last executing test programs: 3m18.942838945s ago: executing program 2 (id=443): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050084010b007e000a43b820a8e8c9881db660164333526f680eac8c863a63"], 0x88) 3m18.764310852s ago: executing program 2 (id=444): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x20, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x9, 0x9, 0x9, 0x10, 0x2}, @tail_call, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000240)=[{0x5, 0x5, 0x3, 0x4}, {0x5, 0x4, 0x8, 0x9}, {0x1, 0x2, 0x8}], 0x10, 0xf8000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x59, 0x88, &(0x7f0000000340)="4262fe4c4bef19d108ff3c46735ec0cabac0e5fefb968583fd9165e0fcabc1d1063c54350d92a78170720b3ee03843a6d58c0d97d5d5d32b1375187ddad90b3d0e38773be6b61dce8ff8034e463ec19218af201fa4887b61b8", &(0x7f00000003c0)=""/136, 0x2, 0x0, 0xb2, 0xed, &(0x7f0000000480)="c2bbec1d092fb0945d029dcc964828ef956f3fe15c49c0ce9745e3b114b090636930b8615cbd5bcfe5de4e73524234b326af4c30eae2fd377de864299f92ca60ca167c0f2b6abb40d6959b23d985931366a0a2b0e92a5e87b4ad83eb3d7f3901f33f798eab2c3011e490fc6dd7caa0815cbd736ae0da5a62f1b81522ce9660c90178065fa4cd3fa3640a799dfc18ff53dd8114efc73bf76a1c3481f7d7cbff2cd4b935af4babc111426629eec81fd4722946", &(0x7f0000000540)="7ea9cc20904cbdef9a331df0b6aa330502a6b2f764794530088f64bc260587df87cbec2d11f42d32128bfccd3d59e874756058fca5da7e0e72e7bda770fe7a2ec3af701577f11e2feeb1af1a3cfc8ac55168185867cbc1447c24ec9d8dc1fa2b5e97643a110b90267f0c2928e1a9664a65704e97768b652c9ac58d4382244bce436a8d097b1c611c923be8d89f1ae4f8e047c5207b3d2f8b5498cdeb9fa2e0d9ccdcae6ad80fc6db810074fd0b36f2c1384b1a976d8a9ee5866724ead1074bcd5b2fd0ad7a4ba3727c259dea8d7d64802b98820906d50dca903465db6c534abe4ea3fd5a6d3eed388ed095dd6f", 0x1, 0x0, 0x2}, 0x50) syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') 3m18.686117539s ago: executing program 2 (id=446): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000540), 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m18.685310369s ago: executing program 2 (id=447): inotify_init1(0x800) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) iopl(0x3) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='pim6reg0\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r2, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) lgetxattr(&(0x7f0000002040)='./file0\x00', &(0x7f0000002140)=@known='system.posix_acl_default\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x11812410, 0x8, 0x200, 0x81}}, 0x50) read$FUSE(r2, &(0x7f0000002280)={0x2020}, 0x2020) 3m18.637326185s ago: executing program 2 (id=449): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1c0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='ccgx-ucsi 0x08', 0xe) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000b80)={0x0, &(0x7f00000007c0)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @nested_load_syzos={0x136, 0xc8, {0x0, 0xfffffffffffffffb, [@nested_amd_clgi={0x17f, 0x10}, @out_dx={0x6a, 0x28, {0x33c7, 0x0, 0xf77}}, @in_dx={0x69, 0x20, {0x2398, 0x1}}, @nested_vmresume={0x130, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x70000, 0x986d}}, @rdmsr={0x66, 0x18, {0x772}}]}}, @nested_load_code={0x12e, 0x7b, {0x3, "c74424000b010000c7442402d9000000ff1c24c4a16dedeab90d0a00000f320fc734cc660f3881662eb9800000c00f3235002000000f3064660f3881751726410f0f9407005800000cc4010d73da0066baf80cb838554981ef66bafc0cb88510b620ef"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x77, 0x49c, 0x2, 0x28c}}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0x10, 0x10a}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xe753, 0x3}}, @wrmsr={0x65, 0x20, {0x82a, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x99}}, @wrmsr={0x65, 0x20, {0x800109db, 0x23}}, @wr_crn={0x67, 0x20, {0x4}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x642, 0xd0d, 0x7, 0x10000}}, @wr_crn={0x67, 0x20, {0x4, 0x1ff}}, @in_dx={0x69, 0x20, {0x9083, 0x4}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_load_syzos={0x136, 0x40, {0x1, 0x4, [@in_dx={0x69, 0x20, {0x7abe, 0x2}}]}}, @in_dx={0x69, 0x20, {0x6ea0, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x3a, 0x0, 0x9, 0x2}}, @uexit={0x0, 0x18, 0x8}], 0x3bb}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000c40)=[@textreal={0x8, &(0x7f0000000bc0)="b800008ed0660ff93c66b9800000c00f326635001000000f30660fe20166b9b002000066b80080000066ba000000000f30baf80c66b8d0c66a8c66efbafc0cecbaf80c66b87f1a0e8b66efbafc0cb0c4ee640fa8f29ec7c61a5c", 0x5a}], 0x1, 0x8, &(0x7f0000000c80)=[@dstype3={0x7, 0x4}, @cstype3={0x5, 0x1}], 0x2) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44890}, 0x0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/usb/devices/usb1/interface_authorized_default\x00', 0x0, 0x0) read(r4, &(0x7f00000001c0)=""/100, 0x64) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SET_PTRACER(0x59616d61, r0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1020001, &(0x7f0000000340)={[{@uuid_null}, {@xino_on}, {@uuid_off}, {@redirect_dir_off}, {@default_permissions}, {@userxattr}, {@redirect_dir_follow}, {@redirect_dir_follow}, {@index_on}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r6}}, 0x40) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r7, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 3m18.484166462s ago: executing program 2 (id=452): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050084010b007e000a43b820a8e8c9881db660164333526f680eac8c863a63"], 0x88) 3m1.005594288s ago: executing program 32 (id=452): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050084010b007e000a43b820a8e8c9881db660164333526f680eac8c863a63"], 0x88) 50.273881537s ago: executing program 3 (id=1815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4ea4, 0x3, @private1={0xfc, 0x1, '\x00', 0x40}, 0x9}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e23, 0xd, @empty, 0x5}], 0x58) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001840)=ANY=[@ANYBLOB="540000000206010200000000000000000000000105000100070000000900020073797a30000000000c0007800500150001000000050004000000000010040300686173683a69702c6d616300050005000a000000"], 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x0) 50.193567835s ago: executing program 3 (id=1816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) r4 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x10000) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r2, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c85d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r2, r3], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 50.144696153s ago: executing program 3 (id=1817): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x34}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002680)=@gettaction={0x100, 0x32, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000002780)) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r8, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$BLKCRYPTOIMPORTKEY(r1, 0xc0401289, 0x0) readv(r0, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000180)) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r10, &(0x7f0000000180)=0x10001, 0x12) io_uring_enter(r10, 0x41ee, 0xbffb, 0x0, &(0x7f0000000200)={[0x5ed5]}, 0x8) 49.815156638s ago: executing program 3 (id=1818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getrandom(&(0x7f0000000900)=""/4096, 0x1000, 0x3) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x80000001}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x0, 0x9000, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0x9, 0xbd8, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x55, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x1, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x8e, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0xdddd1000, 0xfffd}, 0xfdf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xfffffdffffffffff, 0xfffffffeffffffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f00000000c0)=0xfffffffa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf18000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) 49.673571855s ago: executing program 3 (id=1819): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000900)=@deltaction={0xb0, 0x31, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x4001) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x100}}, './file1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000280)={'veth1_to_bridge\x00', @broadcast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r4 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0xc0089364, &(0x7f0000000180)) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r5 = add_key(&(0x7f0000000380)='cifs.idmap\x00', &(0x7f00000007c0)={'syz', 0x3}, &(0x7f00000009c0)="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", 0xffffffffffffff9a, 0xffffffffffffffff) keyctl$read(0xb, r5, &(0x7f0000001b40)=""/4096, 0x1000) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x8008551d, &(0x7f0000000200)={0x8283, 0x1, [{0x9}]}) chdir(&(0x7f0000000140)='./file1\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r8, 0x80000300, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4040000) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080645ba002800650000420690780a010100ac1414bb4e224e1f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00'], 0x0) syz_emit_ethernet(0x4d, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000161100dd8000000000000000000000000000bbfe8000000000000000000000000000aa00030e220016907802030001ffb00afe4e706d2c4c55a824f3a5d5f4a026e192b02ff2bae130715ba0310bca40741489cf75c079400c4b729879d95bd514efec52caa05aad944ac8cd72096b76d7827ad9717d584de10fd69670239cf0c12b3e8cf3db4959db4b92a4f39db1c319bf7919ac75ff316dbd10e382894532b80129f16804054b616199ec97887007b267a966d438c159dbb28b142aff71af332d3e162b9b758ebe4898e66a7e4b5c55d9693305d3ef8ae0dfb914299f41032f0a8a2624e208a1a8fff2c4847e5a46b1602c35532d6a9df039998b1ffd7e7dd545da735da7af2e8c"], 0x0) 49.625358119s ago: executing program 3 (id=1820): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x400, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0xd00, 0x0) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) (async) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x3) 36.304884777s ago: executing program 4 (id=1911): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) write(r4, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80f000000000000000000080008000d40ff000000", 0x24) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r5, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f00000001c0)="8a44193eb6764bd9453a3d9d81e2ed7745f10ea4ce9e1e8fcdc0648c9d3ab01cc1c7ee979b6d78df035ed4b7d20604604434cc5bd1d849d28869ccf7076b90e57fca12a858efd5410479c9e7a54016ab556cfd55a791f16127934c84c41fd011df") 36.224972645s ago: executing program 4 (id=1913): r0 = socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000000000000200000d0000000000000000020000000100000002000000000000000000000500000000002e"], 0x0, 0x43, 0x0, 0x1}, 0x28) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfffb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x48, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x384}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xef}]}, {0x4}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x18}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x66}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x28}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x14) 36.134467671s ago: executing program 4 (id=1915): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003400)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006a00), r4) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000006bc0)={0x0, 0x0, &(0x7f0000006b80)={&(0x7f0000006a40)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x800}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x24000800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000000000001701000002000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf900000080c79d6b6d1d4301678807c5ab4264c8ba"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d2", 0xa3}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd", 0x32}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x1, 0x19, 0xc, "faf98317e5a114998a1a8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x5, 0x7]}}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000ac0)={0xffffffffffffffff, &(0x7f00000006c0)='\x00', 0x81, &(0x7f0000000700)={@_ha_fsid={[0x2, 0xfff]}, {0x1ff, 0x2, 0x6, 0x6}}, 0x3, &(0x7f0000000980), &(0x7f0000000a80)=0x9}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 35.894198973s ago: executing program 4 (id=1921): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086412, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000200)=0x18) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file3\x00', 0x105042, 0x0) mount(0x0, &(0x7f0000000040)='./file3\x00', &(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000380)='acl') 35.74269132s ago: executing program 4 (id=1923): setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @random="00ff00", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0ff5a212bd35e12fc32b95e9b6833fd5173150e125a55c71f520843f569b5da8", "4ad0eccf913b5e6bd1b47b6d9ef560206c001dd299e10e3a89c8226029312bcba06d7e453e4978d6536b601da90ec757", "f98f7e18ac4778bdf4ff85c4e5605d1689eb03e8f1250809c36cae1b", {"cf99c5c46a30928cfad069c141a84314", "b8be54b6325f35c30e31e6f2c0f78b6b"}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) setns(0xc9, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) read(r6, &(0x7f0000000200), 0x100) write(r6, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x3e, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0xff01, 0x0) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x5610c1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r9, &(0x7f00000002c0)="88a2d5afbd4834151c6db699ca85c7a243135e37a5dc5c7c3c3865c0c761452314a89ad4a58bd05269b6a50d6ecf4ddce73193499c29fea6b3941640d6845eeb5a58214282aca064977bc96e5795b27f6b3616a9000aee62bcd616f005a8231acbf85db57d226e4ccf16d14f1af81d95639fd723ea0bc26381935048fcbd1692cb83dcf263d2b5eab1a0e2f8df98065813f7fbcb4c1eb737", &(0x7f00000003c0)=@udp=r5, 0x2}, 0x20) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$VT_SETMODE(r10, 0x5602, &(0x7f0000000140)={0x6, 0xf9, 0xff, 0xfff8, 0x2}) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r11, @ANYRES32=r11, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback, @initdev}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x503, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, 0x0, 0x43906}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 35.365091286s ago: executing program 4 (id=1929): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000280)={0xc, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp', 0x2) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r3, 0x1) 34.484199828s ago: executing program 33 (id=1820): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x400, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0xd00, 0x0) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) (async) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x3) 21.92683601s ago: executing program 0 (id=2062): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x6300, 0x0) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000040)='\x00', &(0x7f0000000080)='#\x00', 0x1175}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xaf3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004095) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4040801}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x58}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x5f}}}}, ["", "", ""]}, 0x30}}, 0x4004804) r5 = openat$cgroup_ro(r0, &(0x7f0000000400)='blkio.bfq.io_queued\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000004c0)={&(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000600)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000640)={0x6, r6, r7}) connect$inet(r1, &(0x7f0000000680)={0x2, 0x4e23, @broadcast}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat2(r5, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x4000, 0x118, 0x2}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r9, 0x20, &(0x7f00000008c0)={&(0x7f0000000840)=""/1, 0x1, 0x0, &(0x7f0000000880)=""/27, 0x1b}}, 0x10) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x5, 0x1, 0x200, 0x20, 0x1, 0x5, '\x00', 0x0, r0, 0x4, 0x2, 0x4}, 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x7, '\x00', 0x0, r5, 0x4, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x10, &(0x7f0000000740)=@raw=[@alu={0x0, 0x1, 0x0, 0x2, 0xa, 0x0, 0x4}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6dbf}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe}, @jmp={0x5, 0x1, 0x0, 0x8, 0xb, 0x4, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f00000007c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x2e, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0xe, 0x80000001, 0x400}, 0x10, r10, r0, 0x0, &(0x7f0000000ac0)=[r11, r9, r1, r1, r12, r9, r13, 0xffffffffffffffff, r9], 0x0, 0x10, 0x8}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE(r9, 0x6, &(0x7f0000000c00)={0x101, 0x0, &(0x7f0000000bc0)=[r8, r9, r8]}, 0x3) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000c40)={@remote, @local, 0x1, "d452a6e0c3bf7019127e89497d5b2fb6578152380e1d09b159ba8cdd904c8e84", 0x3ff, 0x100, 0x7, 0x4}, 0x3c) setsockopt$RDS_GET_MR_FOR_DEST(r9, 0x114, 0x7, &(0x7f0000001cc0)={@phonet={0x23, 0x9, 0x6c, 0xd}, {&(0x7f0000000c80)=""/4096, 0x1000}, &(0x7f0000001c80), 0x4}, 0xa0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r12}, &(0x7f0000001d80), &(0x7f0000001dc0)=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000001e40)={'batadv0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001e80)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000001f80)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001fc0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x32}, @in6=@empty, 0x4e24, 0x8, 0x4e22, 0x7ff, 0xa, 0x80, 0x80, 0x2f, r14, r15}, {0x1, 0x7, 0x7, 0x9, 0x5, 0x8000000000000001, 0x2, 0xfffffffffffffffd}, {0xc, 0x7ff, 0x6, 0x8001}, 0xd1a2, 0x6e6bb6, 0x1, 0x0, 0x2, 0x3}, {{@in=@empty, 0x4d2, 0x6c}, 0xa, @in6=@empty, 0x3501, 0x3, 0x3, 0x1, 0x0, 0xc, 0x9}}, 0xe8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000020c0)={0x5, 0x4, 0x9, 0x0, 0x0}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000002140)={r16, 0x7fff}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000002200)=0x5) 21.864633398s ago: executing program 0 (id=2063): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x50, 0x33, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0xf8, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0xa, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x7, 0x2}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x0, 0x6, 0xc, 0xff, 0x5}, 0xe5, &(0x7f00000000c0)={0x5, 0xf, 0xe5, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x4b, 0x0, 0x1, 0xff00, 0xfeca}, @generic={0xd4, 0x10, 0x1, "1c5b3de9ae666f66dd98da44795d3c11c464c3de85d4cb335b0b819e5c0ac59b4d5c8ec14ef9b06c428bed7041207e1f8805be3ec8877202695cbfef585cfa87f1f8f458327f635e4a98ef7a5a0f5ef27b082ee397acbbf6a9f3a71111c39daf05d636dce921391f8280e822f13a3585b99fbf316e01fe2a61ee4645ff30b4845ebcb28969a344a80b04eda67229a7641f95917d7b90d3a6398ab8479e3279e9013f154124dcb3d46b86d4b58df958e8def490f978f7779059d253145cb1faeaeb4596aaa89b84d104c0dde8404eba7917"}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x13, &(0x7f0000000200)=@string={0x13, 0x3, "f41a65d259c6c414aa899cc55081e94439"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}]}) 20.077956906s ago: executing program 34 (id=1929): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000280)={0xc, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp', 0x2) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r3, 0x1) 18.867944293s ago: executing program 0 (id=2083): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x28001) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') fstat(r2, &(0x7f0000004800)) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r1, 