441][ T8034] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 94.580078][ T8034] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 94.583418][ T8034] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 94.587993][ T8034] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 94.590960][ T8034] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 94.594006][ T8034] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 94.824327][ T8042] BIDI support in bsg has been removed. [ 94.845963][ T8044] syzkaller1: entered promiscuous mode [ 94.848735][ T8044] syzkaller1: entered allmulticast mode [ 95.049287][ T8067] 9pnet_fd: Insufficient options for proto=fd [ 95.068756][ T8070] dlm: non-version read from control device 0 [ 95.072851][ T8070] netlink: 'syz.1.585': attribute type 2 has an invalid length. [ 95.116585][ T8078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'. [ 95.128072][ T8078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.588'. [ 95.132826][ T8078] netlink: 'syz.2.588': attribute type 1 has an invalid length. [ 95.189463][ T8078] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 95.193889][ T8078] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 95.212443][ T8078] bond2: (slave wireguard0): making interface the new active one [ 95.217173][ T8078] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 95.256033][ T8102] netlink: 'syz.2.594': attribute type 10 has an invalid length. [ 95.259379][ T8102] team0: Cannot enslave team device to itself [ 95.303687][ T8109] tipc: Can't bind to reserved service type 1 [ 95.308404][ T8109] program syz.1.597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.313899][ T8109] netlink: 'syz.1.597': attribute type 9 has an invalid length. [ 95.683567][ T8137] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8137 comm=syz.2.607 [ 96.071843][ T8158] program syz.2.612 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.116369][ T8160] __nla_validate_parse: 1 callbacks suppressed [ 96.116381][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 96.121329][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 96.286395][ T40] kauditd_printk_skb: 349 callbacks suppressed [ 96.286416][ T40] audit: type=1400 audit(1756526483.119:893): avc: denied { watch } for pid=8163 comm="syz.1.615" path="/sys/kernel/profiling" dev="sysfs" ino=852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 96.298588][ T40] audit: type=1400 audit(1756526483.119:894): avc: denied { watch_sb watch_reads } for pid=8163 comm="syz.1.615" path="/sys/kernel/profiling" dev="sysfs" ino=852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 96.541332][ T40] audit: type=1400 audit(1756526483.353:895): avc: denied { append } for pid=8168 comm="syz.3.616" name="usbmon9" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 97.108399][ T40] audit: type=1400 audit(1756526483.896:896): avc: denied { create } for pid=8176 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.112253][ T8177] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÜÝ$)²% Ä‚L [ 97.117568][ T40] audit: type=1400 audit(1756526483.896:897): avc: denied { write } for pid=8176 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.130581][ T40] audit: type=1400 audit(1756526483.896:898): avc: denied { nlmsg_write } for pid=8176 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.281711][ T40] audit: type=1400 audit(1756526484.055:899): avc: denied { setopt } for pid=8179 comm="syz.3.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 97.353320][ T6024] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 97.427348][ T40] audit: type=1400 audit(1756526484.186:900): avc: denied { read } for pid=8182 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 97.515707][ T6024] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.518999][ T6024] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 97.521934][ T6024] usb 7-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 97.525245][ T6024] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.529192][ T6024] usb 7-1: config 0 descriptor?? [ 97.656026][ T40] audit: type=1400 audit(1756526484.401:901): avc: denied { setattr } for pid=8187 comm="syz.3.621" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 97.746902][ T6024] usb 7-1: USB disconnect, device number 6 [ 97.774474][ T40] audit: type=1400 audit(1756526484.514:902): avc: denied { execute } for pid=8189 