last executing test programs: 49.260154325s ago: executing program 3 (id=135): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) fremovexattr(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x6, 0x1, 0x2}}, 0x30) (async) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x6, 0x1, 0x2}}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000000)={{0xf000, 0x5000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x9, 0xd, 0x4, 0x0, 0x81, 0x8, 0x1}, {0x8000000, 0x0, 0xa, 0x7, 0x2, 0x1, 0xa, 0xf, 0x8, 0x6, 0x3}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0x88, 0x0, 0x1, 0x6, 0x4, 0x5}, {0x100002, 0x1, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0xe, 0x1, 0x15, 0x4, 0x0, 0x4, 0xa, 0x86, 0xb, 0x2}, {0xeeee8000, 0xd000, 0xa, 0x4, 0x7, 0x12, 0x1d, 0x47, 0x30, 0x6, 0x8, 0xe1}, {0x4000, 0x8080000, 0xc, 0x44, 0xdd, 0x2a, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0xb}, {0x2, 0x5}, 0x80000035, 0x0, 0x2000, 0x40, 0x4000000004, 0x7000, 0x3000, [0x40000000000005, 0x8001, 0x8]}) (async) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000000)={{0xf000, 0x5000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x9, 0xd, 0x4, 0x0, 0x81, 0x8, 0x1}, {0x8000000, 0x0, 0xa, 0x7, 0x2, 0x1, 0xa, 0xf, 0x8, 0x6, 0x3}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0x88, 0x0, 0x1, 0x6, 0x4, 0x5}, {0x100002, 0x1, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0xe, 0x1, 0x15, 0x4, 0x0, 0x4, 0xa, 0x86, 0xb, 0x2}, {0xeeee8000, 0xd000, 0xa, 0x4, 0x7, 0x12, 0x1d, 0x47, 0x30, 0x6, 0x8, 0xe1}, {0x4000, 0x8080000, 0xc, 0x44, 0xdd, 0x2a, 0x2, 0x4, 0x3, 0x8, 0x5, 0xce}, {0x4, 0xb}, {0x2, 0x5}, 0x80000035, 0x0, 0x2000, 0x40, 0x4000000004, 0x7000, 0x3000, [0x40000000000005, 0x8001, 0x8]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x18) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$COMEDI_UNLOCK(r0, 0x6406) (async) ioctl$COMEDI_UNLOCK(r0, 0x6406) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000c00)={"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"}) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000200)={"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"}) (async) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000200)={"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"}) 48.92965459s ago: executing program 3 (id=144): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x80184132, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020601010000000000000000010000000c0007800500150009000000050005000a0000000900020073797a3000000000050001000700000005000100060000000c000300686173683a697000677e9847ee3ffbc3083dff6c059b6351ab78e0cd977a16bc2fcac8ec66d85bc70fb2a2b2"], 0x50}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4008000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82) r3 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x10000) ioctl(r1, 0x515a, &(0x7f0000000180)="9504cc7079d8d43d892e8b9eea6d1b37f57ad70d9f44291e72e242b634275de9ec2461b071ae5049b2b5aa95a2ba8b3684e156d1dba3b4f7c4bbaadee0e39ea5128dc019f1d6e6d03c99fb15e3793507dbae49502d5d8183af26425084ca55812a6fef60d780a568646bbd811d03781aeae3bfb182b438d3aaff6d1458d6b464a1560c91278ca1d257e6accd67bce031cc80e96c60260139cfca05578da83ea6985846692e14027256f137c8e6efa9c1a073862f383d32a7f956a874") ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000400)={0x0, 0x3, 0x0, &(0x7f0000000040)=[{}, {}, {}], 0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, &(0x7f0000000300)=[{}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}]}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@remote}, {@in=@multicast2, 0x0, 0x32}, @in=@rand_addr=0x64010102, {0x0, 0x7f}, {}, {0x0, 0x4}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_aead={0x4c, 0x12, {{'aegis128-generic\x00'}, 0x0, 0x180}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4001}, 0x1000c080) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000480)={0x0, 0xefff, 0x1, [0x4]}, 0xa) open_by_handle_at(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000002"], 0x0) 48.92874143s ago: executing program 3 (id=146): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080), 0x4) flock(0xffffffffffffffff, 0x2) fchdir(0xffffffffffffffff) flock(0xffffffffffffffff, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3a, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2193, 0xd000}, [@IFLA_EVENT={0x8, 0x2c, 0x7fff}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4040) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01064c1, &(0x7f0000000100)={r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x80, 0x7f, 0x7fff0002}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r6, &(0x7f00000000c0)=""/58, 0x3a) getdents64(r6, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 48.850052577s ago: executing program 3 (id=147): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=virtio,access=', @ANYBLOB='3']) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020400) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x40894) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f000000cffc)=0x4, 0x1, 0x1, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e) (async) read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e) r2 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x198) (async) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x198) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x1958, 0x30, 0x1, 0x203, 0x0, {}, [{0x1944, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x9, 0x10000000, 0x0, 0x20}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}, @m_police={0x1898, 0x19, 0x0, 0x0, {{0xb}, {0x86c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x80, 0x10001, 0x101, 0xe9e, 0xed, 0xffff403a, 0x6, 0x9, 0x2, 0x2, 0x4, 0x7fffffff, 0x6, 0x3, 0x8, 0xc, 0x1, 0x3, 0x1000, 0x81, 0x6, 0x10000, 0x80, 0xfcd9, 0x7, 0x922, 0x3, 0x4, 0x0, 0x2, 0xeb5, 0x8, 0x8, 0x1, 0x4f0, 0x5, 0x9, 0x401, 0xfffffff8, 0x4, 0x2, 0x13df, 0x9, 0x8000, 0x0, 0x1000, 0xff, 0x2, 0xfffffe00, 0x6, 0x5, 0x3, 0x7, 0x1, 0x3, 0x7, 0x6, 0x0, 0x5, 0x8, 0x3, 0x5, 0x800, 0x0, 0x7, 0x7, 0x8001, 0x2b68d7e2, 0x2, 0x1, 0xfff, 0x9, 0x611, 0x1, 0x3ff, 0x1, 0x1ff, 0x7f, 0xfffffb8b, 0x2, 0x6, 0x6, 0x1, 0xd, 0x150, 0x5, 0xc0, 0x8000, 0x9, 0x35, 