0x40184150, &(0x7f0000000300)={0x0, &(0x7f0000000240)="03864a2130949097ce5e075f4433ce9e06cadffa12eacf459a25c42ac73caca6ecb0d9cbf90335dae4347e935217184fa2afbfb8f9912274819728fb1b522ab1c96d67bdae3c7528dede772cd2db7b08b8d4e32ad742fd8fb26896599086941b761aed638d3bf675c150a764d630b797fc6ba6a8fd1b6522e0335b196d979916d64537a4a2856f3e0d", 0x89}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)={0x200, 0x2, 0x2, 0x0, 0x2, 0x0, [{0xfffffffffffffffb, 0x5, 0x6, '\x00', 0x2}, {0x29, 0x3, 0x9}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x8008, @local}, 0x10) listen(r3, 0x5) r4 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='clientaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='minorversion\x00', &(0x7f0000000280)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000002a0)='source\x00', &(0x7f00000002b0)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000002c0)='port\x00', &(0x7f00000002d0)='32776\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = accept(r3, 0x0, 0x0) write(r5, &(0x7f0000000300)="80000028000000010000000000000000", 0x10) getsockopt$MRT(r0, 0x0, 0xd0, 0x0, &(0x7f0000000040)) r6 = timerfd_create(0x3, 0x80000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r10, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r10, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x12}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) timerfd_gettime(r6, &(0x7f0000000080)) 17.982965593s ago: executing program 0 (id=2104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000240)={0x4, 0x0, [{0x3, 0x0, 0x0, 0x8, 0x6, 0x2}, {0x1, 0xffffffff, 0x0, 0x9, 0x2, 0x80000001, 0x8}, {0x80000001, 0xfffffffb, 0x0, 0x1008, 0x5, 0x110, 0x3}, {0x80000000, 0x5dd3, 0x6, 0x6, 0xe231, 0x1, 0xffffffff}]}) 17.74462482s ago: executing program 0 (id=2110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) mount$afs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0xc804, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') mount(0x0, &(0x7f0000000780)='./file1/file0\x00', 0x0, 0x400000, 0x0) chdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x3, 0x12) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x30}, 0x15, 0x3, 'none\x00', 0x11, 0x2, 0x72}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x304001, 0x0) 17.67457403s ago: executing program 0 (id=2112): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000021000008bc0008000200ac14144200000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x80400, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) lseek(r4, 0x7ffd, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'fl512\x00', [0x0, 0x7, 0x1, 0x205, 0x7, 0xfff, 0x3, 0x1ff, 0xa, 0xf7f8, 0x6, 0xb4e, 0x10045, 0x6, 0x10001, 0x2, 0xfff, 0xfffffc01, 0x7, 0x401, 0x80000000, 0x3, 0x40004, 0x80002, 0x7, 0xfe3c, 0x101, 0x403b, 0x9, 0x7, 0x9]}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r6, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x101, 0xfffffffb}, 0x10) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r2, &(0x7f0000000200)) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=virtio,debug=0x00000000000024a7,debug=0x000000000000000f,directio,mmap,cache=none,posixacl,access=user,cache=none,']) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r7 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x131200, 0x0) read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020) 15.823063638s ago: executing program 5 (id=2138): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x6f01, 0x800}, @void, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x10, 0x4, 0x0, 0x18, {[@window={0x9, 0x3}, @generic={0x0, 0x8, "d588380003c1"}]}}, {"ec03110a900ac361a4ef895e60b5497200005d8444d25e730971e6b681b9cf8527852a1d4f"}}}}}, 0x5d) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = fsmount(r0, 0x1, 0x0) (async, rerun: 64) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000105242, 0x0) fadvise64(r4, 0x18, 0x0, 0x5) fchdir(r3) (async, rerun: 64) syz_open_dev$sg(&(0x7f0000000040), 0xfc, 0x41) (async, rerun: 64) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000000)=0xfffffff7) (async) r5 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, 0x0}) 15.643990894s ago: executing program 5 (id=2141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05040000000000000000060000f808000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socket$tipc(0x1e, 0x5, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 15.626455735s ago: executing program 5 (id=2142): arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000040)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000080)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000000c0)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000100)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000140)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000180)) (async) socket$packet(0x11, 0x2, 0x300) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000001c0)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000200)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000240)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000280)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000002c0)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000300)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000340)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000380)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000003c0)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000400)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000440)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000480)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000004c0)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000500)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000540)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000580)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000005c0)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000600)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000640)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000680)) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000006c0)) sendto$phonet(0xffffffffffffffff, &(0x7f0000000700)="308c4a15f5d84eccaa71f80cc808a621e3045074dd5bd4146023634a918b01b4e8b46d8d697bfc5625db69987bc5e2acb8", 0x31, 0x814, 0x0, 0x0) 15.554715691s ago: executing program 5 (id=2144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.414670394s ago: executing program 5 (id=2146): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+5', 0x2) 15.413742176s ago: executing program 5 (id=2147): mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x2, {0x18, 0x101, 0x8}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24040800}, 0x400c8d0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='dvmrp0\x00', 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xa3d1, 0x4, 0x401, 0xfffffff7, 0x1}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000340)={r4, 0xc}, &(0x7f0000000380)=0xc) 7.139221636s ago: executing program 1 (id=2215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x1409, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000160007c3999dbf00fedbdf251f7c00000c00018008000100", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "83e6c146166f103d517c4e4dc6d39ebfd60b3ae695ccc50d31034ac9d459c2ff", 0x401, 0x8, 0x8, 0x8}, 0x3c) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x1409, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000160007c3999dbf00fedbdf251f7c00000c00018008000100", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x8010) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffffffffffff, "83e6c146166f103d517c4e4dc6d39ebfd60b3ae695ccc50d31034ac9d459c2ff", 0x401, 0x8, 0x8, 0x8}, 0x3c) (async) 7.064175518s ago: executing program 1 (id=2216): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x1b5a00, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x1) ioctl$KDDISABIO(r0, 0x4b37) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write(r1, &(0x7f0000000100)="be20bdfce12469cd9481d55ceccc15f912d34fd45175eb66865fb19ac97ee12dc78358244ce1876d345f2800dff8fd419c9faee095697b04279cd408bec913f8d5e0a1ad1dc7b352db8118169a971a7a6293ed6707176f6beef4310d1e72a04b69964c14425fd044369f512a035fa8f94cfd1926a00e45824fa6d654d8ebcefe3ea5e272fce91501ca4a9d6790f9d9068021b248aeefadda06490777a50b3533e8d170776d80a07778a723a83c3f5cf454e708e365fd91126faedb7fadd216bebe366f2b9d", 0xc5) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000200)={0x0, 0x5}) ioctl$UBLK_U_CMD_GET_PARAMS(r0, 0x80207509, &(0x7f00000002c0)={0x0, 0xffff, 0x70, &(0x7f0000000240)={0x70}}) ioctl$UBLK_U_CMD_STOP_DEV(r0, 0xc0207507, &(0x7f0000000340)={r2}) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x3) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f00000004c0)={r0, &(0x7f00000003c0)='/\\&\x00', 0x800001, &(0x7f0000000400)={@align=0xf0b, {0x6, 0x7, 0x2, 0xd}}, 0x1, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xabf}) pread64(r0, &(0x7f0000000500)=""/82, 0x52, 0x7) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x10, 0x7, 0x8, 0x9, {{0x9, 0x4, 0x2, 0x8, 0x24, 0x67, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x3a, [@multicast1]}, @end, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000800)={'erspan0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x20, 0x20, 0x2, 0x1000, {{0x1c, 0x4, 0x1, 0x2b, 0x70, 0x64, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@noop, @timestamp_addr={0x44, 0x3c, 0x44, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x80000001}, {@private=0xa010100}, {@empty, 0x5}, {@loopback, 0x9}, {@loopback, 0x1}, {@rand_addr=0x64010101, 0x1}]}, @timestamp={0x44, 0x8, 0xb5, 0x0, 0x9, [0xbd53]}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x280000}, {@empty}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x3, 0x0, 0x8, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x8000, 0x0, 0x7}}) getsockname$packet(r0, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000940)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0], 0x0, 0x51, &(0x7f0000000a40)=[{}], 0x8, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x2, 0x9, 0x40, @remote, @mcast1, 0x1, 0x20, 0x8000, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0xc, 0xc, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x20, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000e80)={'syztnl0\x00', &(0x7f0000000e00)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0xb3, 0x0, 0x0, @local, @rand_addr=' \x01\x00', 0x80, 0x7, 0x2, 0x1}}) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000ec0)={@dev, @multicast2, 0x0}, &(0x7f0000000f00)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000f40)={@remote, @initdev, 0x0}, &(0x7f0000000f80)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001080)={'syztnl2\x00', &(0x7f0000000fc0)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x3, 0x401, {{0x22, 0x4, 0x3, 0x4, 0x88, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @empty, {[@generic={0x89, 0xf, "62efdf9c91c7b98a1a8de872ac"}, @lsrr={0x83, 0xb, 0x2f, [@multicast1, @broadcast]}, @timestamp={0x44, 0x20, 0x7a, 0x0, 0x3, [0x8, 0x81, 0x0, 0x244, 0x0, 0x2, 0xfffff001]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xfb, 0x1, 0x1, [{@rand_addr=0x64010100, 0xfff}, {@rand_addr=0x64010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x3d87}, {@multicast1, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000001340)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f00000010c0)={0x20c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20c}}, 0x20000018) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000015c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001580)={&(0x7f00000013c0)={0x188, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x900}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'pimreg1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, 0x188}, 0x1, 0x0, 0x0, 0x4}, 0x80010) sendto$inet6(r0, &(0x7f0000001600)="e39330e7a38e7cd5ffa62076a93ccaf2a73036ef7949a19739a7597d49a74b2bc1d85c2a70572f176ff091812aed63ad605c11c0a1275a0453fb818b3ebef2adb4ffc3edb08b8a1cd82116730dbca544a5baf18b922c0348e3766bc9a46505a72765e6b690e1c6f947b6eeb29e7a128599298b9dcf9f18c5592282c9f97c4b6f98cd6b45bb82bec8edea56955be193266290", 0x92, 0x804, &(0x7f00000016c0)={0xa, 0x4e24, 0x6b59, @mcast1, 0x8}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001700)) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000001900)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001780)={0x114, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}]}, 0x114}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 7.062547408s ago: executing program 1 (id=2217): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = eventfd2(0x507e, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x1, 0x2, r2}) (async) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0xfffffffe, 0x2, r2}) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r3, 0x8b32, &(0x7f0000000040)) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100010001000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x400c000) 6.804744414s ago: executing program 1 (id=2219): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "07bbc136c963254c66c42afcdd7d26931300e264c4feb642c8c42699f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) ioperm(0x0, 0x80, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x22e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0xfd, 0x1000000}]}) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x0, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.665461643s ago: executing program 1 (id=2220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05040000000000000000060000f808000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socket$tipc(0x1e, 0x5, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r4, &(0x7f0000001b00), 0xfffffd9d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.66274864s ago: executing program 1 (id=2221): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) write$cgroup_type(r1, &(0x7f0000000280), 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='bdc\x00', 0x4) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000240)='serial8250\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='snd_aloop.0\x00', 0xc) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) 2.804907784s ago: executing program 6 (id=2245): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, 0x0, 0xb}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) landlock_restrict_self(r0, 0xa) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) execveat$binfmt(r6, 0x0, &(0x7f0000000240)={[&(0x7f0000000200)='/dev/kvm\x00']}, &(0x7f0000000300)={[&(0x7f00000002c0)=',#\x00']}, 0x800) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000010c0)="0f01f60faa66b9430b00000f320f01c83e0f017a0b66b8000000000f23c80f21f866350c00f0000f23f80f20c06635000001000f22c00f01ca66b9ad0b000066b8a000000066ba000000000f30b8200c8ee0", 0x52}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.78621686s ago: executing program 35 (id=2112): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000021000008bc0008000200ac14144200000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x80400, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) lseek(r4, 0x7ffd, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'fl512\x00', [0x0, 0x7, 0x1, 0x205, 0x7, 0xfff, 0x3, 0x1ff, 0xa, 0xf7f8, 0x6, 0xb4e, 0x10045, 0x6, 0x10001, 0x2, 0xfff, 0xfffffc01, 0x7, 0x401, 0x80000000, 0x3, 0x40004, 0x80002, 0x7, 0xfe3c, 0x101, 0x403b, 0x9, 0x7, 0x9]}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r6, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x101, 0xfffffffb}, 0x10) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000700, r2, &(0x7f0000000200)) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=virtio,debug=0x00000000000024a7,debug=0x000000000000000f,directio,mmap,cache=none,posixacl,access=user,cache=none,']) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r7 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x131200, 0x0) read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020) 1.264908659s ago: executing program 6 (id=2247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05040000000000000000060000f808000300", @ANYRES32=r2, @ANYBLOB="0800050009"], 0x24}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.117004901s ago: executing program 6 (id=2248): setns(0xc9, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) 1.116671663s ago: executing program 6 (id=2249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r1, r2, 0x0, 0xfffe82) 71.358223ms ago: executing program 7 (id=2246): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa130}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x480d0}, 0x40040) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x20902) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xe8, 0x24000}}, './file0\x00'}) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f00000001c0)={0x8, 0x1}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000240)) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000340)=@req={0x28, &(0x7f0000000300)={'batadv_slave_1\x00', @ifru_mtu=0x5}}) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x1, 0x7, 0x101, 0x0, 0x0, {0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) mkdirat(r3, &(0x7f0000000480)='./file0\x00', 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe8, r4, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x7a}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_IE={0x1f, 0x2a, [@ssid={0x0, 0x19, @random="a2d31002029965922b41ba491bbea1fded9e35a6a308460874"}]}, @NL80211_ATTR_IE={0x8e, 0x2a, [@random={0xb, 0xc, "9900ace1ec48b7ae4b55f1f8"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xb, 0xc, 0x6}}, @measure_req={0x26, 0x74, {0x0, 0xf2, 0x2, "36586e974451bd94b28639c8b4792ab71131ba0e25aa0421d849a59d50291a83d4aaeffbd6c75ca6e460acf5b67f993fdd24273db8833deb2a5d22458aaa12df4a16382024edba46c253999599d32718dee0a019a357a5df281813f698f5ba20d2828ad8a76b545abe1e3a00ac4e8c685a"}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1000}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)="29bcf6ebdab9c092b694c9d486aa206a7382051f5292321d099edbff142ac01fb4302fb00a12b0f883a81f7182ecfddbcfde1978bfd26490ff01a0e6fd3ba1c408f1a2f3789084016afc948ee1ed29d2a2c8c7dd20a2544764fc2b466ba7094c9c91157ca97a670e34f57a56f90c304b5daca6fa83c55489c03a8ffa2d72898dd597a476b8891b91f43e8ea94286e60de79b9a145e5fc2df8eb0b1e6dfd6cbc4f3c5ca72e4eaa5544b94f6d5003a30c1594a678832d4525c97fd1b486a0732a5b58e31d6fa5e5b9184a95a44b7d9f374f6ae4f1619fccad93c798f73bb686b0bb4685b9ebc96c785281522be13", 0xed}, {&(0x7f00000007c0)="4f478a3d573274d40e12a7ab8add2f3ffd2f95b3628cc63567b353cff69b3281664b9dc912caa0d6c10605da2f5cef8b61cb281009e440ce40dfcbb1f70db26c2a7f1ff32f44b8780c2e22d0d0e881a1922f1a073b4ff70aa1f1582ef766d4ba8565e40a4dac2dd4b1ffac3d2af020807475d8c9dfba07e772a5b67462294807393ac6bb20b2c17082b78d0f1a861cc186ada688f07bfc7423c0e771e7762a37d82a889d768c9672fb73ea74dfe3a6320635d107583df08a7cec8077685216ee89bd836f051bf4608a21", 0xca}], 0x2, &(0x7f0000000900)=[{0x100, 0x6, 0x1000, "4a8454101f815c5cc6c0ebe41f0960b25cf3ffe208020ef8cb583e11f0c3277f21da3b6872e8044b918c82db741a0570537245049e4529a99a5ec25e7c1f2e1bd166414024b05757dc1036cd06e46b1590cc67c68f91eda139ce27a2ba36f5317f243fdadcab7bf4bb9aba3193f476b7b431b7195e659c10a5d0ab36d15e80ab12c0a076a40f4c84b5b6b1c1421577d80b6b02df6054fd767c50bfc40e3ee3687ad433e74b5a94037a942b5c12d710864ea4ca9f2249fd3768ebd1ced0aa4519a22910fb1861ec9f9f25665a540cfc75c4a6e5ac883b32287b1e002dfb8d006f9002cb6108b549facd12f2a9ad845487"}, {0x80, 0x10d, 0x516, "29285605783735a8d985bfd98a269c7400e74a8045b1c79aac56f3003c787500b1fd9e41063585c815e9aa92dfb79ed3cf52d73107ba123336dbc91503706d80c866996629727f345f9e7311229197b0d8b72c3619d14972c966e589b20b94289768156fd48340ba04879bf050"}], 0x180}, 0x4004000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000ac0)={0x2, 0x6, 0x0, 'queue0\x00', 0x3}) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000b80)={0x2, 0x9}) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa}, [@IPSET_ATTR_INDEX={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$NBD_SET_SOCK(r3, 0xab00, r3) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000cc0), 0x1, 