comm="syz.3.622" name="file1" dev="ramfs" ino=23607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 97.814778][ T8193] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 98.428281][ T8197] ata1.00: invalid multi_count 1 ignored [ 98.712152][ T8208] syzkaller1: entered promiscuous mode [ 98.714093][ T8208] syzkaller1: entered allmulticast mode [ 98.804034][ T8212] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 104.826211][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 104.826224][ T40] audit: type=1400 audit(1756526491.110:908): avc: denied { execute } for pid=8218 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 104.836603][ T40] audit: type=1400 audit(1756526491.110:909): avc: denied { execute_no_trans } for pid=8218 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 104.852562][ T54] usb 5-1: USB disconnect, device number 3 [ 126.534358][ T7748] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.537786][ T7748] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 126.545197][ T57] ================================================================== [ 126.548675][ T57] BUG: KASAN: slab-use-after-free in __mutex_lock+0xe8a/0x1060 [ 126.551920][ T57] Read of size 8 at addr ffff888036941b20 by task kworker/1:1/57 [ 126.555799][ T57] [ 126.558529][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 126.558559][ T57] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.558576][ T57] Workqueue: events l2cap_chan_timeout [ 126.558611][ T57] Call Trace: [ 126.558621][ T57] [ 126.558630][ T57] dump_stack_lvl+0x116/0x1f0 [ 126.558654][ T57] print_report+0xcd/0x630 [ 126.558688][ T57] ? __virt_addr_valid+0x81/0x610 [ 126.558716][ T57] ? __phys_addr+0xe8/0x180 [ 126.558742][ T57] ? __mutex_lock+0xe8a/0x1060 [ 126.558765][ T57] kasan_report+0xe0/0x110 [ 126.558787][ T57] ? __mutex_lock+0xe8a/0x1060 [ 126.558818][ T57] ? l2cap_chan_timeout+0x6d/0x310 [ 126.558846][ T57] __mutex_lock+0xe8a/0x1060 [ 126.558869][ T57] ? add_lock_to_list+0x9d/0x130 [ 126.558894][ T57] ? l2cap_chan_timeout+0x6d/0x310 [ 126.558925][ T57] ? __pfx___mutex_lock+0x10/0x10 [ 126.558949][ T57] ? debug_object_deactivate+0x1ec/0x3a0 [ 126.558984][ T57] ? l2cap_chan_timeout+0x6d/0x310 [ 126.559012][ T57] l2cap_chan_timeout+0x6d/0x310 [ 126.559041][ T57] process_one_work+0x9cf/0x1b70 [ 126.559067][ T57] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 126.559098][ T57] ? __pfx_process_one_work+0x10/0x10 [ 126.559123][ T57] ? assign_work+0x1a0/0x250 [ 126.559143][ T57] worker_thread+0x6c8/0xf10 [ 126.559168][ T57] ? __kthread_parkme+0x19e/0x250 [ 126.559196][ T57] ? __pfx_worker_thread+0x10/0x10 [ 126.559219][ T57] kthread+0x3c5/0x780 [ 126.559238][ T57] ? __pfx_kthread+0x10/0x10 [ 126.559258][ T57] ? rcu_is_watching+0x12/0xc0 [ 126.559283][ T57] ? __pfx_kthread+0x10/0x10 [ 126.559303][ T57] ret_from_fork+0x5d7/0x6f0 [ 126.559322][ T57] ? __pfx_kthread+0x10/0x10 [ 126.559342][ T57] ret_from_fork_asm+0x1a/0x30 [ 126.559432][ T57] [ 126.559439][ T57] [ 126.642450][ T57] Allocated by task 7482: [ 126.643902][ T57] kasan_save_stack+0x33/0x60 [ 126.645728][ T57] kasan_save_track+0x14/0x30 [ 126.647259][ T57] __kasan_kmalloc+0xaa/0xb0 [ 126.648894][ T57] l2cap_conn_add.part.0+0x60/0xa60 [ 126.650663][ T57] l2cap_chan_connect+0x15e5/0x2020 [ 126.652507][ T57] lowpan_control_write+0x3c9/0x740 [ 126.654312][ T57] full_proxy_write+0x131/0x1a0 [ 126.655995][ T57] vfs_write+0x29d/0x11d0 [ 126.657524][ T57] ksys_write+0x12a/0x250 [ 126.659329][ T57] do_syscall_64+0xcd/0x4c0 [ 126.660907][ T57] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.662897][ T57] [ 126.663894][ T57] Freed by task 7748: [ 126.665244][ T57] kasan_save_stack+0x33/0x60 [ 126.666853][ T57] kasan_save_track+0x14/0x30 [ 126.668350][ T57] kasan_save_free_info+0x3b/0x60 [ 126.670194][ T57] __kasan_slab_free+0x60/0x70 [ 126.671716][ T57] kfree+0x2b4/0x4d0 [ 126.673153][ T57] l2cap_conn_del+0x59c/0x730 [ 126.674888][ T57] l2cap_disconn_cfm+0x96/0xd0 [ 126.676868][ T57] hci_conn_hash_flush+0x10e/0x260 [ 126.679186][ T57] hci_dev_close_sync+0x602/0x11d0 [ 126.680876][ T57] hci_dev_do_close+0x2e/0x90 [ 126.682636][ T57] hci_rfkill_set_block+0x225/0x360 [ 126.684388][ T57] rfkill_set_block+0x1fe/0x550 [ 126.686187][ T57] rfkill_fop_write+0x2c0/0x580 [ 126.687840][ T57] vfs_write+0x29d/0x11d0 [ 126.689355][ T57] ksys_write+0x1f8/0x250 [ 126.690767][ T57] do_syscall_64+0xcd/0x4c0 [ 126.692247][ T57] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.694152][ T57] [ 126.694940][ T57] The buggy address belongs to the object at ffff888036941800 [ 126.694940][ T57] which belongs to the cache kmalloc-1k of size 1024 [ 126.699887][ T57] The buggy address is located 800 bytes inside of [ 126.699887][ T57] freed 1024-byte region [ffff888036941800, ffff888036941c00) [ 126.705004][ T57] [ 126.705888][ T57] The buggy address belongs to the physical page: [ 126.708132][ T57] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x36940 [ 126.711068][ T57] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 126.713853][ T57] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 126.716572][ T57] page_type: f5(slab) [ 126.718139][ T57] raw: 00fff00000000040 ffff88801b842dc0 ffffea0001557a00 dead000000000002 [ 126.721478][ T57] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 126.724490][ T57] head: 00fff00000000040 ffff88801b842dc0 ffffea0001557a00 dead000000000002 [ 126.727377][ T57] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 126.730224][ T57] head: 00fff00000000003 ffffea0000da5001 00000000ffffffff 00000000ffffffff [ 126.733046][ T57] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 126.735856][ T57] page dumped because: kasan: bad access detected [ 126.738374][ T57] page_owner tracks the page as allocated [ 126.740681][ T57] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5679, tgid 5679 (rcS), ts 31454584224, free_ts 31454393118 [ 126.747407][ T57] post_alloc_hook+0x1c0/0x230 [ 126.749221][ T57] get_page_from_freelist+0x132b/0x38e0 [ 126.751082][ T57] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 126.753251][ T57] alloc_pages_mpol+0x1fb/0x550 [ 126.755026][ T57] new_slab+0x247/0x330 [ 126.756442][ T57] ___slab_alloc+0xcf2/0x1740 [ 126.758065][ T57] __slab_alloc.constprop.0+0x56/0xb0 [ 126.760051][ T57] __kmalloc_noprof+0x2f2/0x510 [ 126.761588][ T57] tomoyo_init_log+0x1385/0x2140 [ 126.763222][ T57] tomoyo_supervisor+0x302/0x13b0 [ 126.764851][ T57] tomoyo_env_perm+0x191/0x200 [ 126.766392][ T57] tomoyo_find_next_domain+0xec2/0x20b0 [ 126.768367][ T57] tomoyo_bprm_check_security+0x12e/0x1d0 [ 126.770315][ T57] security_bprm_check+0x1b9/0x1e0 [ 126.772029][ T57] bprm_execve+0x81a/0x1640 [ 126.773532][ T57] do_execveat_common.isra.0+0x4a5/0x610 [ 126.775326][ T57] page last free pid 5679 tgid 5679 stack trace: [ 126.777472][ T57] __free_frozen_pages+0x7d5/0x10f0 [ 126.779415][ T57] __put_partials+0x165/0x1c0 [ 126.781242][ T57] qlist_free_all+0x4d/0x120 [ 126.782863][ T57] kasan_quarantine_reduce+0x195/0x1e0 [ 126.784675][ T57] __kasan_slab_alloc+0x69/0x90 [ 126.786482][ T57] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 126.788299][ T57] tomoyo_init_log+0xc8a/0x2140 [ 126.790024][ T57] tomoyo_supervisor+0x302/0x13b0 [ 126.791724][ T57] tomoyo_env_perm+0x191/0x200 [ 126.793364][ T57] tomoyo_find_next_domain+0xec2/0x20b0 [ 126.795171][ T57] tomoyo_bprm_check_security+0x12e/0x1d0 [ 126.797086][ T57] security_bprm_check+0x1b9/0x1e0 [ 126.798856][ T57] bprm_execve+0x81a/0x1640 [ 126.800373][ T57] do_execveat_common.isra.0+0x4a5/0x610 [ 126.802148][ T57] __x64_sys_execve+0x8e/0xb0 [ 126.803620][ T57] do_syscall_64+0xcd/0x4c0 [ 126.805104][ T57] [ 126.805903][ T57] Memory state around the buggy address: [ 126.807685][ T57] ffff888036941a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.810356][ T57] ffff888036941a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.813028][ T57] >ffff888036941b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.815649][ T57] ^ [ 126.817599][ T57] ffff888036941b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 126.820412][ T57] ffff888036941c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 126.823234][ T57] ================================================================== [ 126.827164][ C1] hpet: Lost 17 RTC interrupts [ 126.830259][ T57] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 126.832668][ T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 126.835609][ T57] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.839243][ T57] Workqueue: events l2cap_chan_timeout [ 126.841298][ T57] Call Trace: [ 126.842674][ T57] [ 126.843946][ T57] dump_stack_lvl+0x3d/0x1f0 [ 126.846507][ T57] vpanic+0x6e8/0x7a0 [ 126.847808][ T57] ? __pfx_vpanic+0x10/0x10 [ 126.849480][ T57] ? __pfx_vprintk_emit+0x10/0x10 [ 126.851124][ T57] ? __mutex_lock+0xe8a/0x1060 [ 126.852662][ T57] panic+0xca/0xd0 [ 126.853875][ T57] ? __pfx_panic+0x10/0x10 [ 