0x9860, 0x0, 0x7, 0xc, 0x711, 0x0, 0xc3, 0xb9, 0x8, 0x9, 0x8000, 0x9, 0x8, 0x5, 0x4, 0x3, 0x3, 0x0, 0x4, 0x58, 0x400, 0x8, 0xfffffff8, 0x3ff, 0x10001, 0xb, 0x400, 0x9, 0x0, 0x1, 0x8, 0x3, 0x9e51, 0x30, 0x140000, 0x10000, 0x9, 0x6, 0x8001, 0x400, 0x7, 0xffff, 0x8a52, 0x8001, 0x60cceeff, 0xeb7, 0x0, 0xda16, 0x2, 0x4, 0x1, 0xffffff8b, 0x3, 0x5, 0x4, 0x282, 0x7, 0x10001, 0x1, 0x40, 0x0, 0x400, 0x5, 0x3, 0x2, 0x8, 0x4e84, 0x6, 0xfffffff8, 0x91, 0xfffffffa, 0x1c, 0x22, 0x6, 0x3d000000, 0x8, 0x4, 0x1, 0x6, 0x6, 0x8, 0x7, 0xc9f, 0x6, 0x7, 0x4000000, 0x5, 0x5, 0x663, 0x3, 0x6, 0x0, 0x30, 0x8, 0xca5, 0x0, 0xab4, 0x1, 0xb513, 0xff, 0x44e, 0xbfe, 0x10000, 0x80, 0xfffffffa, 0x559d93b2, 0x9, 0x9, 0xb2, 0x2, 0x7, 0x9, 0xb67f, 0x3, 0x4, 0x80000000, 0x6, 0x7, 0x0, 0x2, 0x7, 0x2, 0x1, 0xfff, 0x4d, 0xa, 0x3, 0x7ff, 0x7, 0xbd04955f, 0x0, 0x1, 0x3, 0x4, 0x7f, 0xd, 0x96a, 0x80000000, 0x7b8, 0x8, 0xe, 0x4, 0x800, 0x7fffffff, 0x9, 0x57, 0x8001, 0x277a, 0x5, 0xf, 0x3, 0xc, 0x1000, 0xff, 0x4, 0x3, 0x2, 0x4, 0x3, 0xfffffff9, 0xffff, 0x4, 0x7, 0xff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000004, 0x5, 0xfffffff4, 0x7f, {0x7, 0x2, 0x1000, 0x8, 0xb6, 0x1}, {0x1, 0x2, 0x80, 0x0, 0x7ff, 0x5}, 0x964}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x3, 0x8, 0x10001, 0xffffffff, 0x7ff, 0x5, 0x6, 0x10, 0x7, 0x3, 0x800, 0x352, 0x3, 0xe, 0x59, 0x8, 0x3, 0x2, 0x2, 0x1, 0x2, 0x9, 0x6e1fc9e0, 0x7, 0x2, 0x4, 0x1, 0x5, 0x7, 0x2, 0x0, 0x400, 0xd, 0x5, 0x192, 0xa, 0xffff, 0x6, 0x556, 0x8, 0xc, 0x1, 0x3, 0x6, 0xd, 0xffff, 0x5, 0xd, 0x1d96, 0x5, 0x4, 0x5, 0x0, 0x2, 0x5, 0xc2e, 0xfffffc00, 0x9, 0x1, 0x7f, 0x5, 0x100, 0x1d, 0xffffffff, 0x0, 0x6, 0x6, 0x3, 0x8, 0x80000001, 0x4, 0x9, 0x5, 0x2fd06a46, 0x2, 0x5, 0x9, 0x7ff, 0x538ec9c2, 0xff, 0xe, 0xf, 0x7, 0xc9, 0x40, 0x9, 0xffffffff, 0x9, 0x6, 0x2, 0x9, 0x0, 0x3, 0xffff, 0x100, 0x0, 0xd, 0x8, 0x40, 0x7ff, 0x8, 0x101, 0x1000, 0x2, 0x1, 0xc296, 0x1, 0x6, 0x7ffe, 0x2, 0x131, 0x10000, 0x6, 0x3, 0x8, 0x4, 0xdd9, 0x0, 0x6, 0x7fc00000, 0x1bd, 0x4, 0x3, 0x7, 0x9, 0x6, 0x8, 0x1000, 0x2, 0x19, 0x8, 0x4, 0x6, 0x2b, 0x4, 0x80, 0xae7, 0x5, 0xf2, 0x5, 0x3ff, 0x9, 0x4, 0xf7d, 0x5, 0xffffffff, 0x0, 0x1, 0xfffffe01, 0x9, 0x100, 0x8, 0xa0c, 0x7, 0x8, 0x2, 0x9, 0x1, 0x7eac, 0x1, 0xfffffff4, 0xdc, 0x100, 0x81, 0x9, 0x10000, 0xb, 0x3, 0x1d, 0x9, 0x81, 0xf55d, 0x7, 0x5, 0x0, 0x7fffffff, 0x1, 0x9, 0x5, 0x7ff, 0xfff, 0x2, 0x9, 0x6, 0x10001, 0x6, 0x101, 0x6, 0x7, 0x4e, 0x8, 0x7, 0x2, 0x0, 0xb79, 0x1, 0x9, 0x9, 0x7, 0x400, 0x4, 0x8, 0xe5b1, 0x4, 0x7, 0x4, 0x9, 0x1, 0x7, 0x8, 0x9, 0x6, 0x20, 0x216, 0x7fffffff, 0x0, 0x6, 0x7fffffff, 0x401, 0xfd4, 0xde25, 0x8, 0x2, 0xffff, 0xfffffff8, 0x4, 0x1, 0x4, 0x7, 0x1ff, 0x1, 0xffffffff, 0x29e, 0x36, 0x40, 0x1, 0x1000004, 0x8f, 0x4, 0x10000, 0x8c92, 0x6, 0x58, 0x200, 0x3, 0x9, 0x800, 0x100, 0x8, 0x4, 0x4, 0xe, 0x7, 0xbb43, 0x10000]}]]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x5c, 0x1e, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10000, 0x800, 0x3, 0xcc84, 0x73}, 0x2}}]}, {0x14, 0x6, "8ab0a01d373dbc0970ebc1c54c69f519"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1958}}, 0x0) 48.780444953s ago: executing program 3 (id=149): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x14, r2, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_emit_ethernet(0xffffffffffffff2f, &(0x7f0000000000)={@local, @remote, @void, {@arp={0x806, @generic={0x18, 0xf6, 0x6, 0x0, 0x1, @empty, "ac270dfa0d", @random="2ec3d91bb396", "415188ff7f"}}}}, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x46100) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x0) close(r6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x250, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x220, 0x8, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x10000, @mcast1, 0x400}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x138, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3ff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x250}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 48.450674609s ago: executing program 3 (id=156): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x9, 0x4, 0x5, 0x5, 0x9, 0x0, [{0x7, 0xf8fd, 0x40, '\x00', 0x1006}, {0x0, 0xd46, 0x10000, '\x00', 0x6606}, {0xb2, 0x5, 0x10001, '\x00', 0x2405}, {0x2, 0x1, 0x7, '\x00', 0x1248}, {0x8a1, 0x2, 0x809, '\x00', 0x4}, {0x3, 0x1, 0x1000, '\x00', 0x1c48}, {0x683, 0x2, 0x0, '\x00', 0x2}, {0xd, 0x5, 0xf6, '\x00', 0xd02}, {0x101, 0x7, 0x1ff, '\x00', 0x1}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r2, &(0x7f00000000c0)=""/59, 0x3b, 0x22, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x40000000) 48.407328917s ago: executing program 32 (id=156): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x9, 0x4, 0x5, 0x5, 0x9, 0x0, [{0x7, 0xf8fd, 0x40, '\x00', 0x1006}, {0x0, 0xd46, 0x10000, '\x00', 0x6606}, {0xb2, 0x5, 0x10001, '\x00', 0x2405}, {0x2, 0x1, 0x7, '\x00', 0x1248}, {0x8a1, 0x2, 0x809, '\x00', 0x4}, {0x3, 0x1, 0x1000, '\x00', 0x1c48}, {0x683, 0x2, 0x0, '\x00', 0x2}, {0xd, 0x5, 0xf6, '\x00', 0xd02}, {0x101, 0x7, 0x1ff, '\x00', 0x1}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r2, &(0x7f00000000c0)=""/59, 0x3b, 0x22, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x40000000) 39.860750386s ago: executing program 4 (id=330): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) (async) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) close(r1) (async, rerun: 64) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/pid\x00') (rerun: 64) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2400, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) (async) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r4]) (async) ioctl$KVM_GET_VCPU_EVENTS(r5, 0xc048aeca, &(0x7f0000000080)) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) read(r6, &(0x7f0000000080)=""/159, 0x9f) 39.590319065s ago: executing program 4 (id=332): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002140)='dctcp\x00', 0x6) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1201, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000280)={0x578, 0x1000, 0x550, 0x4b0, 0x1f, 0x7, 0x2f, 0x2, {0x7, 0x1}, {0x3, 0x4c, 0x1}, {0x3, 0x50f}, {0x5dd7, 0x6, 0x1}, 0xdcd3290eda76bed5, 0x0, 0xb58, 0x1, 