0x242000) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000d00)={{r0}, "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"}) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001d00)='/dev/qrtr-tun\x00', 0x0, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001d40)='ns/time_for_children\x00') r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x20, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008880}, 0x20004014) r8 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_INFO(r8, 0x3, &(0x7f0000001ec0)=""/238) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000001fc0)=0x8, 0x4) io_uring_enter(r3, 0x3674, 0xf94d, 0x4, &(0x7f0000002000)={[0x8]}, 0x8) 56.789269ms ago: executing program 36 (id=2147): mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x8000000000000000) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x2, {0x18, 0x101, 0x8}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24040800}, 0x400c8d0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='dvmrp0\x00', 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xa3d1, 0x4, 0x401, 0xfffffff7, 0x1}, &(0x7f0000000300)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000340)={r4, 0xc}, &(0x7f0000000380)=0xc) 5.222722ms ago: executing program 6 (id=2257): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x880) 4.708526ms ago: executing program 7 (id=2251): socket(0x400000000010, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) socket(0x400000000010, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) (async) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) (async) 0s ago: executing program 6 (id=2252): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={@remote, @mcast1, @mcast1, 0x10004, 0x6, 0x2, 0x100, 0x4, 0x82d1818d}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r5, 0x100000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r3, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000340)={@remote, @mcast1, @mcast1, 0x10004, 0x6, 0x2, 0x100, 0x4, 0x82d1818d}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r5, 0x100000000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r6, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) (async) sendmsg$can_bcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) (async) sendmsg$can_bcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r3, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) kernel console output (not intermixed with test programs): 06][T10474] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1305'. [ 187.670035][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1305'. [ 187.673444][T10474] 8021q: VLANs not supported on sit0 [ 187.942718][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1310'. [ 188.093563][T10493] FAULT_INJECTION: forcing a failure. [ 188.093563][T10493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.098385][T10493] CPU: 2 UID: 0 PID: 10493 Comm: syz.4.1311 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.098405][T10493] Tainted: [L]=SOFTLOCKUP [ 188.098409][T10493] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.098423][T10493] Call Trace: [ 188.098431][T10493] [ 188.098436][T10493] dump_stack_lvl+0x100/0x190 [ 188.098469][T10493] should_fail_ex.cold+0x5/0xa [ 188.098485][T10493] _copy_to_user+0x32/0xd0 [ 188.098509][T10493] simple_read_from_buffer+0xcb/0x170 [ 188.098523][T10493] proc_fail_nth_read+0x1af/0x230 [ 188.098555][T10493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.098574][T10493] ? rw_verify_area+0xce/0x6d0 [ 188.098591][T10493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 188.098609][T10493] vfs_read+0x1e4/0xb40 [ 188.098629][T10493] ? __pfx_vfs_read+0x10/0x10 [ 188.098647][T10493] ? __fget_files+0x215/0x3d0 [ 188.098662][T10493] ? __fget_files+0x21f/0x3d0 [ 188.098677][T10493] ksys_read+0x12a/0x250 [ 188.098687][T10493] ? __pfx_ksys_read+0x10/0x10 [ 188.098701][T10493] do_syscall_64+0x115/0x870 [ 188.098751][T10493] ? clear_bhb_loop+0x70/0xc0 [ 188.098765][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.098777][T10493] RIP: 0033:0x7f6ddb55e90e [ 188.098787][T10493] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 188.098799][T10493] RSP: 002b:00007f6ddc4cffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.098819][T10493] RAX: ffffffffffffffda RBX: 00007f6ddc4d06c0 RCX: 00007f6ddb55e90e [ 188.098826][T10493] RDX: 000000000000000f RSI: 00007f6ddc4d00a0 RDI: 000000000000000b [ 188.098833][T10493] RBP: 00007f6ddc4d0090 R08: 0000000000000000 R09: 0000000000000000 [ 188.098840][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.098846][T10493] R13: 00007f6ddb826038 R14: 00007f6ddb825fa0 R15: 00007ffe3e3b0568 [ 188.098860][T10493] [ 188.220099][T10495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1312'. [ 188.283288][T10497] netlink: 'syz.4.1314': attribute type 19 has an invalid length. [ 188.312121][ T5826] usb 6-1: USB disconnect, device number 13 [ 188.377109][ T5826] Unregistered device Abilis Systems DVB-Titan [ 188.379610][ T5826] as10x_usb: device has been disconnected [ 188.515937][ C2] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 188.689551][ T5826] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 188.848637][ T5826] usb 6-1: unable to get BOS descriptor or descriptor too short [ 188.851780][ T5826] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 188.860666][ T5826] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.871132][ T5826] usb 6-1: string descriptor 0 read error: -22 [ 188.874349][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.156873][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 189.775363][T10561] vcan0 speed is unknown, defaulting to 1000 [ 190.587172][T10575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1333'. [ 190.590274][T10575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1333'. [ 190.725839][T10579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=10579 comm=syz.3.1335 [ 190.732043][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 190.732063][ T42] audit: type=1400 audit(1786411697.541:17370): avc: denied { write } for pid=10578 comm="syz.3.1335" name="/" dev="9p" ino=77093709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.885336][ T42] audit: type=1400 audit(1786411697.691:17371): avc: denied { accept } for pid=10582 comm="syz.0.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 190.964991][ T42] audit: type=1400 audit(1786411697.771:17372): avc: denied { remount } for pid=10586 comm="syz.0.1338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 191.204694][T10601] usb usb9: check_ctrlrecip: process 10601 (syz.3.1341) requesting ep 01 but needs 81 [ 191.208782][T10601] usb usb9: usbfs: process 10601 (syz.3.1341) did not claim interface 0 before use [ 191.310237][T10607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.557797][T10613] pim6reg1: entered promiscuous mode [ 191.575723][T10613] pim6reg1: entered allmulticast mode [ 191.626351][T10620] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1350'. [ 191.661325][T10620] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1350'. [ 191.868886][T10632] jffs2: notice: (10632) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 191.899309][ T42] audit: type=1400 audit(1786411698.711:17373): avc: denied { write } for pid=10625 comm="syz.3.1352" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.922547][ T42] audit: type=1400 audit(1786411698.711:17374): avc: denied { read write open } for pid=10625 comm="syz.3.1352" path="/357/file0/test" dev="jffs2" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 191.934304][ T42] audit: type=1400 audit(1786411698.731:17375): avc: denied { ioctl } for pid=10625 comm="syz.3.1352" path="socket:[36887]" dev="sockfs" ino=36887 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 192.069965][T10643] binder: 10642:10643 ioctl c0306201 200000000080 returned -14 [ 192.073395][T10644] binder: 10642:10644 ioctl c038586a 200000000240 returned -22 [ 192.078886][ T42] audit: type=1400 audit(1786411698.891:17376): avc: denied { transfer } for pid=10642 comm="syz.4.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 192.191721][ C2] sd 0:0:0:0: [sda] tag#27 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 192.195061][ C2] sd 0:0:0:0: [sda] tag#27 CDB: Test Unit Ready [ 192.228734][ T42] audit: type=1400 audit(1786411699.041:17377): avc: denied { create } for pid=10653 comm="syz.3.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 192.248052][ T42] audit: type=1400 audit(1786411699.061:17378): avc: denied { write } for pid=10653 comm="syz.3.1361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 192.386382][T10659] xt_CT: No such helper "snmp_trap" [ 192.448548][T10663] syz_tun: entered allmulticast mode [ 192.455435][T10663] dvmrp8: entered allmulticast mode [ 192.458837][T10662] syz_tun: left allmulticast mode [ 192.494176][T10665] netlink: zone id is out of range [ 192.661564][ T42] audit: type=1400 audit(1786411699.471:17379): avc: denied { write } for pid=10669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.918144][T10686] futex_wake_op: syz.3.1369 tries to shift op by 32; fix this program [ 193.366147][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1376'. [ 193.384684][T10711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1376'. [ 193.605696][ T5819] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 193.755719][ T5819] usb 9-1: Using ep0 maxpacket: 16 [ 193.759459][ T5819] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 193.764508][ T5819] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.768828][ T5819] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.775015][ T5819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.778492][ T5819] usb 9-1: Product: syz [ 193.780267][ T5819] usb 9-1: Manufacturer: syz [ 193.782306][ T5819] usb 9-1: SerialNumber: syz [ 193.791014][ T5819] r8152-cfgselector 9-1: Unknown version 0x0000 [ 193.798709][ T5819] r8152-cfgselector 9-1: config 0 descriptor?? [ 194.011337][ T6978] r8152-cfgselector 9-1: USB disconnect, device number 17 [ 194.283165][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.285976][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.585413][T10756] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1391'. [ 194.821987][T10770] binder: 10769:10770 ioctl 4018620d 0 returned -22 [ 194.995799][ T5734] Bluetooth: hci1: command tx timeout [ 195.078319][T10501] usb 6-1: 1:1: usb_set_interface failed (-110) [ 195.089309][ T6978] usb 6-1: USB disconnect, device number 14 [ 195.372150][T10780] program syz.1.1399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.706757][T10798] overlayfs: failed to resolve './file0': -2 [ 195.752261][T10801] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 195.755973][T10801] overlayfs: missing 'lowerdir' [ 195.788255][ T5734] Bluetooth: Unknown LE signaling command 0x3c [ 195.793848][ T5734] Bluetooth: Wrong link type (-22) [ 195.857615][T10808] xt_socket: unknown flags 0x58 [ 195.914106][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 195.914121][ T42] audit: type=1400 audit(1786411702.721:17389): avc: denied { create } for pid=10809 comm="syz.0.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.917554][T10810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=10810 comm=syz.0.1408 [ 195.925878][ T42] audit: type=1400 audit(1786411702.721:17390): avc: denied { setopt } for pid=10809 comm="syz.0.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.929013][T10810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=10810 comm=syz.0.1408 [ 195.941500][T10810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=10810 comm=syz.0.1408 [ 196.098859][ T42] audit: type=1400 audit(1786411702.911:17391): avc: denied { create } for pid=10816 comm="syz.0.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 196.138309][T10817] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 196.416107][T10827] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 196.608734][T10831] erspan1: entered promiscuous mode [ 196.772100][T10839] overlayfs: missing 'lowerdir' [ 196.780302][ T42] audit: type=1400 audit(1786411703.591:17392): avc: denied { create } for pid=10838 comm="syz.1.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 196.782571][T10839] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10839 comm=syz.1.1417 [ 196.803477][ T42] audit: type=1400 audit(1786411703.591:17393): avc: denied { write } for pid=10838 comm="syz.1.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 196.822448][ T42] audit: type=1400 audit(1786411703.591:17394): avc: denied { setopt } for pid=10838 comm="syz.1.1417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 196.897688][T10839] veth9: entered allmulticast mode [ 197.067956][T10850] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.074698][T10850] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 197.078081][T10850] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 197.080650][T10850] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 197.090159][T10850] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1420'. [ 197.136319][T10853] SET target dimension over the limit! [ 197.214958][T10860] CIFS: VFS: UNC: path must begin with // or \\ [ 197.217817][T10860] Malformed UNC in devname [ 197.217817][T10860] [ 197.220944][T10860] CIFS: VFS: Malformed UNC in devname [ 197.261357][T10862] GUP no longer grows the stack in syz.1.1424 (10862): 200000007000-20000000a000 (200000004000) [ 197.266829][T10862] CPU: 2 UID: 0 PID: 10862 Comm: syz.1.1424 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.266859][T10862] Tainted: [L]=SOFTLOCKUP [ 197.266866][T10862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 197.266888][T10862] Call Trace: [ 197.266895][T10862] [ 197.266902][T10862] dump_stack_lvl+0x100/0x190 [ 197.266950][T10862] gup_vma_lookup.cold+0x83/0x96 [ 197.266979][T10862] __get_user_pages+0x241/0x32a0 [ 197.267012][T10862] ? down_read_killable+0x35e/0x520 [ 197.267090][T10862] ? __pfx___get_user_pages+0x10/0x10 [ 197.267113][T10862] ? update_se+0x97/0x14c0 [ 197.267139][T10862] __gup_longterm_locked+0x87d/0x16f0 [ 197.267172][T10862] ? __pfx___gup_longterm_locked+0x10/0x10 [ 197.267197][T10862] ? lock_acquire+0x1b9/0x370 [ 197.267228][T10862] gup_fast_fallback+0x16dc/0x2790 [ 197.267277][T10862] ? __pfx_gup_fast_fallback+0x10/0x10 [ 197.267305][T10862] ? __lock_acquire+0x49f/0x1a40 [ 197.267327][T10862] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 197.267353][T10862] ? lockdep_hardirqs_on+0x78/0x100 [ 197.267380][T10862] get_user_pages_fast+0xa7/0xf0 [ 197.267405][T10862] ? __pfx_get_user_pages_fast+0x10/0x10 [ 197.267437][T10862] __iov_iter_get_pages_alloc+0x8f2/0x1f20 [ 197.267478][T10862] ? __mutex_lock+0x26d/0x1bd0 [ 197.267500][T10862] ? pipe_lock+0x69/0x80 [ 197.267521][T10862] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 197.267547][T10862] ? __pfx___mutex_lock+0x10/0x10 [ 197.267571][T10862] ? import_ubuf+0x1b6/0x220 [ 197.267600][T10862] iov_iter_get_pages2+0xa3/0x100 [ 197.267623][T10862] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 197.267647][T10862] ? wait_for_space+0x2ca/0x3b0 [ 197.267681][T10862] __do_sys_vmsplice+0x7dd/0x13c0 [ 197.267732][T10862] ? __pfx___do_sys_vmsplice+0x10/0x10 [ 197.267763][T10862] ? __pfx_futex_wait+0x10/0x10 [ 197.267828][T10862] ? do_syscall_64+0x115/0x870 [ 197.267858][T10862] do_syscall_64+0x115/0x870 [ 197.267880][T10862] ? clear_bhb_loop+0x70/0xc0 [ 197.267902][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.267921][T10862] RIP: 0033:0x7ff5ff59e0d9 [ 197.267950][T10862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.267968][T10862] RSP: 002b:00007ff6004a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 197.267997][T10862] RAX: ffffffffffffffda RBX: 00007ff5ff825fa0 RCX: 00007ff5ff59e0d9 [ 197.268020][T10862] RDX: 0000000000000001 RSI: 00002000000013c0 RDI: 0000000000000004 [ 197.268031][T10862] RBP: 00007ff5ff635024 R08: 0000000000000000 R09: 0000000000000000 [ 197.268041][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.268051][T10862] R13: 00007ff5ff826038 R14: 00007ff5ff825fa0 R15: 00007ffe53a9d668 [ 197.268077][T10862] [ 197.269772][ T42] audit: type=1400 audit(1786411704.081:17395): avc: denied { setopt } for pid=10861 comm="syz.1.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 197.694793][ T42] audit: type=1400 audit(1786411704.501:17396): avc: denied { append } for pid=10875 comm="syz.4.1428" name="btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 197.706223][ T42] audit: type=1400 audit(1786411704.501:17397): avc: denied { append } for pid=10875 comm="syz.4.1428" name="btrfs-control" dev="devtmpfs" ino=1339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 197.828571][T10880] ceph: No mds server is up or the cluster is laggy [ 197.834208][ T5819] libceph: mon0 (1)[c::]:6789 socket error on write [ 197.854993][T10886] tipc: Enabling of bearer rejected, media not registered [ 197.870393][ T42] audit: type=1400 audit(1786411704.661:17398): avc: denied { shutdown } for pid=10884 comm="syz.3.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 197.886552][ T6978] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 197.890014][T10886] vcan0 speed is unknown, defaulting to 1000 [ 198.038531][ T6978] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 198.046425][ T6978] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 198.054335][ T6978] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 0 [ 198.062591][ T6978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.078253][ T6978] usb 6-1: USB2VGA dongle found at address 15 [ 198.090500][ T6978] usb 6-1: Allocated 8 output buffers [ 198.207317][T10903] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 198.309743][T10911] tmpfs: Bad value for 'mpol' [ 198.412694][T10922] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1437'. [ 198.773372][T10935] 9pnet_fd: p9_fd_create_tcp (10935): problem connecting socket to 127.0.0.1 [ 199.117410][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1449'. [ 199.301713][T10976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 199.531565][T10996] bridge0: entered promiscuous mode [ 199.534902][T10996] bridge0: entered allmulticast mode [ 199.793685][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1467'. [ 199.948619][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1471'. [ 199.986352][T11034] syz_tun (unregistering): left allmulticast mode [ 200.030929][T11037] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 200.082795][T11037] kvm: pic: level sensitive irq not supported [ 200.084526][T11037] kvm: pic: non byte read [ 200.148849][T11045] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 200.188258][T11047] overlay: filesystem on ./bus not supported [ 200.324121][T11053] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 200.487331][ T41] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 200.500305][T11057] bond6: (slave batadv0): Device is not bonding slave [ 200.503347][T11057] bond6: option active_slave: invalid value (batadv0) [ 200.508833][T11057] bond6 (unregistering): Released all slaves [ 200.646999][ T41] usb 9-1: Using ep0 maxpacket: 8 [ 200.653658][ T41] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 200.666208][ T41] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 200.672282][ T41] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 200.682397][ T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 200.688537][ T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 200.692896][ T41] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.703906][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.708236][ T41] usb 9-1: Product: syz [ 200.710211][ T41] usb 9-1: Manufacturer: syz [ 200.719909][ T41] usb 9-1: SerialNumber: syz [ 200.727835][ T41] usb 9-1: config 0 descriptor?? [ 200.737882][ T41] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input24 [ 200.999245][ T41] usb 9-1: USB disconnect, device number 18 [ 201.603031][T11075] netlink: 484 bytes leftover after parsing attributes in process `syz.4.1485'. [ 201.607947][T11075] tipc: Started in network mode [ 201.609972][T11075] tipc: Node identity e0, cluster identity 4711 [ 201.612731][T11075] tipc: Node number set to 224 [ 201.623383][T11075] befs: (nullb0): No write support. Marking filesystem read-only [ 201.627542][T11075] befs: (nullb0): invalid magic header [ 201.672404][T11079] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1486'. [ 201.678890][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1486'. [ 201.684920][T11079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1486'. [ 201.799849][T11084] --map-set only usable from mangle table [ 201.859740][T11087] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1488'. [ 203.099700][T11102] netlink: 'syz.0.1494': attribute type 10 has an invalid length. [ 203.110814][T11102] bond3: (slave veth0_to_bond): Releasing backup interface [ 203.119916][T11102] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 203.240128][T11107] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 203.245154][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 203.245208][ T42] audit: type=1400 audit(1786411710.051:17411): avc: denied { write } for pid=11106 comm="syz.0.1496" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 203.357089][T11111] netlink: 'syz.0.1498': attribute type 1 has an invalid length. [ 203.374725][T11111] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.386184][T11111] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 203.419520][T11114] tc_dump_action: action bad kind [ 203.537405][T11119] bond5: invalid ARP target 0.0.0.0 specified for addition [ 203.539850][T11119] bond5: option arp_ip_target: invalid value (0) [ 203.543610][T11119] bond5 (unregistering): Released all slaves [ 203.702422][T11127] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1502'. [ 203.746886][T11132] netlink: 'syz.0.1504': attribute type 1 has an invalid length. [ 203.771564][T11132] 8021q: adding VLAN 0 to HW filter on device bond5 [ 203.866910][T11143] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 203.894402][ T42] audit: type=1400 audit(1786411710.701:17412): avc: denied { setattr } for pid=11144 comm="syz.4.1507" name="KCM" dev="sockfs" ino=39140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 203.969906][T11156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1511'. [ 204.035206][T11160] bond6: entered promiscuous mode [ 204.037279][T11160] 8021q: adding VLAN 0 to HW filter on device bond6 [ 204.115138][ T42] audit: type=1400 audit(1786411710.921:17413): avc: denied { read } for pid=11168 comm="syz.4.1514" name="file0" dev="tmpfs" ino=1330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.142132][ T42] audit: type=1400 audit(1786411710.921:17414): avc: denied { open } for pid=11168 comm="syz.4.1514" path="/248/file0" dev="tmpfs" ino=1330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.166045][ T42] audit: type=1400 audit(1786411710.931:17415): avc: denied { ioctl } for pid=11168 comm="syz.4.1514" path="/248/file0" dev="tmpfs" ino=1330 ioctlcmd=0x64c1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 204.197293][ T42] audit: type=1400 audit(1786411710.941:17416): avc: denied { bind } for pid=11154 comm="syz.1.