126.855378][ T57] ? check_panic_on_warn+0x1f/0xb0 [ 126.857027][ T57] check_panic_on_warn+0xab/0xb0 [ 126.858555][ T57] end_report+0x107/0x170 [ 126.860334][ T57] kasan_report+0xee/0x110 [ 126.861887][ T57] ? __mutex_lock+0xe8a/0x1060 [ 126.863500][ T57] ? l2cap_chan_timeout+0x6d/0x310 [ 126.865503][ T57] __mutex_lock+0xe8a/0x1060 [ 126.867308][ T57] ? add_lock_to_list+0x9d/0x130 [ 126.869002][ T57] ? l2cap_chan_timeout+0x6d/0x310 [ 126.870678][ T57] ? __pfx___mutex_lock+0x10/0x10 [ 126.872253][ T57] ? debug_object_deactivate+0x1ec/0x3a0 [ 126.874072][ T57] ? l2cap_chan_timeout+0x6d/0x310 [ 126.875794][ T57] l2cap_chan_timeout+0x6d/0x310 [ 126.877481][ T57] process_one_work+0x9cf/0x1b70 [ 126.879299][ T57] ? __pfx_wg_packet_tx_worker+0x10/0x10 [ 126.881491][ T57] ? __pfx_process_one_work+0x10/0x10 [ 126.883295][ T57] ? assign_work+0x1a0/0x250 [ 126.884809][ T57] worker_thread+0x6c8/0xf10 [ 126.886333][ T57] ? __kthread_parkme+0x19e/0x250 [ 126.888180][ T57] ? __pfx_worker_thread+0x10/0x10 [ 126.889984][ T57] kthread+0x3c5/0x780 [ 126.891387][ T57] ? __pfx_kthread+0x10/0x10 [ 126.892965][ T57] ? rcu_is_watching+0x12/0xc0 [ 126.894593][ T57] ? __pfx_kthread+0x10/0x10 [ 126.896234][ T57] ret_from_fork+0x5d7/0x6f0 [ 126.897813][ T57] ? __pfx_kthread+0x10/0x10 [ 126.899406][ T57] ret_from_fork_asm+0x1a/0x30 [ 126.900988][ T57] [ 126.902972][ T57] Kernel Offset: disabled [ 126.904421][ T57] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:01:56 Registers: info registers vcpu 0 CPU#0 RAX=0000000000122d2b RBX=0000000000000000 RCX=ffffffff8b93fc29 RDX=0000000000000000 RSI=ffffffff8de50a38 RDI=ffffffff8c162980 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab5290 R15=0000000000000000 RIP=ffffffff8b93e78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005630e8570e48 CR3=000000000e380000 CR4=00352ef0 DR0=ffffffffffffffff DR1=0000000000000047 DR2=0000000000000005 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fe00ffd0 Opmask01=000000000000ffff Opmask02=00000000ffff7fdf Opmask03=0000000000000020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 77383c072dd37f07 e71d7bdb78fda3fb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c8482ec4dfc1c97 378420d531304af9 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cfc660d6587dd26e ce120bd6f7396b60 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 18e78e1771d92bc3 68a9072f9b324e60 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b3e8cae6d57715b5 b072186bec6e88e3 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f3de2dc820b202a7 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2363558bdf86032e a57119e35e823ded ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 81d6ee4c00000000 c5bf386f581255b9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 75ef387c68a6fcfc 7f384ddf212e95f5 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2511b450f03d8140 c28ec51da41db0d1 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00376963682f6874 6f6f7465756c622f 6c6175747269762f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005630e856d230 00005630e8559030 0000000000000041 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756d006469766976 00005630e831c51e 00000000000000b1 0001dc4c82c4a025 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643ab5 RDI=ffffffff9b1120a0 RBP=ffffffff9b112060 RSP=ffffc90000aaf530 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b112060 R15=ffffffff85643a50 RIP=ffffffff85643adf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd91b679f9b CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd91d997d20 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000014 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000017 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555588fa9bd5 0000555588fa9630 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffe50802800305ac 8c08000100000008 0000000100000016 8010000000000001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02800401c7100008 024bdc0037336f65 0000000200000021 01ffffff00000001 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0020030108001803 0008001003000800 0000000300000014 0003000400000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c0004188282d990 0800010000020806 0000000400000017 ffffff0400000001 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000010010 0041800401000004 0806060168cc0008 0041e00300000007 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d003020000000000 