0x1, 0x6, 0x7, 0x4c67, 0x467, 0x8, 0xf7b6, 0x3, 0x2b, 0x1, 0x3, 0x3}) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$tun(r2, &(0x7f0000000600)=ANY=[], 0x32) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000000)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x4, 0x0, 0x0, 0xd5, &(0x7f0000000340)="66b7afbcb7bb169008ea96e0df400438aee51122d9d00366272d9977a86691cc1a339a5bb58cc45c36bcf986e54a64d6c00068ae6a7e04c94b6d84c1632807c95c9bfce06eca8ce76f7a9f0e528b28856466e5729520a6493c9ea186ab1ed123ba3eaac6e580b612cae1715c4cfc458e43ec2d45764a5baed206d91bd3bb51b2e10c21df2fc106a43d2c414c8a51b65c416d7672e4dadb4a53d01c0bd83e4876c5e1912594c4f8b11165dd362704a4eee0f6ca99e74d42ddcbc06f60f8c15c3f2a45291d69e3fc2a532a6f3271c6c7e982119839ce", 0x1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xd1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x504}, 0x1c) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd2d, 0x8000}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x50) 39.589727064s ago: executing program 4 (id=333): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x20}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xedf33ee40ad98cc9, &(0x7f0000000040)={@private, @multicast1, 0x0}, &(0x7f0000000080)=0xc) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000001c0)={0x8000000000000000, 0x5, 0x1, 0x0, 0x0, [{{r0}, 0xffffffffffffff5f}]}) r3 = dup3(r0, r1, 0x80000) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000003c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, r2}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1b, &(0x7f00000005c0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9121, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, @exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', r2, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r6, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) 39.498640765s ago: executing program 4 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40080333}, &(0x7f0000000240), &(0x7f0000000280)) (async) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40080333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f004, 0x4}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = creat(&(0x7f0000000080)='./file0\x00', 0xac) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40405515, &(0x7f00000001c0)={0x7, 0x0, 0x15, 0x7, 'syz1\x00', 0x2}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40405515, &(0x7f00000001c0)={0x7, 0x0, 0x15, 0x7, 'syz1\x00', 0x2}) write$P9_RVERSION(r8, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r9, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) (async) write$FUSE_INIT(r9, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2c7766646e6f3d7efb381fed295d00e97f21f51f00fa32f942fc3ae32caa47c0b1e734d102bbb51bbecfcebe48074c83bd229170d051ed808e3272c2b94541a0f17424b1203a0d439115591b147b1b812d3a914e04821cef202c5ac4b66514ae18f0a592774fbc3fc3edadbc2592fb1cbdd3121b10e2c87b4819c149d1556337a5a54b72b493c0f6760703461ac1033529c9888c185d7a7a7133c724f20755d6162f6cb283ede8f0f4df2343771540ccb17cdaaacb634acab9", @ANYRESHEX=r9, @ANYBLOB=',k']) stat(&(0x7f0000000340)='./file0\x00', 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=[0xffffffffffffffff], 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xc4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x50, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x48, 0x2, "39843dd44563878d5bdb29eaaa27b1173ab8d3fc7fa701500211615643ab927b7d8b49ef6ff37002275ada13cef4f876872aeb42ec3d1b0bf7df2b803329acc5966fb40d"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0xc4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x50, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x48, 0x2, "39843dd44563878d5bdb29eaaa27b1173ab8d3fc7fa701500211615643ab927b7d8b49ef6ff37002275ada13cef4f876872aeb42ec3d1b0bf7df2b803329acc5966fb40d"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r11, r11) (async) setpgid(r11, r11) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') setpgid(0x0, r11) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200840d, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200840d, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000009cc0), 0x101082, 0x0) 39.44847616s ago: executing program 4 (id=336): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = socket(0x1a, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x80000}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0xd8, 0x1, 0x0, 0x2, r3}, &(0x7f00000001c0)=0x10) listen(r0, 0x0) listen(r0, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000003980)={0x0, @vsock={0x28, 0x0, 0xffffffff, @hyper}, @l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, @ax25={0x3, @default, 0x2}, 0x7, 0x0, 0x0, 0x0, 0xb, 0x0, 0x200000009, 0x2, 0x9}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100010000006156730b92f3000008000300", @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 39.239059454s ago: executing program 4 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x20807}, [@IFLA_MAP={0x24, 0xe, {0x7, 0xf, 0x9, 0xb36, 0xff, 0x1a}}, @IFLA_PHYS_PORT_ID={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x3) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') stat(&(0x7f0000000480)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000001c0)={0x7, [0xc72e, 0x9, 0x5, 0x8, 0x19, 0x5, 0x10]}, 0x12) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x6}, {0xfe, 0x1}}}}, 0x9) rt_sigsuspend(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x98, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x41841}, 0x400080a) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 39.163171734s ago: executing program 33 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x20807}, [@IFLA_MAP={0x24, 0xe, {0x7, 0xf, 0x9, 0xb36, 0xff, 0x1a}}, @IFLA_PHYS_PORT_ID={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x3) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') stat(&(0x7f0000000480)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000001c0)={0x7, [0xc72e, 0x9, 0x5, 0x8, 0x19, 0x5, 0x10]}, 0x12) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x6}, {0xfe, 0x1}}}}, 0x9) rt_sigsuspend(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x98, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x41841}, 