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 204.239549][ T42] audit: type=1400 audit(1786411710.941:17417): avc: denied { write } for pid=11154 comm="syz.1.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 204.266419][ T42] audit: type=1400 audit(1786411710.951:17418): avc: denied { read } for pid=11154 comm="syz.1.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 204.291317][T11176] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1516'. [ 204.482227][T11183] syz_tun: tun_net_xmit 86 [ 204.652668][T11192] netlink: 'syz.0.1523': attribute type 1 has an invalid length. [ 204.698051][T11192] 8021q: adding VLAN 0 to HW filter on device bond7 [ 204.718608][T11198] bond7: (slave gretap2): making interface the new active one [ 204.734112][T11198] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 204.875689][ T5819] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 205.026291][ T5819] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 205.033109][ T5819] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 205.042022][ T5819] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 205.051915][ T5819] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.057496][ T5819] usb 9-1: Product: syz [ 205.058861][ T5819] usb 9-1: Manufacturer: syz [ 205.065667][ T5819] usb 9-1: SerialNumber: syz [ 205.078792][ T5819] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 205.098940][ T5819] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 205.109357][ T5819] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 205.555900][ C2] syz_tun: tun_net_xmit 86 [ 205.587806][T11215] binder: 11214:11215 ioctl c0306201 200000000080 returned -14 [ 205.772603][ T42] audit: type=1326 audit(1786411712.581:17419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ff59e0d9 code=0x7ffc0000 [ 205.783205][ T42] audit: type=1326 audit(1786411712.591:17420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11217 comm="syz.1.1530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ff59e0d9 code=0x7ffc0000 [ 206.435997][ C2] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 206.543626][T11229] binder: 11228:11229 ioctl c0306201 200000000040 returned -14 [ 206.595723][ C2] syz_tun: tun_net_xmit 86 [ 206.781249][T11239] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 206.788573][T11239] block device autoloading is deprecated and will be removed. [ 206.996237][T11195] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 207.001391][ T2318] usb 9-1: USB disconnect, device number 19 [ 207.049902][ T2318] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 207.065259][ T2318] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 207.072737][ T2318] ti_usb_3410_5052 9-1:2.0: device disconnected [ 207.202716][T11243] bridge5: entered promiscuous mode [ 207.715821][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 207.825766][ T2318] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 207.975702][ T2318] usb 9-1: Using ep0 maxpacket: 8 [ 207.983766][ T2318] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 207.998505][ T2318] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.003758][ T2318] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 208.015745][ T2318] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.028934][ T2318] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 208.035863][ T2318] usb 9-1: Product: syz [ 208.037759][ T2318] usb 9-1: Manufacturer: syz [ 208.041930][ T2318] usb 9-1: SerialNumber: syz [ 208.049824][ T2318] usb 9-1: config 0 descriptor?? [ 208.125681][ T2318] rc_core: IR keymap rc-imon-rsc not found [ 208.128203][ T2318] Registered IR keymap rc-empty [ 208.131798][ T2318] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 208.144270][ T2318] input: iMON Station as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input25 [ 208.224467][T11265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.259355][ T6706] usb 9-1: USB disconnect, device number 20 [ 208.273098][T11271] netlink: 'syz.0.1546': attribute type 8 has an invalid length. [ 208.292854][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1546'. [ 208.307067][T11271] 8021q: adding VLAN 0 to HW filter on device bond8 [ 208.462969][T11280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1550'. [ 208.475910][T11280] 8021q: adding VLAN 0 to HW filter on device bond9 [ 208.484066][T11281] macvlan2: entered promiscuous mode [ 208.486594][T11281] macvlan2: entered allmulticast mode [ 208.490085][T11281] bond9: (slave macvlan2): Opening slave failed [ 208.542858][T11285] kvm: kvm [11284]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 208.934918][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 208.934932][ T42] audit: type=1400 audit(1786411715.741:17428): avc: denied { write } for pid=11304 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.992222][ T42] audit: type=1400 audit(1786411715.801:17429): avc: denied { write } for pid=11307 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.074912][ T42] audit: type=1400 audit(1786411715.881:17430): avc: denied { write } for pid=11311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.167088][ T42] audit: type=1400 audit(1786411715.981:17431): avc: denied { write } for pid=11319 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.202744][T11326] e1000e 0000:00:02.0 eth1: S0ix is not supported on this device [ 209.521514][T11345] SELinux: policydb version -1825462840 does not match my version range 15-35 [ 209.525794][ T2318] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 209.528666][T11345] SELinux: failed to load policy [ 209.537581][T11345] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.676020][ T2318] usb 9-1: Using ep0 maxpacket: 8 [ 209.678555][ T2318] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 209.686739][ T2318] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.692685][ T2318] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 209.701744][ T2318] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.714026][ T2318] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 209.717332][ T2318] usb 9-1: Product: syz [ 209.719236][ T2318] usb 9-1: Manufacturer: syz [ 209.721258][ T2318] usb 9-1: SerialNumber: syz [ 209.732500][ T2318] usb 9-1: config 0 descriptor?? [ 209.806112][ T2318] rc_core: IR keymap rc-imon-rsc not found [ 209.809625][ T2318] Registered IR keymap rc-empty [ 209.815442][ T2318] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 209.822923][ T2318] input: iMON Station as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input26 [ 209.969524][ T42] audit: type=1400 audit(1786411716.781:17432): avc: denied { write } for pid=11366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.018893][ T5833] usb 9-1: USB disconnect, device number 21 [ 210.047549][ T42] audit: type=1400 audit(1786411716.851:17433): avc: denied { write } for pid=11371 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.337577][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1574'. [ 210.599697][T11385] binder: 11384:11385 ioctl c0306201 200000000540 returned -22 [ 210.606935][T11385] binder: 11384:11385 ioctl c0306201 200000000640 returned -22 [ 210.611405][ T42] audit: type=1400 audit(1786411717.421:17434): avc: denied { cmd } for pid=11386 comm="iou-wrk-11387" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 210.620788][T11385] netlink: 'syz.1.1578': attribute type 3 has an invalid length. [ 210.627854][T11385] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 210.635851][T11385] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1578'. [ 210.641512][T11385] NCSI netlink: No device for ifindex 0 [ 211.718332][ C2] syz_tun: tun_net_xmit 86 [ 212.756072][ C2] syz_tun: tun_net_xmit 86 [ 213.795929][ C2] syz_tun: tun_net_xmit 86 [ 219.885910][ C2] syz_tun: tun_net_xmit 86 [ 220.926002][ C2] syz_tun: tun_net_xmit 86 [ 221.955861][ C2] syz_tun: tun_net_xmit 86 [ 221.959236][ T5739] Bluetooth: hci2: command 0x0406 tx timeout [ 229.058697][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 229.067279][T11405] lo: entered promiscuous mode [ 229.076619][T11405] bond0: entered promiscuous mode [ 229.079762][T11405] dummy0: entered promiscuous mode [ 229.094192][T11405] eql: entered promiscuous mode [ 229.098339][T11405] ifb0: entered promiscuous mode [ 229.100395][T11405] ifb1: entered promiscuous mode [ 229.104953][T11405] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 229.115181][T11405] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 229.120033][T11405] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 229.125200][T11405] hwsim0: entered promiscuous mode [ 229.130680][T11405] ieee802154 phy0 wpan0: entered promiscuous mode [ 229.133560][T11405] ieee802154 phy1 wpan1: entered promiscuous mode [ 229.137610][T11405] teql0: entered promiscuous mode [ 229.139420][T11405] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 229.171388][ T42] audit: type=1400 audit(1786411735.981:17435): avc: denied { listen } for pid=11411 comm="syz.4.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 230.152281][T11439] tipc: Trying to set illegal importance in message [ 230.161195][T11439] binder: 11438:11439 ioctl 4004af61 200000000100 returned -22 [ 230.231501][T11447] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1594'. [ 230.241346][T11447] tmpfs: Bad value for 'size' [ 230.271037][T11451] fuseblk: Bad value for 'user_id' [ 230.272752][T11451] fuseblk: Bad value for 'user_id' [ 230.308500][T11453] evm: overlay not supported [ 230.324935][ T42] audit: type=1400 audit(1786411737.131:17436): avc: denied { remount } for pid=11452 comm="syz.1.1596" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 230.332210][T11453] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 230.342293][T11453] overlayfs: failed to verify origin (376/file1, ino=2058, err=-116) [ 230.346447][T11453] overlayfs: failed to verify origin (376/file1, ino=2058, err=-116) [ 230.350796][T11457] netlink: 'syz.0.1599': attribute type 19 has an invalid length. [ 230.395422][T11457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1599'. [ 230.504987][T11462] x_tables: duplicate underflow at hook 1 [ 230.562551][T11464] netdevsim netdevsim0: Direct firmware load for . [ 230.562551][T11464] failed with error -2 [ 230.566757][ T5833] IPVS: starting estimator thread 0... [ 230.571306][ T42] audit: type=1400 audit(1786411737.381:17437): avc: denied { firmware_load } for pid=11463 comm="syz.0.1602" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 230.579424][T11464] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 230.579424][T11464] [ 230.655743][T11469] IPVS: using max 30 ests per chain, 72000 per kthread [ 230.732778][ T42] audit: type=1400 audit(1786411737.541:17438): avc: denied { listen } for pid=11480 comm="syz.1.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 230.771354][T11483] xt_policy: neither incoming nor outgoing policy selected [ 230.780515][T11483] xt_policy: neither incoming nor outgoing policy selected [ 230.902556][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1609'. [ 230.909302][T11489] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.913652][T11490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1609'. [ 230.917456][T11489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1609'. [ 230.920705][T11490] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 230.923177][T11489] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 231.057235][T11494] netlink: 'syz.1.1611': attribute type 1 has an invalid length. [ 231.060276][T11494] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1611'. [ 231.533251][T11506] syzkaller0: entered promiscuous mode [ 231.535275][T11506] syzkaller0: entered allmulticast mode [ 231.546611][T11506] fuse: Bad value for 'user_id' [ 231.553326][T11506] fuse: Bad value for 'user_id' [ 231.594027][T11510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1618'. [ 231.633938][T11508] vcan0 speed is unknown, defaulting to 1000 [ 232.209626][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1623'. [ 232.298146][T11534] bridge4: entered promiscuous mode [ 232.299969][T11534] bridge4: entered allmulticast mode [ 232.381199][T11542] nbd: must specify a size in bytes for the device [ 232.388999][T11542] ceph: Path missing in source [ 232.423872][T11510] nvme nvme0: failed to connect socket: -512 [ 232.553385][T11558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1629'. [ 232.706807][T11561] (syz.1.1631,11561,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 232.725496][T11561] (syz.1.1631,11561,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 232.734665][T11561] (syz.1.1631,11561,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 232.745853][T11561] (syz.1.1631,11561,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 232.821864][T11574] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 232.823812][T11574] syzkaller1: group set to 0 [ 232.937163][T11557] syz.1.1631 (11557): drop_caches: 2 [ 232.978985][T11578] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 232.981244][T11578] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 232.989905][T11578] vhci_hcd vhci_hcd.0: Device attached [ 232.995012][ T42] audit: type=1400 audit(1786411995.796:17439): avc: denied { create } for pid=11577 comm="syz.1.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 233.002049][ T2318] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 233.006124][T11579] vhci_hcd: connection closed [ 233.020641][ T5803] vhci_hcd vhci_hcd.1: stop threads [ 233.028706][ T5803] vhci_hcd vhci_hcd.1: release socket [ 233.035273][ T5803] vhci_hcd vhci_hcd.1: disconnect device [ 233.156738][ T2318] usb 9-1: Using ep0 maxpacket: 8 [ 233.159027][ T2318] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 233.163955][ T2318] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.168399][ T2318] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 233.172560][ T2318] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.181832][ T2318] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 233.185191][ T2318] usb 9-1: Product: syz [ 233.188529][ T2318] usb 9-1: Manufacturer: syz [ 233.190330][ T2318] usb 9-1: SerialNumber: syz [ 233.196815][ T2318] usb 9-1: config 0 descriptor?? [ 233.267828][ T2318] rc_core: IR keymap rc-imon-rsc not found [ 233.270300][ T2318] Registered IR keymap rc-empty [ 233.276508][ T2318] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 233.284754][ T2318] input: iMON Station as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input27 [ 233.353022][ T42] audit: type=1804 audit(1786411996.156:17440): pid=11596 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1644" name="/newroot/421/file0" dev="tmpfs" ino=2267 res=1 errno=0 [ 233.415425][ T42] audit: type=1400 audit(1786411996.216:17441): avc: denied { listen } for pid=11598 comm="syz.0.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 233.461796][T11602] xt_NFQUEUE: number of total queues is 0 [ 233.470822][ T2318] usb 9-1: USB disconnect, device number 22 [ 233.817554][T11620] vcan0 speed is unknown, defaulting to 1000 [ 233.979195][T11663] netlink: ct family unspecified [ 233.985753][T11663] openvswitch: netlink: Actions may not be safe on all matching packets [ 234.034736][T11679] netlink: 'syz.0.1657': attribute type 1 has an invalid length. [ 234.119638][ T42] audit: type=1400 audit(1786411996.926:17442): avc: denied { bind } for pid=11688 comm="syz.0.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 234.146135][ T42] audit: type=1400 audit(1786411996.926:17443): avc: denied { setopt } for pid=11688 comm="syz.0.