000000000000141a 0843800343800441 c003001000000006 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fffffff00000000 41a0030008004190 030fffffffffffff 0000000500000007 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000421000000001 8c0004188282d990 0800010000020806 0000000400000017 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001186d7 RBX=0000000000000002 RCX=ffffffff8b93fc29 RDX=0000000000000000 RSI=ffffffff8de50a38 RDI=ffffffff8c162980 RBP=ffffed1003c54910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801e2a4880 R14=ffffffff90ab5290 R15=0000000000000000 RIP=ffffffff8b93e78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd91b6c3c5b CR3=000000000e380000 CR4=00352ef0 DR0=ffffffffffffffff DR1=0000000000000047 DR2=0000000000000005 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 30598b4968eccda6 21c0a631c87ac81d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae57c58ba2706dc3 8c3e22d0029a119a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d07606647a9900e6 78f7896f2ac977dd ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 aa5619f8e756fb5f 96846691181a8270 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000400 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 05eedcefb4c5bb59 b467010632be4b77 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c2359b998fe2586 e0728af436b53af1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ea9fc5002cbae25a fc765df46af34412 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae9fd93905ff6034 dd91fd42222f1107 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 41812996da7ebbc0 663772326951ac69 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 532e7dfeb969ffcb 3ac1b7c55cc9e38d ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 90000004060075ac 002364626e2f7665 000000000000000b 0000000500000001 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffe50802800305ac 8c08000100000008 0000000100000016 8010000000000001 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02800401c7100008 024bdc0037336f65 0000000200000021 01ffffff00000001 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0020030108001803 0008001003000800 0000000300000014 0003000400000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c0004188282d990 0800010000020806 0000000400000017 ffffff0400000001 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000010010 0041800401000004 0806060168cc0008 0041e00300000007 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d003020000000000 000000000000141a 0843800343800441 c003001000000006 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fffffff00000000 41a0030008004190 030fffffffffffff 0000000500000007 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000421000000001 8c0004188282d990 0800010000020806 0000000400000017 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000d8f43 RBX=0000000000000003 RCX=ffffffff8b93fc29 RDX=0000000000000000 RSI=ffffffff8de50a38 RDI=ffffffff8c162980 RBP=ffffed1003c57000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801e2b8000 R14=ffffffff90ab5290 R15=0000000000000000 RIP=ffffffff8b93e78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005630e856e2a0 CR3=00000000636fb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000030000008 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3af5816b 00007fff3af5816b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3af58670 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3af58670 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d747865746e6f63 7320303230323d6f 6e69202231616473 223d766564202200 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3774726574646563 7320303230323765 6463202231616473 2237766564202200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f70206e65687720 726f727245203a33 696368203a68746f 6f7465756c42205d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 78652d7a79732f22 3d68746170202272 6f7475636578652d 7a7973223d6d6d6f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020656c69 663d7373616c6374 20745f656d69746e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 75725f6374653a72 5f7463656a626f3a 746f6f723d747865 746e6f637420745f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d64617379733a72 5f6d64617379733a 746f6f723d747865 746e6f6373203032 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30323d6f6e692022 31616473223d7665 642022726f747563 6578652d7a79732f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000