0x400080a) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 22.819594507s ago: executing program 5 (id=684): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90e46}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x4000090) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x7c, 0x68, 0x8, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x1, 0x0, 0x8}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00'}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0x4c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x6}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7dc}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xffff8000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8000}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xa7}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44001}, 0x1) (rerun: 64) 22.730576656s ago: executing program 5 (id=685): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x18, 0x140b, 0x321, 0x70bd2c, 0x25cfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xc0080f4}, 0x840) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x10012, r1, 0x4000) 22.729191504s ago: executing program 5 (id=686): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000080)={0x2, r2, 0xffffffff, 0x0, 0x4, 0x800008, 0x0, 0x3, 0x4000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa0400aa03aae6590000acbcf288c8000062e81918c3437a44ad8f000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50806071907880011312c64385d047cdec64401819d5615b270f1e1020fe00000000000000000700000005000000000913bc0d00000005dc00"/68], 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40010041) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r9, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000002340)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0xc064) sendmsg$inet(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r7, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7a}, 0x10141) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x894a, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000000100)={0xf1e5b317, 0x800000, 0x0, 0xfffffffc, 0x40001000}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfc}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0x5}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 22.539673125s ago: executing program 5 (id=687): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000006c0), 0x80000, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000700)={0x80, 0x2000, 0x2000, 0x478b27d189243d75, 0x6, 0x7, 0x10, 0x1, {0x40, 0x2}, {0x0, 0xc, 0x1}, {0x0, 0x6, 0x1}, {0x8, 0x400}, 0x1, 0x1, 0xcf, 0x1ff, 0x0, 0x4, 0x5, 0x200, 0xa740000, 0x10000, 0x1, 0x6, 0x21, 0x100, 0x3, 0x3}) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)={0x400, 0x84, 0x1c}, 0x18) fchmodat(r1, &(0x7f00000001c0)='./file0\x00', 0x191) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x215cc39, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x1080400, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 22.469307342s ago: executing program 5 (id=688): creat(&(0x7f00000000c0)='./file0\x00', 0x1ca) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x10) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r0, r0, 0x0) 22.180156115s ago: executing program 5 (id=698): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x40, 0x1) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000001c0)="bad004ed0f01d166b9f60200000f320fc7350f0018baf80c66b884dba28c66efbafc0c66ed0fc7691a0f01c5c7032c0066b832c600000f23c00f21f86635020005000f23f8", 0x45}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=r8, @ANYBLOB="000226bd7000fcdbdf250200000008000100", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) write$nci(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="710505f1ef0202060e030301a040560308012f"], 0x13) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x160) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) 22.098375395s ago: executing program 34 (id=698): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x40, 0x1) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000001c0)="bad004ed0f01d166b9f60200000f320fc7350f0018baf80c66b884dba28c66efbafc0c66ed0fc7691a0f01c5c7032c0066b832c600000f23c00f21f86635020005000f23f8", 0x45}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES64=r8, @ANYBLOB="000226bd7000fcdbdf250200000008000100", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) write$nci(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="710505f1ef0202060e030301a040560308012f"], 0x13) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x160) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) 14.718991306s ago: executing program 6 (id=699): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000849734f4a148587389e22fbd64821a406fad08696ae1a787ff83e6d9f4"], 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffffa6, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x24048001}, 0x4000850) 6.809610132s ago: executing program 6 (id=699): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000849734f4a148587389e22fbd64821a406fad08696ae1a787ff83e6d9f4"], 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffffa6, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x24048001}, 0x4000850) 934.401981ms ago: executing program 1 (id=993): mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, &(0x7f0000000980)='norecovery') r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', r3, @sock_ops=0x3, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x20a500, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r6, &(0x7f0000000300)='ns/pid\x00') 879.581799ms ago: executing program 1 (id=995): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x0, 0x20000000}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r3, 0x400, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) timer_create(0x3, 0x0, &(0x7f00000001c0)) (async) timer_create(0x3, 0x0, &(0x7f00000001c0)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r4}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c000000000000000000", @ANYRES32=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x10}, 