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 234.166902][ T42] audit: type=1400 audit(1786411996.966:17444): avc: denied { accept } for pid=11690 comm="syz.1.1661" path="socket:[41349]" dev="sockfs" ino=41349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 234.272064][T11699] __nla_validate_parse: 10 callbacks suppressed [ 234.272085][T11699] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1661'. [ 234.415382][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1665'. [ 234.448702][T11702] vcan0 speed is unknown, defaulting to 1000 [ 234.459238][T11710] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1666'. [ 234.537208][T11718] ubi0: attaching mtd0 [ 234.554525][T11718] ubi0: scanning is finished [ 234.557327][T11718] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 234.733707][T11718] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 234.868729][T11723] netlink: 'syz.3.1669': attribute type 2 has an invalid length. [ 234.872142][T11723] netlink: 'syz.3.1669': attribute type 2 has an invalid length. [ 235.328290][T11747] dvmrp8: left allmulticast mode [ 235.481480][T11756] vcan0 speed is unknown, defaulting to 1000 [ 235.828519][ T42] audit: type=1400 audit(1786411998.636:17445): avc: denied { setattr } for pid=11782 comm="syz.4.1684" name="radio9" dev="devtmpfs" ino=1032 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 236.333398][ T42] audit: type=1400 audit(1786411999.136:17446): avc: denied { write } for pid=11793 comm="syz.0.1687" name="/" dev="9p" ino=77093709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.516036][ C2] syz_tun: tun_net_xmit 86 [ 236.931480][ T42] audit: type=1400 audit(1786411999.736:17447): avc: denied { write } for pid=11831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.026251][ T42] audit: type=1400 audit(1786411999.826:17448): avc: denied { write } for pid=11834 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.028420][T11836] bond4: entered promiscuous mode [ 237.037229][T11836] bond4: entered allmulticast mode [ 237.040315][T11836] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.149844][ T42] audit: type=1400 audit(1786411999.956:17449): avc: denied { write } for pid=11845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.207277][ T42] audit: type=1400 audit(1786412000.016:17450): avc: denied { mounton } for pid=11847 comm="syz.3.1697" path="/file0" dev="bpf" ino=42834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=file permissive=1 [ 237.222463][ T42] audit: type=1400 audit(1786412000.026:17451): avc: denied { write } for pid=11852 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.291347][ T42] audit: type=1400 audit(1786412000.096:17452): avc: denied { write } for pid=11856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.341771][ T42] audit: type=1400 audit(1786412000.146:17453): avc: denied { write } for pid=11861 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.426571][ T42] audit: type=1400 audit(1786412000.236:17454): avc: denied { write } for pid=11865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.555963][ C2] syz_tun: tun_net_xmit 86 [ 237.605014][T11875] program syz.3.1701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.492134][T11894] netlink: 'syz.3.1707': attribute type 1 has an invalid length. [ 238.532872][T11894] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.541159][T11897] tmpfs: Bad value for 'mpol' [ 238.567285][T11894] openvswitch: netlink: Actions may not be safe on all matching packets [ 238.579256][T11894] netdevsim netdevsim3: Direct firmware load for . [ 238.579256][T11894] failed with error -2 [ 238.587055][T11894] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 238.587055][T11894] [ 238.595011][T11899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1709'. [ 238.595706][ C2] syz_tun: tun_net_xmit 86 [ 238.628206][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1707'. [ 238.631711][T11900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1707'. [ 238.660191][T11900] bond5: (slave geneve4): making interface the new active one [ 238.663736][T11900] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 238.731257][T11904] xt_hashlimit: size too large, truncated to 1048576 [ 238.733660][T11904] xt_hashlimit: invalid rate [ 238.771153][T11912] netlink: 'syz.1.1712': attribute type 1 has an invalid length. [ 238.773747][T11912] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1712'. [ 238.835375][T11914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1713'. [ 239.078937][T11925] nfs: Unknown parameter '@' [ 239.081356][T11925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1717'. [ 239.111402][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1719'. [ 239.163097][T11932] 9pnet_virtio: no channels available for device syz [ 239.207486][T11927] sd 0:0:0:0: PR command failed: 1026 [ 239.212509][T11927] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 239.215755][T11927] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 239.328736][T11934] kAFS: No cell specified [ 239.540359][T11947] sit1: entered promiscuous mode [ 239.994272][T11959] xfs: Unknown parameter 'grpquota÷x¼Á½jÆÒ«­¿R«"Lˆ‰òYŒ [ 239.994272][T11959] w>.ûš¹DçAb5âõuWñÎõ+Í­KGó‹l²è}àp农Á„y½|_>&£f.Iai' [ 240.044373][T11959] __nla_validate_parse: 1 callbacks suppressed [ 240.044447][T11959] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1729'. [ 240.114804][T11967] x_tables: ip_tables: ah match: only valid for protocol 51 [ 240.363932][T11982] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1736'. [ 240.430193][T11987] nfs: Unknown parameter '@' [ 240.433161][T11987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1737'. [ 240.484641][T11989] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1738'. [ 240.508412][T11989] input: syz1 as /devices/virtual/input/input28 [ 240.573684][T11989] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1738'. [ 240.995879][ C2] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 241.092337][T12008] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1743'. [ 241.096629][T12008] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1743'. [ 241.104665][T12008] syz_tun: tun_net_xmit 86 [ 241.322788][T12021] netlink: 'syz.4.1746': attribute type 11 has an invalid length. [ 241.326025][T12021] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1746'. [ 241.330767][T12017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.550421][T12029] openvswitch: netlink: IPv4 tun info is not correct [ 241.556469][T12029] openvswitch: netlink: IPv4 tun info is not correct [ 241.615639][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1749'. [ 241.979021][T12045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1753'. [ 242.022327][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 242.022344][ T42] audit: type=1400 audit(1786412004.826:17458): avc: denied { setattr } for pid=12046 comm="syz.4.1754" name="XDP" dev="sockfs" ino=43619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 242.115817][ C2] syz_tun: tun_net_xmit 86 [ 242.199552][ T42] audit: type=1400 audit(1786412005.006:17459): avc: denied { append } for pid=12050 comm="syz.4.1756" name="uprobe_events" dev="tracefs" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 242.295363][T12055] batman_adv: batadv0: Adding interface: veth0 [ 242.298916][T12055] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.308110][T12055] batman_adv: batadv0: Interface activated: veth0 [ 242.312238][T12055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.314979][T12055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.318688][T12055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.321668][T12055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.324825][T12055] batman_adv: batadv0: Interface deactivated: veth0 [ 242.327379][T12055] batman_adv: batadv0: Removing interface: veth0 [ 242.481110][T12059] netlink: 'syz.4.1760': attribute type 30 has an invalid length. [ 242.499163][ T42] audit: type=1400 audit(1786412005.306:17460): avc: denied { connect } for pid=12058 comm="syz.4.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 242.827943][T12074] syz.4.1765 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 243.001916][T12091] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 243.155846][ C2] syz_tun: tun_net_xmit 86 [ 243.357381][ T6706] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 243.389911][ T42] audit: type=1400 audit(1786412006.196:17461): avc: denied { write } for pid=12125 comm="syz.1.1782" name="/" dev="9p" ino=77093709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.515703][ T6706] usb 9-1: Using ep0 maxpacket: 8 [ 243.518429][T12131] openvswitch: netlink: Flow key attr not present in new flow. [ 243.522242][ T6706] usb 9-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 243.528709][ T6706] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.534037][ T6706] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 243.542968][ T6706] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.554100][ T6706] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 243.570388][ T6706] usb 9-1: Product: syz [ 243.575420][ T6706] usb 9-1: Manufacturer: syz [ 243.581138][ T6706] usb 9-1: SerialNumber: syz [ 243.592927][ T6706] usb 9-1: config 0 descriptor?? [ 243.655882][ T6706] rc_core: IR keymap rc-imon-rsc not found [ 243.659436][ T6706] Registered IR keymap rc-empty [ 243.665501][ T6706] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 243.673434][ T6706] input: iMON Station as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input29 [ 243.925738][ T6706] usb 9-1: USB disconnect, device number 23 [ 244.613461][ T42] audit: type=1400 audit(1786412007.416:17462): avc: denied { getopt } for pid=12162 comm="syz.4.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 245.480226][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 246.292849][T12119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.411016][T12169] openvswitch: netlink: Missing key (keys=40, expected=100) [ 246.465267][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=12176 comm=syz.4.1793 [ 246.467906][T12174] netlink: 'syz.0.1796': attribute type 2 has an invalid length. [ 246.550744][T12169] netlink: 'syz.4.1793': attribute type 1 has an invalid length. [ 246.553949][T12181] __nla_validate_parse: 5 callbacks suppressed [ 246.553961][T12181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1797'. [ 246.577199][T12169] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.583930][T12169] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1793'. [ 246.779955][ T42] audit: type=1400 audit(1786412009.586:17463): avc: denied { read } for pid=12192 comm="syz.4.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 246.840959][T12203] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 246.892276][ T6706] syz_tun: tun_net_xmit 110 [ 246.912640][T12205] afs: Unknown parameter 'dyn(feß²' [ 246.927797][T12206] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 246.930754][T12203] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.937002][T12203] veth1_to_team: entered promiscuous mode [ 246.943851][T12203] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.025364][T12213] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 247.025509][T12214] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 247.034505][T12214] exFAT-fs (nullb0): invalid boot record signature [ 247.037123][T12214] exFAT-fs (nullb0): failed to read boot sector [ 247.040905][T12214] exFAT-fs (nullb0): failed to recognize exfat type [ 247.087519][T12216] udc usbip-vudc.0: failed to start g1: -19 [ 247.100074][T12216] UDC core: g1: couldn't find an available UDC or it's busy [ 247.233507][T12221] netlink: 'syz.4.1810': attribute type 1 has an invalid length. [ 247.273205][T12221] 8021q: adding VLAN 0 to HW filter on device bond6 [ 247.292732][T12221] bond6: (slave ip6erspan0): making interface the new active one [ 247.296323][T12221] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 247.347095][ T5833] syz_tun: tun_net_xmit 110 [ 247.602299][T12238] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1815'. [ 247.691961][T12244] bridge_slave_1: left allmulticast mode [ 247.693934][T12244] bridge_slave_1: left promiscuous mode [ 247.696598][T12244] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.702457][T12244] bridge_slave_0: left allmulticast mode [ 247.704300][T12244] bridge_slave_0: left promiscuous mode [ 247.707466][T12244] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.751534][T12245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1817'. [ 248.087050][T12252] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 248.604994][T12268] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1825'. [ 248.610529][T12268] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1825'. [ 248.615461][T12268] binder: BINDER_SET_CONTEXT_MGR already set [ 248.619161][T12268] binder: 12267:12268 ioctl 4018620d 200000000340 returned -16 [ 248.915781][ T41] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 249.066381][ T41] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 249.069440][ T41] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 249.073320][ T41] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 249.076671][ T41] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 249.080577][ T41] usb 9-1: config 0 interface 0 has no altsetting 0 [ 249.084994][ T41] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 249.089450][ T41] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 249.092989][ T41] usb 9-1: config 0 interface 0 has no altsetting 0 [ 249.096444][ T41] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 249.099417][ T41] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 249.104419][ T41] usb 9-1: config 0 interface 0 has no altsetting 0 [ 249.108832][ T41] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 249.112595][ T41] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 249.117195][ T41] usb 9-1: config 0 interface 0 has no altsetting 0 [ 249.121749][ T41] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 249.125499][ T41] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 249.130427][ T41] usb 9-1: config 0 interface 0 has no altsetting 0 [ 249.135493][ T41] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 249.140112][ T41] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 249.144619][ T41] usb 9-1: config 0 interface 0 has no altsetting 0 [ 249.149620][ T41] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 249.153906][ T41] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 249.160535][ T41] usb 9-1: config 0 interface 0 has no altsetting 0 [ 249.163501][ T41] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 249.167491][ T41] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 249.171918][ T41] usb 9-1: config 0 interface 0 has no altsetting 0 [ 249.175964][ T41] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 249.178987][ T41] usb 9-1: Product: syz [ 249.180850][ T41] usb 9-1: Manufacturer: syz [ 249.182336][ T41] usb 9-1: SerialNumber: syz [ 249.185252][ T41] usb 9-1: config 0 descriptor?? [ 249.190658][ T41] yurex 9-1:0.0: USB YUREX device now attached to Yurex #1 [ 249.404503][ T41] usb 9-1: USB disconnect, device number 24 [ 249.413994][ T41] yurex 9-1:0.0: USB YUREX #1 now disconnected [ 249.594701][ T42] audit: type=1400 audit(1786412012.396:17464): avc: denied { execute } for pid=12277 comm="syz.1.1829" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 249.619081][T12278] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 249.674577][T12278] SELinux: policydb magic number 0x800 does not match expected magic number 0xf97cff8c [ 249.679348][T12278] SELinux: failed to load policy [ 250.061075][T12293] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 250.175440][T12299] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1835'. [ 250.657961][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1840'. [ 250.692064][T12314] xt_l2tp: invalid flags combination: 8 [ 250.745972][T12315] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2218692504 (283992640512 ns) > initial count (226097113856 ns). Using initial count to start timer. [ 250.992011][T12322] nftables ruleset with unbound chain [ 251.532369][T12341] kvm: user requested TSC rate below hardware speed [ 251.703050][T12348] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 251.716880][ T42] audit: type=1400 audit(1786412014.526:17465): avc: denied { setopt } for pid=12347 comm="syz.4.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 251.730776][T12348] x_tables: duplicate underflow at hook 2 [ 251.800362][ T5739] Bluetooth: hci4: command 0x1003 tx timeout [ 251.803231][ T5734] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 251.934564][T12355] Bluetooth: hci4: Frame reassembly failed (-90) [ 252.426517][T12358] netlink: 'syz.0.1856': attribute type 10 has an invalid length. [ 252.444132][T12358] team0: Device wg2 is of different type [ 252.531068][T12363] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 252.566344][ T42] audit: type=1400 audit(1786412015.376:17466): avc: denied { lock } for pid=12367 comm="syz.0.1859" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 253.871375][T12397] netlink: 'syz.0.1867': attribute type 7 has an invalid length. [ 253.877640][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'. [ 253.951938][T12397] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 253.955973][ T5739] Bluetooth: hci4: command 0x1003 tx timeout [ 253.961055][ T5734] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 254.832993][ T42] audit: type=1400 audit(1786412017.636:17467): avc: denied { write } for pid=12424 comm="syz.1.1876" name="/" dev="9p" ino=77093709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.966366][T12438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1880'. [ 255.099727][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 255.103765][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 255.108925][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 255.112736][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 255.116981][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 255.121700][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 255.125067][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 255.128546][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 255.153650][T12447] netlink: 'syz.4.1881': attribute type 29 has an invalid length. [ 255.156853][ T5819] syz_tun: tun_net_xmit 110 [ 255.170882][T12443] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 255.182920][ T2318] bond_slave_0: entered promiscuous mode [ 255.187093][ T2318] bond_slave_1: entered promiscuous mode [ 255.200900][T12443] netlink: 'syz.4.1881': attribute type 29 has an invalid length. [ 255.206289][T12443] netlink: 'syz.4.1881': attribute type 29 has an invalid length. [ 255.311473][T12457] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 255.355848][ T2318] syz_tun: tun_net_xmit 110 [ 255.563552][T12464] vcan0 speed is unknown, defaulting to 1000 [ 255.718070][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.720512][T12470] overlayfs: missing 'lowerdir' [ 258.294221][ T42] audit: type=1400 audit(1786412021.096:17468): avc: denied { setattr } for pid=12507 comm="syz.1.1897" name="/" dev="configfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 258.407255][T12510] futex_wake_op: syz.1.1898 tries to shift op by 32; fix this program [ 258.538966][ T42] audit: type=1400 audit(1786412021.346:17469): avc: denied { cmd } for pid=12515 comm="iou-wrk-12516" path="socket:[47067]" dev="sockfs" ino=47067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 260.805453][T12499] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.963847][ T42] audit: type=1400 audit(1786412023.766:17470): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 260.996167][T12534] tmpfs: Unknown parameter '' [ 261.480672][T12549] __nla_validate_parse: 85 callbacks suppressed [ 261.480701][T12549] netlink: 428 bytes leftover after parsing attributes in process `syz.1.1910'. [ 261.534569][ T42] audit: type=1400 audit(1786412024.336:17471): avc: denied { ioctl } for pid=12552 comm="syz.4.1911" path="/dev/ptyqd" dev="devtmpfs" ino=140 ioctlcmd=0x4b61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 261.562873][T12554] geneve3: entered promiscuous mode [ 261.606185][T12557] syzkaller1: entered promiscuous mode [ 261.615151][T12557] syzkaller1: entered allmulticast mode [ 261.781885][ T42] audit: type=1400 audit(1786412024.586:17472): avc: denied { ioctl } for pid=12569 comm="syz.0.1917" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 261.895483][T12579] gfs2: error -5 reading superblock [ 261.975360][T12583] loop4: detected capacity change from 0 to 7 [ 262.013699][T12585] ceph: No source [ 262.084305][T12588] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 262.148110][T12588] smpboot: Booting Node 0 Processor 3 APIC 0x3 [ 262.319336][T12583] Dev loop4: unable to read RDB block 7 [ 262.323584][T12583] loop4: unable to read partition table [ 262.326583][T12583] loop4: partition table beyond EOD, truncated [ 262.331677][T12583] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 262.400846][T12609] netlink: 'syz.1.1927': attribute type 1 has an invalid length. [ 262.657690][T12625] i2c i2c-1: new_device: Can't parse I2C address [ 262.721200][ T42] audit: type=1326 audit(1786412025.526:17473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.1.1933" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ff59e0d9 code=0x50000 [ 262.738768][ T42] audit: type=1326 audit(1786412025.546:17474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.1.1933" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ff59e0d9 code=0x50000 [ 262.751769][ T42] audit: type=1326 audit(1786412025.546:17475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.1.1933" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ff59e0d9 code=0x50000 [ 262.760805][ T42] audit: type=1326 audit(1786412025.546:17476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.1.1933" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ff59e0d9 code=0x50000 [ 262.768591][ T42] audit: type=1326 audit(1786412025.546:17477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.1.1933" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ff59e0d9 code=0x50000 [ 262.777344][ T42] audit: type=1326 audit(1786412025.546:17478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.1.1933" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ff59e0d9 code=0x50000 [ 262.784684][ T42] audit: type=1326 audit(1786412025.546:17479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12626 comm="syz.1.1933" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ff59e0d9 code=0x50000 [ 263.136372][T12640] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 5 [ 263.149486][T12640] netlink: 'syz.0.1938': attribute type 1 has an invalid length. [ 263.165441][T12640] bond10: option mode: invalid value (8) [ 263.190904][T12640] bond10 (unregistering): Released all slaves [ 263.392624][ T5136] pmem0: [POWERTEC] [ 263.525367][ T5734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.533025][ T5734] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.541925][ T5734] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.545155][ T5734] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.547969][ T5734] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.602511][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1941'. [ 263.904007][T12648] vcan0 speed is unknown, defaulting to 1000 [ 264.408716][ T9303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.467687][T12648] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.470740][T12648] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.473419][T12648] bridge_slave_0: entered allmulticast mode [ 264.478441][T12648] bridge_slave_0: entered promiscuous mode [ 264.483763][T12648] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.487416][T12648] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.491434][T12648] bridge_slave_1: entered allmulticast mode [ 264.500012][T12648] bridge_slave_1: entered promiscuous mode [ 264.532079][ T9303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.572427][T12648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.579204][T12648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.620464][ T9303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.632376][T12648] team0: Port device team_slave_0 added [ 264.648779][T12648] team0: Port device team_slave_1 added [ 264.708768][T12648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.712424][T12648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.724597][T12648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.762490][ T9303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.776920][T12648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.779872][T12648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.791020][T12648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.819619][T12648] hsr_slave_0: entered promiscuous mode [ 264.822181][T12648] hsr_slave_1: entered promiscuous mode [ 264.824466][T12648] debugfs: 'hsr0' already exists in 'hsr' [ 264.826671][T12648] Cannot create hsr debugfs directory [ 265.023718][T12677] set match dimension is over the limit! [ 265.269700][ T9303] gretap0 (unregistering): left promiscuous mode [ 265.298396][ T9303] bond5 (unregistering): (slave geneve4): Releasing active interface [ 265.348472][T12687] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 265.392144][ T9303] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.395423][ T9303] bond_slave_0: left promiscuous mode [ 265.399772][ T9303] bond_slave_0: left allmulticast mode [ 265.402615][ T9303] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.406112][ T9303] bond_slave_1: left promiscuous mode [ 265.407953][ T9303] bond_slave_1: left allmulticast mode [ 265.410180][ T9303] bond0 (unregistering): Released all slaves [ 265.414166][T12689] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 265.420980][ T9303] bond1 (unregistering): Released all slaves [ 265.423017][T12689] ALSA: mixer_oss: invalid index 137438 [ 265.427743][T12689] ALSA: mixer_oss: invalid OSS volume '8rÕ ±M%4Mų¢ñuõ¹M–lrÁZ<' [ 265.433683][ T9303] bond2 (unregistering): Released all slaves [ 265.443378][ T9303] bond3 (unregistering): Released all slaves [ 265.450998][ T9303] bond4 (unregistering): Released all slaves [ 265.458554][ T9303] bond5 (unregistering): Released all slaves [ 265.468647][ T5438] 8021q: adding VLAN 0 to HW filter on device eth6 [ 265.481178][T12689] bridge_slave_1: left allmulticast mode [ 265.483593][T12689] bridge_slave_1: left promiscuous mode [ 265.486544][T12689] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.638057][T12648] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.645683][ T5739] Bluetooth: hci4: command tx timeout [ 265.658180][T12648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.729894][T12648] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 265.739984][T12648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 265.743002][T12648] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 265.760160][T12648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 265.765325][T12648] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 265.771429][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 265.772302][T12648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 265.774403][T12703] netlink: 'syz.1.1949': attribute type 5 has an invalid length. [ 265.774415][T12703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1949'. [ 265.797540][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1949'. [ 265.801117][T12703] netlink: 'syz.1.1949': attribute type 5 has an invalid length. [ 265.808533][T12703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1949'. [ 265.844962][ T5438] 8021q: adding VLAN 0 to HW filter on device eth7 [ 265.895649][ T5812] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.899832][ T5812] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.918527][T12648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.932420][T12648] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.943111][T11668] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.945475][T11668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.961747][T11668] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.963986][T11668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.978424][T12720] lapbether: lapb_data_request error - 4 [ 265.988432][ T42] kauditd_printk_skb: 20355 callbacks suppressed [ 265.988445][ T42] audit: type=1400 audit(1786412028.796:37835): avc: denied { write } for pid=12718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.048697][ T5812] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.051971][ T5812] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.064852][ T42] audit: type=1400 audit(1786412028.866:37836): avc: denied { write } for pid=12723 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.113118][ T5438] 8021q: adding VLAN 0 to HW filter on device eth8 [ 266.244809][ T42] audit: type=1400 audit(1786412029.046:37837): avc: denied { write } for pid=12737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.277974][ T9303] hsr_slave_0: left promiscuous mode [ 266.288641][ T9303] hsr_slave_1: left promiscuous mode [ 266.290889][ T9303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.293715][ T9303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.319523][ T42] audit: type=1400 audit(1786412029.136:37838): avc: denied { write } for pid=12743 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.388255][ T9303] team0 (unregistering): Port device team_slave_1 removed [ 266.440196][ T9303] team0 (unregistering): Port device veth0 removed [ 266.483755][ T5438] 8021q: adding VLAN 0 to HW filter on device eth9 [ 266.577464][T12648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.704353][T12763] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 266.721289][T12763] binder: 12761:12763 ioctl 4040ae77 200000000000 returned -22 [ 266.832274][T12648] veth0_vlan: entered promiscuous mode [ 266.841224][T12648] veth1_vlan: entered promiscuous mode [ 266.852524][T12770] xt_hashlimit: size too large, truncated to 1048576 [ 266.855977][T12770] xt_hashlimit: invalid interval [ 266.859170][T12770] netlink: 'syz.0.1957': attribute type 1 has an invalid length. [ 266.881486][T12770] 8021q: adding VLAN 0 to HW filter on device bond10 [ 266.888196][T12648] veth0_macvtap: entered promiscuous mode [ 266.890488][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1957'. [ 266.892351][T12648] veth1_macvtap: entered promiscuous mode [ 266.907989][T12770] bond10: (slave geneve3): making interface the new active one [ 266.911589][T12770] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 266.919365][ T9303] IPVS: stop unused estimator thread 0... [ 266.928363][T12648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.936326][T12648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.957410][ T9306] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.962840][ T9306] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.005787][ T9306] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.012176][ T42] audit: type=1800 audit(1786412029.806:37839): pid=12746 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1954" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0 [ 267.026702][ T9306] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.072220][T11671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.075064][T11671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.099309][T11668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.103779][T11668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.113999][ T42] audit: type=1400 audit(1786412029.916:37840): avc: denied { getopt } for pid=12776 comm="syz.1.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 267.126044][ T42] audit: type=1400 audit(1786412029.916:37841): avc: denied { mounton } for pid=12648 comm="syz-executor" path="/syzkaller.dLM1ix/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 267.144050][ T42] audit: type=1400 audit(1786412029.926:37842): avc: denied { mount } for pid=12648 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 267.173244][ T42] audit: type=1400 audit(1786412029.976:37843): avc: denied { node_bind } for pid=12778 comm="syz.5.1940" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 267.216793][T12781] netlink: 'syz.0.1961': attribute type 1 has an invalid length. [ 267.230871][T12781] bond11: entered promiscuous mode [ 267.232917][T12781] 8021q: adding VLAN 0 to HW filter on device bond11 [ 267.267582][T12781] 8021q: adding VLAN 0 to HW filter on device bond11 [ 267.270980][T12781] bond11: (slave ipip0): The slave device specified does not support setting the MAC address [ 267.275080][T12781] bond11: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 267.288004][T12781] bond11: (slave ipip0): making interface the new active one [ 267.296744][T12781] ipip0: entered promiscuous mode [ 267.303788][T12781] bond11: (slave ipip0): Enslaving as an active interface with an up link [ 267.725709][ T5739] Bluetooth: hci4: command tx timeout [ 268.338849][T12816] loop3: detected capacity change from 0 to 7 [ 268.352059][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 268.355372][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 268.362008][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 268.365125][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 268.376020][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 268.379717][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 268.382793][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 268.385973][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 268.389274][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 268.392373][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 268.394927][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 268.398038][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 268.401459][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 268.404547][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 268.410013][T12816] ldm_validate_partition_table(): Disk read failed. [ 268.413101][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 268.417192][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 268.421522][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 268.425676][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 268.429211][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 268.432793][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 268.435471][T12816] Dev loop3: unable to read RDB block 0 [ 268.438691][T12816] loop3: unable to read partition table [ 268.440804][T12816] loop3: partition table beyond EOD, truncated [ 268.443323][T12816] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 268.722784][T12839] netlink: 'syz.5.1980': attribute type 1 has an invalid length. [ 268.725270][T12839] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1980'. [ 269.796027][ T5739] Bluetooth: hci4: command tx timeout [ 270.469455][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 270.590622][T12907] loop9: detected capacity change from 0 to 524287999 [ 270.594109][T12907] ldm_validate_partition_table(): Disk read failed. [ 270.598768][T12907] Dev loop9: unable to read RDB block 0 [ 270.602075][T12907] loop9: unable to read partition table [ 270.604480][T12907] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾x) failed (rc=-5) [ 270.610851][T12907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.726800][T12916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2000'. [ 271.480751][T12956] program syz.1.2013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.485031][T12956] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 271.647562][ T2318] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 271.697425][ T42] audit: type=1400 audit(1786412034.506:37844): avc: denied { mount } for pid=12961 comm="syz.1.2016" name="/" dev="configfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 271.713870][ T42] audit: type=1400 audit(1786412034.516:37845): avc: denied { unmount } for pid=5725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 271.758724][T12964] netlink: 'syz.1.2017': attribute type 4 has an invalid length. [ 271.764056][T12964] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2017'. [ 271.771172][T12964] .`: renamed from bond0 [ 271.778708][T12964] cgroup: Invalid name [ 271.785068][T12964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2017'. [ 271.806379][ T2318] usb 10-1: Using ep0 maxpacket: 8 [ 271.809753][ T2318] usb 10-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 271.817265][ T2318] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.821675][ T2318] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 271.830104][ T2318] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 271.838434][ T42] audit: type=1800 audit(1786412034.646:37846): pid=12968 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2018" name="file0" dev="tmpfs" ino=2669 res=0 errno=0 [ 271.839583][ T2318] usb 10-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 271.850271][ T2318] usb 10-1: Product: syz [ 271.853415][ T2318] usb 10-1: Manufacturer: syz [ 271.857660][T12966] input: syz0 as /devices/virtual/input/input31 [ 271.860349][ T2318] usb 10-1: SerialNumber: syz [ 271.875224][ T2318] usb 10-1: config 0 descriptor?? [ 271.883780][ T5739] Bluetooth: hci4: command tx timeout [ 271.946243][ T2318] rc_core: IR keymap rc-imon-rsc not found [ 271.948292][ T2318] Registered IR keymap rc-empty [ 271.950460][ T2318] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 271.954147][ T2318] input: iMON Station as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input32 [ 272.150658][ T2318] usb 10-1: USB disconnect, device number 2 [ 272.729133][ T42] audit: type=1400 audit(1786412035.536:37847): avc: denied { bind } for pid=12981 comm="syz.5.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 272.737806][ T42] audit: type=1400 audit(1786412035.546:37848): avc: denied { listen } for pid=12981 comm="syz.5.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 272.791946][ T42] audit: type=1400 audit(1786412035.596:37849): avc: denied { accept } for pid=12981 comm="syz.5.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 273.665483][T12999] netlink: 'syz.5.2025': attribute type 13 has an invalid length. [ 273.668204][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2025'. [ 273.675456][T12999] netlink: 'syz.5.2025': attribute type 13 has an invalid length. [ 273.678447][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2025'. [ 273.685773][ T5812] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.688926][ T5812] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.692217][ T5812] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.696528][ T5812] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.772028][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2027'. [ 273.775426][T13003] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2027'. [ 273.820211][ T42] audit: type=1400 audit(1786412036.626:37850): avc: denied { getopt } for pid=13004 comm="syz.5.