0x18) socket$inet(0x2, 0x2, 0x0) (async) r6 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r10, 0x5453, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) setsockopt$inet_msfilter(r6, 0x0, 0x29, 0x0, 0x57) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) 789.875488ms ago: executing program 1 (id=997): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 784.731046ms ago: executing program 1 (id=999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000006c0)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500), 0x7b}, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)="92", 0x1d}, 0x1, 0x0, 0x0, 0x40000}, 0x240488c4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc101500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000e4140380100000800c00018006000100d10300000c0000800800034000000002"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x400, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x6803e525}]}, 0x24}}, 0x2000c000) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000f10c00070f000000000000001207000000", @ANYRES32=r8, @ANYBLOB="02000600"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) mlockall(0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, 0x1407, 0x200, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) 710.212504ms ago: executing program 1 (id=1000): r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace(0x10, r1) wait4(r1, 0x0, 0x0, &(0x7f0000000500)) r2 = shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmdt(r2) (async) shmdt(r2) 709.904215ms ago: executing program 1 (id=1001): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0x52, 0x0, &(0x7f00000002c0)="51e9e17d1a6efcbf34565cf0795760882831543e04720fba8cda4cac14d25bd6c060e9a65fe8e8fd471fbdd3125c9be2a30c190501765e7e05e312bdf7bc9c13bb9c8233badb5e642aec9b380a58b158330e"}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xb7) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0xffffff3d, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300002769779100000001000000080001000100001f"], 0x1c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) timerfd_gettime(r2, &(0x7f0000000100)) chdir(&(0x7f0000000000)='./file0\x00') fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x2, 0x2, 0x8, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0) 299.670092ms ago: executing program 0 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000200)={@remote, @random="0000dcf6177a", @void, {@mpls_uc={0x806, {[], @llc={@llc={0xaa, 0xdc, 'T'}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfffffffffffffff7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x0) 299.439157ms ago: executing program 0 (id=1015): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="e10400009fae64dd502a000000003c0012800b0001006970360203a09b746e6c00122c0002801400030020010000000000000e00000000000001140002000400"/74], 0x5c}}, 0x0) 219.405967ms ago: executing program 0 (id=1016): r0 = creat(&(0x7f0000000000)='./file0/../file0\x00', 0x4b) (async) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000680)="17000000020001090000008c", 0xc) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)={@any, 0x5}) (async) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x4, 0x4}, 0x6) syz_emit_ethernet(0x23, &(0x7f00000002c0)={@link_local, @dev, @void, {@arp={0x806, @generic={0x206, 0x80f3, 0x6, 0x0, 0x4, @remote, "", @local, "89"}}}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000440)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)='./file0/../file0\x00') 219.09455ms ago: executing program 0 (id=1017): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x3, 0x3) ptrace$setregs(0xd, r0, 0x7fff, &(0x7f0000000280)="3f14cab321eb3f2dac4ff9cb757738c509fe27646d995f9ee9c664b7ae80e62558d06cd33ab7740b7beb3c788bdbbc3baca2cd0a2afa816765aacf3739683f71b409b82f5bf80e67efd36f950c1317d861dd31ea18da596bbd5c62221331ec98a499a7f0239e47d2b6e0c4d00465639a3fc73230d6511143e975de9a17bbc39938564e98132f36d68f") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@volatile={0x5, 0x0, 0x0, 0x9, 0x3}, @volatile={0xf, 0x0, 0x0, 0x9, 0x1}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x0, 0x0, 0x61]}}, 0x0, 0x42, 0x0, 0x0, 0x7}, 0x28) 138.289349ms ago: executing program 2 (id=1019): r0 = syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x2, 0x4}, &(0x7f00000029c0)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000002c0)={0x1, @pix_mp={0xfffffff8, 0xc, 0x44495658, 0x2, 0x9, [{0x2, 0x2cf1}, {0xf644, 0x3ff}, {0xb2eb, 0x101}, {0x0, 0x39a}, {0x1ff, 0x6}, {0x8}, {0x1}, {0x8, 0x5}], 0x6c, 0x5, 0x2, 0x1, 0x7}}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r0}) pipe2$9p(&(0x7f0000001580)={0xffffffffffffffff}, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000017c0)={0x827, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x8001, 0x8001}, &(0x7f0000001800)={0x4, 0x5, 0x1483, 0x290, 0x80d7, 0x3, 0x9b85, 0x4}, &(0x7f0000001840)={0x9, 0x0, 0x1f499d60, 0x3, 0x6, 0xf, 0x8, 0x6faa}, &(0x7f0000001880)={0x0, 0x3938700}, &(0x7f0000001900)={&(0x7f00000018c0)={[0x5]}, 0x8}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3c000000100200fddbdf2500000000b3d9d8357ec5c6756b67bc86c7f55c6cf002d98db859f5201a27e02e406bb678dc351360adb869075517efe35597cf9c5b988cd394f9abc801cb0ea3a0ae97f5e6fb2a304d587cbb21a5174eda887f66fe3445e7981bb46372730e8f5436a520a39049b1c196c4c59fbe42aa00be8e0c528dd483e1aecafbeb83cab6e345cded03fb46ca0c00d67b19ca264689359413d9fe553900f69bd3cf", @ANYRES32=0x0, @ANYBLOB="00010000230800001c0012800b000100697036746e6c00000c00028005000400f3000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) mount$9p_fd(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540), 0x2, &(0x7f00000015c0)=ANY=[@ANYBLOB="7472616e733dfef325b3cf8de3c794", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',fscache,access=user,version=9p2000.u,aname=%,cache=loose,smackfshat=}$!