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 273.829723][T13005] tmpfs: Invalid uid '0x00000000ffffffff' [ 273.833568][ T42] audit: type=1400 audit(1786412036.636:37851): avc: denied { mounton } for pid=13004 comm="syz.5.2028" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 273.837946][T13005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=47 sclass=netlink_audit_socket pid=13005 comm=syz.5.2028 [ 273.848195][T13005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=43 sclass=netlink_audit_socket pid=13005 comm=syz.5.2028 [ 274.145891][ T5811] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 274.198798][T13009] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2030'. [ 274.202644][T13009] vivid-000: ================= START STATUS ================= [ 274.209880][T13009] vivid-000: Test Pattern: 75% Colorbar [ 274.213577][T13009] vivid-000: Fill Percentage of Frame: 100 [ 274.216181][T13009] vivid-000: Horizontal Movement: Move Right Slow [ 274.218955][T13009] vivid-000: Vertical Movement: No Movement [ 274.225839][T13009] vivid-000: OSD Text Mode: All [ 274.227943][T13009] vivid-000: Show Border: false [ 274.230825][T13009] vivid-000: Show Square: false [ 274.232803][T13009] vivid-000: Sensor Flipped Horizontally: false [ 274.235245][T13009] vivid-000: Sensor Flipped Vertically: false [ 274.237958][T13009] vivid-000: Insert SAV Code in Image: false [ 274.240455][T13009] vivid-000: Insert EAV Code in Image: false [ 274.242983][T13009] vivid-000: Insert Video Guard Band: false [ 274.245803][T13009] vivid-000: Reduced Framerate: false [ 274.247648][T13009] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 274.250172][T13009] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 274.252721][T13009] vivid-000: Enable Capture Cropping: true [ 274.254672][T13009] vivid-000: Enable Capture Composing: true [ 274.256988][T13009] vivid-000: Enable Capture Scaler: true [ 274.258910][T13009] vivid-000: Timestamp Source: End of Frame [ 274.261218][T13009] vivid-000: Colorspace: sRGB [ 274.262820][T13009] vivid-000: Transfer Function: Default [ 274.264625][T13009] vivid-000: Y'CbCr Encoding: Default [ 274.266728][T13009] vivid-000: HSV Encoding: Hue 0-179 [ 274.268511][T13009] vivid-000: Quantization: Default [ 274.270164][T13009] vivid-000: Apply Alpha To Red Only: false [ 274.272124][T13009] vivid-000: Standard Aspect Ratio: 4x3 [ 274.273898][T13009] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 274.276703][T13009] vivid-000: DV Timings: 640x480p59 inactive [ 274.281054][T13009] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 274.284065][T13009] vivid-000: Maximum EDID Blocks: 2 [ 274.286435][T13009] vivid-000: Limited RGB Range (16-235): false [ 274.288922][T13009] vivid-000: Rx RGB Quantization Range: Automatic [ 274.291768][T13009] vivid-000: Power Present: 0x00000001 [ 274.294155][T13009] tpg source WxH: 320x240 (HSV) [ 274.296349][T13009] tpg field: 1 [ 274.297794][T13009] tpg crop: (0,0)/320x240 [ 274.299608][T13009] tpg compose: (0,0)/320x240 [ 274.301565][T13009] tpg colorspace: 8 [ 274.303267][T13009] tpg transfer function: 0/0 [ 274.305166][T13009] tpg HSV encoding: 0/0 [ 274.307724][T13009] tpg quantization: 0/0 [ 274.309459][T13009] tpg RGB range: 0/2 [ 274.310825][T13009] vivid-000: ================== END STATUS ================== [ 274.327123][ T5811] usb 10-1: Using ep0 maxpacket: 8 [ 274.331231][ T5811] usb 10-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 274.346742][ T5811] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.350069][ T5811] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 274.354106][ T5811] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.362203][ T5811] usb 10-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 274.365663][ T5811] usb 10-1: Product: syz [ 274.367057][ T5811] usb 10-1: Manufacturer: syz [ 274.368761][ T5811] usb 10-1: SerialNumber: syz [ 274.375779][ T5811] usb 10-1: config 0 descriptor?? [ 274.435637][ T5811] rc_core: IR keymap rc-imon-rsc not found [ 274.439944][ T5811] Registered IR keymap rc-empty [ 274.442899][ T5811] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 274.447572][ T5811] input: iMON Station as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input33 [ 274.573976][T13020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2033'. [ 274.577777][T13020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2033'. [ 274.653924][ T5811] usb 10-1: USB disconnect, device number 3 [ 274.854247][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 274.855851][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 274.894713][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2035'. [ 274.981455][T13036] bond12: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 274.987804][T13036] bond12 (unregistering): Released all slaves [ 275.140222][ T42] audit: type=1400 audit(1786412037.946:37852): avc: denied { ioctl } for pid=13040 comm="syz.1.2039" path="socket:[50347]" dev="sockfs" ino=50347 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 275.191265][T13047] MTD: Couldn't look up 'mtd0/file0': -2 [ 275.196987][T13047] syz.1.2041: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 275.233188][T13049] geneve2: entered allmulticast mode [ 275.243581][ T42] audit: type=1400 audit(1786412038.046:37853): avc: denied { bind } for pid=13052 comm="syz.0.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 275.430332][T13063] bond0: Removing last arp target with arp_interval on [ 275.510368][T13071] CUSE: info not properly terminated [ 275.618265][T13082] x_tables: duplicate underflow at hook 2 [ 275.619228][T13083] x_tables: duplicate underflow at hook 2 [ 275.686320][T13088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13088 comm=syz.5.2055 [ 275.850345][T13097] 8021q: adding VLAN 0 to HW filter on device bond12 [ 275.911215][T13106] loop4: detected capacity change from 0 to 7 [ 275.946835][T13106] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 275.948637][T13106] loop4: partition table partially beyond EOD, truncated [ 275.953993][T13106] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 275.998053][T11407] udevd[11407]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 276.501416][T13133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.614954][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 277.614972][ T42] audit: type=1400 audit(1786412040.416:37856): avc: denied { write } for pid=13146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.655644][ T42] audit: type=1400 audit(1786412040.456:37857): avc: denied { write } for pid=13149 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.811179][T13154] syzkaller0: entered promiscuous mode [ 277.813765][T13154] syzkaller0: entered allmulticast mode [ 277.862772][ T5734] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.885840][ T5734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.893143][ T5734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.897658][ T5734] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.902839][ T5734] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.955343][ T42] audit: type=1400 audit(1786412040.756:37858): avc: denied { write } for pid=13157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.012731][T13165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=13165 comm=syz.5.2077 [ 278.017338][T13165] netlink: 'syz.5.2077': attribute type 5 has an invalid length. [ 278.025455][ T42] audit: type=1400 audit(1786412040.826:37859): avc: denied { write } for pid=13164 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.098097][T13170] netlink: 'syz.5.2078': attribute type 12 has an invalid length. [ 278.145324][T13155] vcan0 speed is unknown, defaulting to 1000 [ 278.167291][ T42] audit: type=1400 audit(1786412040.976:37860): avc: denied { write } for pid=13176 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.230416][ T42] audit: type=1400 audit(1786412041.036:37861): avc: denied { write } for pid=13179 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.233461][T13181] netlink: 'syz.5.2079': attribute type 2 has an invalid length. [ 278.322920][ T42] audit: type=1400 audit(1786412041.126:37862): avc: denied { write } for pid=13189 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.380409][T13201] input: syz1 as /devices/virtual/input/input34 [ 278.389355][ T42] audit: type=1400 audit(1786412041.186:37863): avc: denied { write } for pid=13199 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.448546][T13155] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.450928][T13155] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.453236][T13155] bridge_slave_0: entered allmulticast mode [ 278.455915][T13155] bridge_slave_0: entered promiscuous mode [ 278.459383][T13155] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.462167][T13155] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.464468][T13155] bridge_slave_1: entered allmulticast mode [ 278.470035][T13155] bridge_slave_1: entered promiscuous mode [ 278.499257][T13155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.509946][T13155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.528103][ T42] audit: type=1400 audit(1786412041.336:37864): avc: denied { write } for pid=13208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.539122][T13155] team0: Port device team_slave_0 added [ 278.542273][T13155] team0: Port device team_slave_1 added [ 278.571721][T13155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.574609][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.585176][ T42] audit: type=1400 audit(1786412041.386:37865): avc: denied { write } for pid=13211 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.593708][T13155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.598868][T13155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.601080][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.609565][T13155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.633269][T13155] hsr_slave_0: entered promiscuous mode [ 278.635711][T13155] hsr_slave_1: entered promiscuous mode [ 278.638006][T13155] debugfs: 'hsr0' already exists in 'hsr' [ 278.639873][T13155] Cannot create hsr debugfs directory [ 278.787240][T13155] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 278.793440][T13155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.797296][T13155] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 278.803007][T13155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.806579][T13155] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 278.813169][T13155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.817029][T13155] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 278.821636][T13155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.839110][T13155] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.841520][T13155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.844280][T13155] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.847080][T13155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.889054][T13155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.897381][T11671] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.900273][T11671] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.908957][T13155] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.914335][T11671] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.916767][T11671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.929629][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.932639][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.264136][T13155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.415081][T13155] veth0_vlan: entered promiscuous mode [ 279.424526][T13155] veth1_vlan: entered promiscuous mode [ 279.452348][T13155] veth0_macvtap: entered promiscuous mode [ 279.466308][T13155] veth1_macvtap: entered promiscuous mode [ 279.478697][T13155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.485507][T13155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.506652][ T9306] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.539382][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.545392][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.590377][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.593752][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.606014][ T5803] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.667159][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.670454][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.955730][ T5739] Bluetooth: hci3: command tx timeout [ 280.281002][T13364] comedi comedi0: fl512: a I/O base address must be specified [ 280.289174][T13359] bond9 (unregistering): Released all slaves [ 280.338260][T13368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13368 comm=syz.0.2112 [ 280.815671][ T5833] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 280.966434][ T5833] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 280.970313][ T5833] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 280.974318][ T5833] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.978835][ T5833] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.983152][ T5833] usb 10-1: config 0 interface 0 has no altsetting 0 [ 280.987654][ T5833] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 280.991311][ T5833] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 280.995703][ T5833] usb 10-1: config 0 interface 0 has no altsetting 0 [ 280.999417][ T5833] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.003046][ T5833] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.007473][ T5833] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.011218][ T5833] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.014965][ T5833] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.019608][ T5833] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.023351][ T5833] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.027109][ T5833] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.031443][ T5833] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.034868][ T5833] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.038545][ T5833] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.042900][ T5833] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.046634][ T5833] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.050343][ T5833] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.054578][ T5833] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.058580][ T5833] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 281.062233][ T5833] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 281.066721][ T5833] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.071611][ T5833] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 281.075070][ T5833] usb 10-1: Product: syz [ 281.077105][ T5833] usb 10-1: Manufacturer: syz [ 281.079028][ T5833] usb 10-1: SerialNumber: syz [ 281.084123][ T5833] usb 10-1: config 0 descriptor?? [ 281.095139][ T5833] yurex 10-1:0.0: USB YUREX device now attached to Yurex #1 [ 281.294308][ T5833] usb 10-1: USB disconnect, device number 4 [ 281.303995][ T5833] yurex 10-1:0.0: USB YUREX #1 now disconnected [ 281.367801][T13386] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.493628][T13396] 9pnet_virtio: no channels available for device syz [ 281.743632][T13413] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 281.932057][T13423] __nla_validate_parse: 7 callbacks suppressed [ 281.932075][T13423] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2135'. [ 282.045746][ T5739] Bluetooth: hci3: command tx timeout [ 282.496367][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2147'. [ 282.500172][T13469] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2147'. [ 282.510481][T13469] geneve2: entered promiscuous mode [ 282.512900][T13469] geneve2: entered allmulticast mode [ 284.115775][ T5739] Bluetooth: hci3: command tx timeout [ 285.033066][T13513] xt_bpf: check failed: parse error [ 285.269360][T13517] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 285.318161][T13520] bond0: entered promiscuous mode [ 285.320265][T13520] bond_slave_0: entered promiscuous mode [ 285.322740][T13520] bond_slave_1: entered promiscuous mode [ 285.331421][T13520] batadv0: entered promiscuous mode [ 285.335904][T13520] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 285.342227][T13520] bond0: left promiscuous mode [ 285.344166][T13520] bond_slave_0: left promiscuous mode [ 285.346735][T13520] bond_slave_1: left promiscuous mode [ 285.349814][T13520] batadv0: left promiscuous mode [ 285.715120][T13531] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 286.205718][ T5739] Bluetooth: hci3: command tx timeout [ 286.332902][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 286.332915][ T42] audit: type=1400 audit(1786412049.136:37870): avc: denied { create } for pid=13553 comm="syz.6.2175" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 286.436813][ T42] audit: type=1400 audit(1786412049.236:37871): avc: denied { unlink } for pid=13155 comm="syz-executor" name="file0" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 286.514775][ T42] audit: type=1400 audit(1786412049.316:37872): avc: denied { unmount } for pid=13155 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 286.542352][ T42] audit: type=1400 audit(1786412049.346:37873): avc: denied { read append } for pid=13561 comm="syz.6.2177" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 286.549594][T13562] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 286.552212][ T42] audit: type=1400 audit(1786412049.346:37874): avc: denied { ioctl } for pid=13561 comm="syz.6.2177" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 286.554176][T13562] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 286.554765][T13562] vhci_hcd vhci_hcd.0: Device attached [ 286.574934][T13563] vhci_hcd: connection closed [ 286.578320][ T5803] vhci_hcd vhci_hcd.6: stop threads [ 286.582403][ T5803] vhci_hcd vhci_hcd.6: release socket [ 286.584620][ T5803] vhci_hcd vhci_hcd.6: disconnect device [ 287.491305][T13573] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 287.565789][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2181'. [ 287.570120][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2181'. [ 287.574271][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2181'. [ 287.578806][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2181'. [ 287.583348][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2181'. [ 287.587673][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2181'. [ 287.591520][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2181'. [ 287.595225][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2181'. [ 287.599075][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2181'. [ 287.602576][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2181'. [ 287.635521][T13573] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3206951851 (6413903702 ns) > initial count (411158038 ns). Using initial count to start timer. [ 288.469177][T13592] netlink: 'syz.1.2185': attribute type 2 has an invalid length. [ 288.473115][T13592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=13592 comm=syz.1.2185 [ 288.624210][T13600] kvm: kvm [13599]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 288.627881][T13600] kvm: kvm [13599]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 288.908914][ T42] audit: type=1400 audit(1786412051.716:37875): avc: granted { setsecparam } for pid=13609 comm="syz.1.2192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 288.918029][ T42] audit: type=1400 audit(1786412051.726:37876): avc: granted { setsecparam } for pid=13609 comm="syz.1.2192" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 288.926679][ T9303] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.930402][ T9303] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.933226][ T9303] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.936330][ T9303] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.778403][T13623] cgroup: release_agent respecified [ 289.863545][ T42] audit: type=1400 audit(1786412052.666:37877): avc: denied { write } for pid=13627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.910372][ T42] audit: type=1400 audit(1786412052.716:37878): avc: denied { write } for pid=13631 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.025318][ T42] audit: type=1400 audit(1786412052.826:37879): avc: denied { write } for pid=13636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.332316][T13665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13665 comm=syz.6.2202 [ 290.441290][T13675] xt_cluster: node mask cannot exceed total number of nodes [ 290.468618][T13676] tipc: Cannot configure node identity twice [ 290.470652][T13673] tipc: Cannot configure node identity twice [ 290.475135][ T9303] tipc: Subscription rejected, illegal request [ 290.555783][T13687] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 290.772513][T13706] SELinux: policydb magic number 0xfcbd20be does not match expected magic number 0xf97cff8c [ 290.777150][T13706] SELinux: failed to load policy [ 290.890740][T13716] binder: 13715:13716 ioctl c018620c 200000000240 returned -22 [ 291.839609][T13733] netlink: 'syz.6.2224': attribute type 2 has an invalid length. [ 291.844470][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 291.844487][ T42] audit: type=1326 audit(1786412054.646:37885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13732 comm="syz.6.2224" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37ea79e0d9 code=0x0 [ 292.728562][T13736] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 292.739433][T13736] pim6reg1: entered promiscuous mode [ 292.741811][T13736] pim6reg1: entered allmulticast mode [ 292.858979][T13738] program syz.6.2226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.906159][T13740] netlink: 'syz.6.2227': attribute type 1 has an invalid length. [ 292.939808][ T42] audit: type=1400 audit(1786412055.746:37886): avc: denied { write } for pid=13741 comm="syz.6.2228" name="target" dev="configfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 292.956283][ T42] audit: type=1400 audit(1786412055.766:37887): avc: denied { mounton } for pid=13741 comm="syz.6.2228" path="/69/config" dev="configfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 292.965359][ T42] audit: type=1400 audit(1786412055.766:37888): avc: denied { ioctl } for pid=13741 comm="syz.6.2228" path="/69/config" dev="configfs" ino=6 ioctlcmd=0x64c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 293.034012][T13751] __nla_validate_parse: 69 callbacks suppressed [ 293.034026][T13751] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2230'. [ 