/\'$(},fowner<', @ANYRESDEC=0xee00, @ANYBLOB="2c6673757569643d64363331636131382d333002622d663836332d363152332d36356232616535392c66756e633d4d4f44554c455f434845434b2c00"]) r6 = dup2(r0, r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0107000000000000000052"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x70, r8, 0x20, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x8090) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(r9, &(0x7f00000014c0)={&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001440)=[{&(0x7f00000000c0)="73d27c5e6d2f670d6312a1bfda2c53bcf1a3d7d2bbe22a1cba204eff26bc70dae1660be42d524500309ee6ddf60850beff534f288645082825f78b4fa245c9174060989757302639e75aa27ecb228739", 0x50}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000200)="1c5257844212871daa01b3b8d757da98fe73472f7c8807ebe16df8e8affb7963d7ee1472427c866e9dd0993fd7b509d2025c181e92b60c3812d8712f25c257b02caadcd8852cab0f435509ab6c5e2baf221234294302adabb0f4975e30d9d0b584d42c98768418864f7394325ddafaffd5bcb1bada137a42590df0ff5b0883ee62ed8f6642dcddec2236df3a2e08debca453c0ce84482a1a1486ee18863cd215f1db4b0d2fa54cbd0afbe899d110762aa6bb5d794844f6832ac1139b4f7baa63430f7e6d35971001e2ed39", 0xcb}, {&(0x7f0000000140)="ab500af609d186d78c33eb77ead73f7a6aa9c71f54ba3f8052e7932660f78e79158916ef", 0x24}, {&(0x7f0000000300)="20520bc410fa70a09bbf583b5cdb6458303c797284fce342003124e23f7d7eba35cb8e18dc6555bfe9c26841e86e66a6a332f8c9fe9eb1fce055ab499c02950e6e61cfdf62cd7e63981445a6b72b6451147d6862037f4a45a543dfc2b66d1e14fac72a2bd8789a358ab6a4511d05f8cfd803bceb156bcda9724ed213df2bc2565fd8fc8862242b21159b8bc2d202137e5a982b", 0x93}], 0x5, &(0x7f0000000180)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x30}, 0x4008044) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x2, 0x4}, &(0x7f00000029c0), &(0x7f0000002a00)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000002c0)={0x1, @pix_mp={0xfffffff8, 0xc, 0x44495658, 0x2, 0x9, [{0x2, 0x2cf1}, {0xf644, 0x3ff}, {0xb2eb, 0x101}, {0x0, 0x39a}, {0x1ff, 0x6}, {0x8}, {0x1}, {0x8, 0x5}], 0x6c, 0x5, 0x2, 0x1, 0x7}}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r0}) (async) pipe2$9p(&(0x7f0000001580), 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) pselect6(0x40, &(0x7f00000017c0)={0x827, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0x8001, 0x8001}, &(0x7f0000001800)={0x4, 0x5, 0x1483, 0x290, 0x80d7, 0x3, 0x9b85, 0x4}, &(0x7f0000001840)={0x9, 0x0, 0x1f499d60, 0x3, 0x6, 0xf, 0x8, 0x6faa}, &(0x7f0000001880)={0x0, 0x3938700}, &(0x7f0000001900)={&(0x7f00000018c0)={[0x5]}, 0x8}) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3c000000100200fddbdf2500000000b3d9d8357ec5c6756b67bc86c7f55c6cf002d98db859f5201a27e02e406bb678dc351360adb869075517efe35597cf9c5b988cd394f9abc801cb0ea3a0ae97f5e6fb2a304d587cbb21a5174eda887f66fe3445e7981bb46372730e8f5436a520a39049b1c196c4c59fbe42aa00be8e0c528dd483e1aecafbeb83cab6e345cded03fb46ca0c00d67b19ca264689359413d9fe553900f69bd3cf", @ANYRES32=0x0, @ANYBLOB="00010000230800001c0012800b000100697036746e6c00000c00028005000400f3000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540), 0x2, &(0x7f00000015c0)=ANY=[@ANYBLOB="7472616e733dfef325b3cf8de3c794", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',fscache,access=user,version=9p2000.u,aname=%,cache=loose,smackfshat=}$!/\'$(},fowner<', @ANYRESDEC=0xee00, @ANYBLOB="2c6673757569643d64363331636131382d333002622d663836332d363152332d36356232616535392c66756e633d4d4f44554c455f434845434b2c00"]) (async) dup2(r0, r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r7) (async) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0107000000000000000052"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_SPLIT(r6, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x70, r8, 0x20, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x8090) (async) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) sendmsg$inet(r9, &(0x7f00000014c0)={&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001440)=[{&(0x7f00000000c0)="73d27c5e6d2f670d6312a1bfda2c53bcf1a3d7d2bbe22a1cba204eff26bc70dae1660be42d524500309ee6ddf60850beff534f288645082825f78b4fa245c9174060989757302639e75aa27ecb228739", 0x50}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000200)="1c5257844212871daa01b3b8d757da98fe73472f7c8807ebe16df8e8affb7963d7ee1472427c866e9dd0993fd7b509d2025c181e92b60c3812d8712f25c257b02caadcd8852cab0f435509ab6c5e2baf221234294302adabb0f4975e30d9d0b584d42c98768418864f7394325ddafaffd5bcb1bada137a42590df0ff5b0883ee62ed8f6642dcddec2236df3a2e08debca453c0ce84482a1a1486ee18863cd215f1db4b0d2fa54cbd0afbe899d110762aa6bb5d794844f6832ac1139b4f7baa63430f7e6d35971001e2ed39", 0xcb}, {&(0x7f0000000140)="ab500af609d186d78c33eb77ead73f7a6aa9c71f54ba3f8052e7932660f78e79158916ef", 0x24}, {&(0x7f0000000300)="20520bc410fa70a09bbf583b5cdb6458303c797284fce342003124e23f7d7eba35cb8e18dc6555bfe9c26841e86e66a6a332f8c9fe9eb1fce055ab499c02950e6e61cfdf62cd7e63981445a6b72b6451147d6862037f4a45a543dfc2b66d1e14fac72a2bd8789a358ab6a4511d05f8cfd803bceb156bcda9724ed213df2bc2565fd8fc8862242b21159b8bc2d202137e5a982b", 0x93}], 0x5, &(0x7f0000000180)=[@ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x30}, 0x4008044) (async) 137.855984ms ago: executing program 2 (id=1020): r0 = userfaultfd(0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') close(0x3) r2 = io_uring_setup(0xfc6, &(0x7f0000000540)={0x0, 0xd8a, 0x100, 0x0, 0x2d}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$inet6(0xa, 0xa, 0xfff) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002b40)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000180)={0x2, 0xff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r6) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r7, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x3, 0x5, 0xf6, 0x4}, {0x1, 0x8, 0x6d, 0x3}]}) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000db5000/0x2000)=nil, 0x2000}, 0x1}) 59.881006ms ago: executing program 0 (id=1021): ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f00000000c0)=0x4) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x100000000000001, 0x10000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r2, 0x0, 0xd}, 0x18) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x400, 0x2a) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x1, 0x10001011, r3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x26) fcntl$notify(r5, 0x402, 0x3f) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = socket$kcm(0x2d, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x20, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r7, 0x0, 0x9}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000240)={r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000480)={0x8, 0x0, r1}) 59.36356ms ago: executing program 2 (id=1022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x11) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e1d, 0x280000, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 56.980837ms ago: executing program 2 (id=1023): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='jbd2_write_superblock\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x4}]}]}}}]}, 0x80}}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x1, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='jbd2_write_superblock\x00', r0, 0x0, 0x4}, 0x18) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x4}]}]}}}]}, 0x80}}, 0x0) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x1, 0x2}}, 0x2e) (async) 53.01508ms ago: executing program 0 (id=1024): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) ppoll(&(0x7f00000014c0)=[{r2, 0x50b}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0xcac) r3 = semget$private(0x0, 0x1, 0x20) semctl$GETVAL(r3, 0x1, 0xc, &(0x7f00000001c0)=""/206) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a0001000600000002dcdf250205"], 0x24}}, 0x4044000) 253.113µs ago: executing program 2 (id=1025): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = semget$private(0x0, 0x7, 0x0) semctl$SETVAL(r1, 0x3, 0x10, 0x0) readv(r0, &(0x7f0000002300)=[{&(0x7f0000001080)=""/124, 0x7c}], 0x1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000001c80)={0x0, &(0x7f0000001bc0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000001cc0)={0x0, 0x0, r3, r4, 0x4, 0x7, 0xc, 0x1ff, {0x0, 0x86c, 0x7ff, 0xd918, 0x1, 0xa14, 0x6, 0x3ff, 0x1, 0x9, 0xb044, 0x7, 0xc0, 0x800, "4896fcb6c55ac45cea84d38f3656cfeab03839e87848a881a711450ea4fa58ff"}}) (async) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f0000000240)=0x7ff) (async) pread64(r0, &(0x7f0000002240)=""/163, 0xa3, 0x1ff) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xa00, 0x2, 0xa9}, 0x1c) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)=')', 0x1, 0x4004800, &(0x7f0000000000)={0x11, 0x8100, r8, 0x1, 0xe0, 0x6, @broadcast}, 0x14) (async, rerun: 64) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) (rerun: 64) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f00000001c0)=0x3) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8) (rerun: 32) read$alg(r0, &(0x7f00000000c0)=""/209, 0xd1) 0s ago: executing program 2 (id=1026): add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x0) keyctl$set_timeout(0xf, r0, 0x6) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)="a2ff7ee27519f8c4ad08ec2c283ed2be2dfdfa31691e33a06daf757006f6c293f0a56e3fcb29997504e53e50cc644d4a8ae0e99d9b0ee748499f1c931a754177c19e5811bd5f194bb6f44398a06e2c3863571fda499e65eb8650786d9e603ad2952aeca88b7b3080ee61c9fb055d0ec025060fa0636a497bf846a1c3749d85373510366673c2604f28ebda5ffae2550a2ca54175ae724978ce27ca3cf66888f49a68d36808cf75895ed0dc5da5ea91035dfd7a67897de52f003bd2db02610c86e3d9568d1fc46bdb79f903f36a4fdcc7c2", 0xd1, r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default trusted:'], 0x34, 0xfffffffffffffffa) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000180)={0x1}) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, r2) kernel console output (not intermixed with test programs): ily 0 port 6081 - 0 [ 55.672341][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.690030][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.690115][ T5968] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.716073][ T5976] veth0_macvtap: entered promiscuous mode [ 55.720054][ T1185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.725363][ T5976] veth1_macvtap: entered promiscuous mode [ 55.732508][ T1185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.736258][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.741981][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.744417][ T6057] openvswitch: netlink: IP tunnel dst address not specified [ 55.768344][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.778961][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.782107][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.788292][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.788754][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.816272][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.819551][ T6060] warning: `syz.3.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.826534][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.829382][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.838578][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.841531][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.865049][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.870575][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.884580][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.890158][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.899123][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.901549][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.927307][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.929813][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.011971][ T6082] netlink: 'syz.1.10': attribute type 10 has an invalid length. [ 56.040722][ T6082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.043994][ T6082] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 56.117600][ T6053] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 56.231268][ T6104] Zero length message leads to an empty skb [ 56.274291][ T6110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.287442][ T6053] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 56.291977][ T6053] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 56.298771][ T6053] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 56.303178][ T6053] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.312507][ T6062] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 56.322421][ T6053] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 56.332749][ T6121] capability: warning: `syz.0.25' uses 32-bit capabilities (legacy