293.053805][T13751] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13751 comm=syz.6.2230 [ 293.156139][T13751] veth3: entered allmulticast mode [ 293.211376][T13751] bond1: (slave veth3): Enslaving as an active interface with an up link [ 293.240965][T13753] bond1 (unregistering): (slave veth3): Releasing backup interface [ 293.244868][T13753] bond1 (unregistering): Released all slaves [ 293.433537][ T42] audit: type=1400 audit(1786412056.236:37889): avc: denied { mount } for pid=13762 comm="syz.6.2233" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 293.447786][ T42] audit: type=1400 audit(1786412056.256:37890): avc: denied { unmount } for pid=13155 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 293.483865][T13765] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 293.544586][ T5819] IPVS: starting estimator thread 0... [ 293.546380][ T42] audit: type=1400 audit(1786412056.346:37891): avc: denied { unlink } for pid=13767 comm="syz.6.2235" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 293.646696][T13769] IPVS: using max 43 ests per chain, 103200 per kthread [ 293.875851][ T6978] usb 6-1: Failed to early initialize device [ 293.885996][ T6978] usb 6-1: USB disconnect, device number 15 [ 295.265973][ T5833] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 295.426212][ T5833] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 295.430779][ T5833] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.434348][ T5833] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 295.438173][ T5833] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.445464][ T5833] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.449207][ T5833] usb 11-1: Product: syz [ 295.450902][ T5833] usb 11-1: Manufacturer: syz [ 295.452821][ T5833] usb 11-1: SerialNumber: syz [ 295.462108][ T5833] hub 11-1:1.0: bad descriptor, ignoring hub [ 295.464078][ T5833] hub 11-1:1.0: probe with driver hub failed with error -5 [ 295.663989][ T5833] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 295.864684][ T42] audit: type=1400 audit(1786412058.666:37892): avc: denied { read write } for pid=13797 comm="syz.6.2245" name="lp0" dev="devtmpfs" ino=3239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 295.872694][ T42] audit: type=1400 audit(1786412058.666:37893): avc: denied { open } for pid=13797 comm="syz.6.2245" path="/dev/usb/lp0" dev="devtmpfs" ino=3239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 296.099264][ T5833] usb 11-1: USB disconnect, device number 2 [ 296.113506][ T5833] usblp0: removed [ 296.180558][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.185230][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.189024][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.192656][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.195507][ T5734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.410505][T13802] vcan0 speed is unknown, defaulting to 1000 [ 296.665668][ T42] audit: type=1400 audit(1786412059.466:37894): avc: denied { mount } for pid=13823 comm="syz.6.2248" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 296.679025][T13802] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.682413][T13802] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.685002][T13802] bridge_slave_0: entered allmulticast mode [ 296.698269][T13802] bridge_slave_0: entered promiscuous mode [ 296.705918][T13802] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.709093][T13802] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.712321][T13802] bridge_slave_1: entered allmulticast mode [ 296.718321][T13802] bridge_slave_1: entered promiscuous mode [ 296.739493][T13802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.747050][T13802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.764350][T13802] team0: Port device team_slave_0 added [ 296.768743][T13802] team0: Port device team_slave_1 added [ 296.782988][T13802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.785224][T13802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.793810][T13802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.799018][T13802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.801296][T13802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.812098][T13802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.848766][T13802] hsr_slave_0: entered promiscuous mode [ 296.851900][T13802] hsr_slave_1: entered promiscuous mode [ 296.854492][T13802] debugfs: 'hsr0' already exists in 'hsr' [ 296.856647][T13802] Cannot create hsr debugfs directory [ 297.019487][T13802] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 297.026356][T13802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.029777][T13802] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 297.034610][T13802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.038021][T13802] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 297.042014][T13802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.044901][T13802] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 297.050496][T13802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 297.072195][T13802] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.075259][T13802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.078416][T13802] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.081372][T13802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.139085][T13802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.147405][T11671] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.150677][T11671] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.161001][T13802] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.168961][T11671] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.171975][T11671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.178549][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.181663][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.416906][T13802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.565489][T13802] veth0_vlan: entered promiscuous mode [ 297.571632][T13802] veth1_vlan: entered promiscuous mode [ 297.588175][T13802] veth0_macvtap: entered promiscuous mode [ 297.594500][T13802] veth1_macvtap: entered promiscuous mode [ 297.603303][T13802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.609382][T13802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.689356][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.694558][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.698969][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.713392][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.717640][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.745077][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.748351][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.765753][ T9303] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.938537][T12883] ================================================================== [ 297.938860][ T5739] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.941368][T12883] BUG: KASAN: use-after-free in release_card_device+0x17d/0x1a0 [ 297.941492][T12883] Read of size 1 at addr ffff888034a04909 by task syz.5.1989/12883 [ 297.941506][T12883] [ 297.941534][T12883] CPU: 3 UID: 0 PID: 12883 Comm: syz.5.1989 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.941556][T12883] Tainted: [L]=SOFTLOCKUP [ 297.941562][T12883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.941602][T12883] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 297.941618][T12883] [ 297.941625][T12883] dump_stack_lvl+0x100/0x190 [ 297.941666][T12883] print_report+0x13d/0x4b0 [ 297.941697][T12883] ? __virt_addr_valid+0x239/0x430 [ 297.941726][T12883] ? release_card_device+0x17d/0x1a0 [ 297.941739][T12883] kasan_report+0xdf/0x1c0 [ 297.941769][T12883] ? release_card_device+0x17d/0x1a0 [ 297.941785][T12883] release_card_device+0x17d/0x1a0 [ 297.941800][T12883] ? __pfx_release_card_device+0x10/0x10 [ 297.941814][T12883] device_release+0xd2/0x270 [ 297.941845][T12883] kobject_put+0x1f7/0x640 [ 297.941930][T12883] put_device+0x1f/0x30 [ 297.941943][T12883] snd_card_file_remove+0x38f/0x560 [ 297.941960][T12883] snd_pcm_oss_release+0x217/0x300 [ 297.941976][T12883] ? __pfx_snd_disconnect_release+0x10/0x10 [ 297.941992][T12883] __fput+0x3ff/0xb50 [ 297.942012][T12883] task_work_run+0x150/0x240 [ 297.942030][T12883] ? __pfx_task_work_run+0x10/0x10 [ 297.942046][T12883] ? do_raw_spin_unlock+0x145/0x1e0 [ 297.942068][T12883] do_exit+0x951/0x2ae0 [ 297.942084][T12883] ? __pfx_do_exit+0x10/0x10 [ 297.942096][T12883] ? cgroup_update_frozen_flag+0x125/0x240 [ 297.942121][T12883] ? find_held_lock+0x2b/0x80 [ 297.942133][T12883] ? get_signal+0x184f/0x21e0 [ 297.942152][T12883] do_group_exit+0xd5/0x2a0 [ 297.942166][T12883] get_signal+0x1ec7/0x21e0 [ 297.942188][T12883] ? __pfx_get_signal+0x10/0x10 [ 297.942205][T12883] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 297.942223][T12883] arch_do_signal_or_restart+0x91/0x7e0 [ 297.942241][T12883] ? get_timespec64+0x147/0x240 [ 297.942258][T12883] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 297.942276][T12883] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 297.942295][T12883] exit_to_user_mode_loop+0x139/0x6f0 [ 297.942315][T12883] ? rcu_is_watching+0x12/0xc0 [ 297.942337][T12883] do_syscall_64+0x666/0x870 [ 297.942357][T12883] ? clear_bhb_loop+0x70/0xc0 [ 297.942383][T12883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.942399][T12883] RIP: 223b:0x45f4ed66ca502633 [ 297.942413][T12883] Code: Unable to access opcode bytes at 0x45f4ed66ca502609. [ 297.942439][T12883] RSP: 009b:1400315de38f41e2 EFLAGS: 00054383 ORIG_RAX: c54aa88b54d697bc [ 297.942456][T12883] RAX: 6d277df1e1c9bac1 RBX: e803db949198633e RCX: e0ce5e68c9c17fdd [ 297.942467][T12883] RDX: 073131dfc724c904 RSI: ecc013b43c14a2c7 RDI: ea8725a2da35febb [ 297.942477][T12883] RBP: 74bb3908f5988e83 R08: 9b781de741bdee1d R09: eb39d0ca28299eba [ 297.942487][T12883] R10: 7b351f4b2107f651 R11: 74c14aaded42214f R12: ce1fea9ef40b31e3 [ 297.942497][T12883] R13: e617d4118e7b836a R14: e9930f01b11f1fa5 R15: 26f77ff333a942e7 [ 297.942513][T12883] [ 297.942518][T12883] [ 297.942524][T12883] The buggy address belongs to the physical page: [ 297.942531][T12883] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34a04 [ 297.942553][T12883] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 297.942573][T12883] raw: 00fff00000000000 ffffea000191de08 ffff88806a641500 0000000000000000 [ 297.942595][T12883] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 297.942606][T12883] page dumped because: kasan: bad access detected [ 297.942616][T12883] page_owner tracks the page as freed [ 297.942622][T12883] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 16213566905, free_ts 297924809983 [ 297.942659][T12883] post_alloc_hook+0xfd/0x120 [ 297.942678][T12883] get_page_from_freelist+0xf48/0x3530 [ 297.942695][T12883] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 297.964695][ T5739] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.965657][T12883] alloc_pages_mpol+0x1fb/0x540 [ 297.965687][T12883] ___kmalloc_large_node+0xe5/0x120 [ 297.965710][T12883] __kmalloc_large_node_noprof+0x1c/0x70 [ 297.965735][T12883] __kmalloc_node_track_caller_noprof+0x5ac/0x830 [ 297.974723][ T5739] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.976324][T12883] __devres_alloc_node+0x6e/0x1e0 [ 297.976356][T12883] snd_devm_card_new+0x9d/0x190 [ 297.976380][T12883] loopback_probe+0x140/0x11a0 [ 297.976416][T12883] platform_probe+0x106/0x1d0 [ 297.976431][T12883] really_probe+0x241/0xa60 [ 297.976449][T12883] __driver_probe_device+0x20e/0x450 [ 297.976468][T12883] driver_probe_device+0x4a/0x140 [ 297.976490][T12883] __device_attach_driver+0x1df/0x320 [ 297.980020][ T5739] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.980431][T12883] bus_for_each_drv+0x159/0x1e0 [ 297.982851][ T5739] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.983715][T12883] page last free pid 13726 tgid 13725 stack trace: [ 298.110145][T12883] __free_frozen_pages+0x79f/0x1090 [ 298.111800][T12883] release_nodes+0xc3/0x120 [ 298.113257][T12883] devres_release_all+0x112/0x180 [ 298.114868][T12883] device_unbind_cleanup+0x81/0x270 [ 298.116524][T12883] device_release_driver_internal+0x4c4/0x620 [ 298.118448][T12883] unbind_store+0xf8/0x110 [ 298.119870][T12883] drv_attr_store+0x74/0xb0 [ 298.121334][T12883] sysfs_kf_write+0xf2/0x150 [ 298.122831][T12883] kernfs_fop_write_iter+0x3e0/0x5f0 [ 298.124523][T12883] vfs_write+0x6ac/0x1050 [ 298.125895][T12883] ksys_write+0x12a/0x250 [ 298.127265][T12883] do_syscall_64+0x115/0x870 [ 298.128720][T12883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.130554][T12883] [ 298.131276][T12883] Memory state around the buggy address: [ 298.132961][T12883] ffff888034a04800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 298.135464][T12883] ffff888034a04880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 298.137966][T12883] >ffff888034a04900: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 298.140450][T12883] ^ [ 298.141815][T12883] ffff888034a04980: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 298.144296][T12883] ffff888034a04a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 298.146790][T12883] ================================================================== [ 298.149897][T12883] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 298.152144][T12883] CPU: 2 UID: 0 PID: 12883 Comm: syz.5.1989 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.155474][T12883] Tainted: [L]=SOFTLOCKUP [ 298.156844][T12883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.159957][T12883] Call Trace: [ 298.161033][T12883] [ 298.161989][T12883] dump_stack_lvl+0x100/0x190 [ 298.163777][T12883] vpanic+0x552/0x970 [ 298.165051][T12883] ? __pfx_vpanic+0x10/0x10 [ 298.166518][T12883] ? rcu_is_watching+0x12/0xc0 [ 298.168065][T12883] ? release_card_device+0x17d/0x1a0 [ 298.169771][T12883] panic+0xd1/0xe0 [ 298.170968][T12883] ? __pfx_panic+0x10/0x10 [ 298.172396][T12883] ? release_card_device+0x17d/0x1a0 [ 298.174070][T12883] ? preempt_schedule_common+0x42/0xc0 [ 298.175804][T12883] ? check_panic_on_warn+0x1f/0x90 [ 298.177423][T12883] check_panic_on_warn.cold+0x19/0x34 [ 298.179138][T12883] end_report.part.0+0x3a/0x90 [ 298.180676][T12883] kasan_report.cold+0xe/0x18 [ 298.182200][T12883] ? release_card_device+0x17d/0x1a0 [ 298.183902][T12883] release_card_device+0x17d/0x1a0 [ 298.185552][T12883] ? __pfx_release_card_device+0x10/0x10 [ 298.187317][T12883] device_release+0xd2/0x270 [ 298.188794][T12883] kobject_put+0x1f7/0x640 [ 298.190290][T12883] put_device+0x1f/0x30 [ 298.191661][T12883] snd_card_file_remove+0x38f/0x560 [ 298.193287][T12883] snd_pcm_oss_release+0x217/0x300 [ 298.194989][T12883] ? __pfx_snd_disconnect_release+0x10/0x10 [ 298.196967][T12883] __fput+0x3ff/0xb50 [ 298.198249][T12883] task_work_run+0x150/0x240 [ 298.199715][T12883] ? __pfx_task_work_run+0x10/0x10 [ 298.201327][T12883] ? do_raw_spin_unlock+0x145/0x1e0 [ 298.202988][T12883] do_exit+0x951/0x2ae0 [ 298.204309][T12883] ? __pfx_do_exit+0x10/0x10 [ 298.205706][T12883] ? cgroup_update_frozen_flag+0x125/0x240 [ 298.207498][T12883] ? find_held_lock+0x2b/0x80 [ 298.209011][T12883] ? get_signal+0x184f/0x21e0 [ 298.210526][T12883] do_group_exit+0xd5/0x2a0 [ 298.211976][T12883] get_signal+0x1ec7/0x21e0 [ 298.213419][T12883] ? __pfx_get_signal+0x10/0x10 [ 298.214977][T12883] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 298.216695][T12883] arch_do_signal_or_restart+0x91/0x7e0 [ 298.218432][T12883] ? get_timespec64+0x147/0x240 [ 298.219976][T12883] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 298.221974][T12883] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 298.223869][T12883] exit_to_user_mode_loop+0x139/0x6f0 [ 298.225488][T12883] ? rcu_is_watching+0x12/0xc0 [ 298.227007][T12883] do_syscall_64+0x666/0x870 [ 298.228426][T12883] ? clear_bhb_loop+0x70/0xc0 [ 298.229865][T12883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.231712][T12883] RIP: 223b:0x45f4ed66ca502633 [ 298.233248][T12883] Code: Unable to access opcode bytes at 0x45f4ed66ca502609. [ 298.235501][T12883] RSP: 009b:1400315de38f41e2 EFLAGS: 00054383 ORIG_RAX: c54aa88b54d697bc [ 298.237986][T12883] RAX: 6d277df1e1c9bac1 RBX: e803db949198633e RCX: e0ce5e68c9c17fdd [ 298.240814][T12883] RDX: 073131dfc724c904 RSI: ecc013b43c14a2c7 RDI: ea8725a2da35febb [ 298.243538][T12883] RBP: 74bb3908f5988e83 R08: 9b781de741bdee1d R09: eb39d0ca28299eba [ 298.246365][T12883] R10: 7b351f4b2107f651 R11: 74c14aaded42214f R12: ce1fea9ef40b31e3 [ 298.249033][T12883] R13: e617d4118e7b836a R14: e9930f01b11f1fa5 R15: 26f77ff333a942e7 [ 298.251682][T12883] [ 298.253496][T12883] Kernel Offset: disabled [ 298.255015][T12883] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:30:03 Registers: info registers vcpu 0 CPU#0 RAX=0000000000010003 RBX=0000000000000003 RCX=ffffffff820cff60 RDX=0000000000000003 RSI=000000000000001d RDI=ffff888033998000 RBP=ffffffff8bd65780 RSP=ffffc90000007b00 R8 =0000000000000001 R9 =000000000000001d R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000005 R14=0000000000000001 R15=ffff88804061c010 RIP=ffffffff8bbe0460 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6e07bf5ff8 CR3=000000002e107000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000fffffdff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9c6f1d7b 00007ffe9c6f1d7b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9c6f2280 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9c6f2280 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3120534f4942202c 2939303032202c39 484349202b203533 5128204350206472 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 55544d2065687420 676e697474655320 2e65636e616d726f 6672657020656874 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e6d656c626f7270 206568742065766c 6f7320646c756f77 2032333531206f74 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2055544d20656874 20676e6974746553 202e65636e616d72 6f66726570206568 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7420746361706d69 20646c756f632068 6369687720327265 79616c206e6f2064 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffff88801e681b80 RCX=1ffff11003cd0463 RDX=1ffffffff2243837 RSI=ffffffff8202eb52 RDI=ffffffff9121c1b8 RBP=1ffff92000685fa0 RSP=ffffc9000342fcf0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff9121c180 R13=0000000000000001 R14=ffff88801e681b88 R15=0000000000000004 RIP=ffffffff8202eb8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4f23e50c38 CR3=000000003e074000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003d8 0000000000005c28 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001d5b1f RBX=ffff88801eed4a80 RCX=ffffffff8bbad335 RDX=0000000000000000 RSI=ffffffff8e1a9419 RDI=ffffffff8c400480 RBP=ffffed1003dda950 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d4c678d R10=ffff88806a633c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bbab8ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7bf67f5b00 CR3=000000002258f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000009000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa815b5d020 00007fa814ff25c0 00007fa814ff25d0 00007fa814ff2610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa814ff25f8 00007fa814ff25c8 00007fa814ff2600 00007fa814ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a35005 RDI=ffffffff9b9f7ec0 RBP=ffffffff9b9f7e80 RSP=ffffc90006c87288 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000032 R14=ffffffff9b6ea1f1 R15=ffffffff85a34fa0 RIP=ffffffff85a3502f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa814e554b0 CR3=000000000e994000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000009000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa815b5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa814ff2600 00007fa814ff25e0 00007fa814ff25e8 00007fa814ff2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa815b5d020 00007fa814ff25c0 00007fa814ff25d0 00007fa814ff2610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa814ff25f8 00007fa814ff25c8 00007fa814ff2600 00007fa814ff25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000