support in use) [ 56.558350][ T6062] geneve1: entered allmulticast mode [ 56.576364][ T6065] usb 8-1: USB disconnect, device number 2 [ 56.690871][ T6132] Bluetooth: MGMT ver 1.23 [ 56.705408][ T6132] [U] v3f"S/4:XTzWtlW= [ 56.745503][ T5971] Bluetooth: hci0: command tx timeout [ 56.817855][ T6141] 9pnet: Could not find request transport: tcsport=0x0000000000004e22 [ 56.825112][ T5971] Bluetooth: hci1: command tx timeout [ 56.826141][ T5982] Bluetooth: hci2: command tx timeout [ 56.827647][ T6142] 9pnet: Could not find request transport: tcsport=0x0000000000004e22 [ 56.834947][ T5982] Bluetooth: hci3: command tx timeout [ 56.894421][ T6151] overlay: ./bus is not a directory [ 56.910123][ T98] Bluetooth: hci4: Frame reassembly failed (-84) [ 57.034299][ T6170] 9pnet_fd: Insufficient options for proto=fd [ 57.202009][ T6190] capability: warning: `syz.0.44' uses deprecated v2 capabilities in a way that may be insecure [ 57.241569][ T6195] 9pnet_fd: Insufficient options for proto=fd [ 57.245610][ T6195] : renamed from lo (while UP) [ 57.255686][ T6194] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 57.327145][ T6198] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.557583][ T839] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.622740][ T40] kauditd_printk_skb: 108 callbacks suppressed [ 57.622753][ T40] audit: type=1400 audit(1757461970.515:198): avc: denied { read } for pid=6222 comm="syz.3.53" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.626955][ T6224] binder: 6222:6224 unknown command 0 [ 57.636819][ T6224] binder: 6222:6224 ioctl c0306201 200000000080 returned -22 [ 57.636904][ T40] audit: type=1400 audit(1757461970.515:199): avc: denied { open } for pid=6222 comm="syz.3.53" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.650224][ T40] audit: type=1400 audit(1757461970.515:200): avc: denied { ioctl } for pid=6222 comm="syz.3.53" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.660356][ T40] audit: type=1400 audit(1757461970.515:201): avc: denied { set_context_mgr } for pid=6222 comm="syz.3.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 57.668782][ T40] audit: type=1400 audit(1757461970.565:202): avc: denied { nlmsg_write } for pid=6226 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 57.677743][ T40] audit: type=1400 audit(1757461970.565:203): avc: denied { accept } for pid=6226 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.715125][ T839] usb 7-1: Using ep0 maxpacket: 8 [ 57.719590][ T839] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 57.723122][ T839] usb 7-1: config 179 has no interface number 0 [ 57.726909][ T839] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 57.732383][ T839] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 57.737212][ T839] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 57.741820][ T839] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 57.746865][ T839] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 57.752242][ T839] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 57.756025][ T839] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.763529][ T6176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 57.773337][ T40] audit: type=1400 audit(1757461970.665:204): avc: denied { write } for pid=6228 comm="syz.3.55" name="rt_cache" dev="proc" ino=4026532888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 57.782288][ T6229] ISOFS: Unable to identify CD-ROM format. [ 57.853066][ T40] audit: type=1400 audit(1757461970.745:205): avc: denied { ioctl } for pid=6232 comm="syz.3.57" path="socket:[10712]" dev="sockfs" ino=10712 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.855812][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.57'. [ 57.864124][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 57.883157][ T6233] bridge0: port 3(syz_tun) entered blocking state [ 57.885979][ T6233] bridge0: port 3(syz_tun) entered disabled state [ 57.888277][ T6233] syz_tun: entered allmulticast mode [ 57.890736][ T6233] syz_tun: entered promiscuous mode [ 57.893097][ T6233] bridge0: port 3(syz_tun) entered blocking state [ 57.895299][ T6233] bridge0: port 3(syz_tun) entered forwarding state [ 57.976252][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input5 [ 57.985210][ T40] audit: type=1400 audit(1757461970.875:206): avc: denied { ioctl } for pid=6234 comm="syz.3.58" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.993901][ T40] audit: type=1400 audit(1757461970.885:207): avc: denied { read } for pid=5367 comm="acpid" name="js0" dev="devtmpfs" ino=2858 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.029986][ T6238] netlink: 32 bytes leftover after parsing attributes in process `syz.3.59'. [ 58.173515][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 58.176439][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 58.179491][ T6245] netlink: 'syz.3.62': attribute type 12 has an invalid length. [ 58.194379][ T6245] netlink: 124 bytes leftover after parsing attributes in process `syz.3.62'. [ 58.199150][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 58.332564][ T6247] vlan2: entered promiscuous mode [ 58.334175][ T6247] bridge0: entered promiscuous mode [ 58.429849][ T6249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6249 comm=syz.3.64 [ 58.579854][ T6198] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.731671][ T6198] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.795625][ T6262] binder: 6261:6262 ioctl c018620c 200000000000 returned -22 [ 58.820190][ T6198] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.904902][ T5332] Bluetooth: hci2: command tx timeout [ 58.904937][ T5975] Bluetooth: hci1: command tx timeout [ 58.907070][ T5971] Bluetooth: hci3: command tx timeout [ 58.946210][ T46] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.957745][ T98] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.965391][ T98] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.975865][ T46] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.985151][ T5982] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 58.985262][ T5975] Bluetooth: hci4: command 0x1003 tx timeout [ 59.128884][ T6274] overlayfs: failed to clone upperpath [ 59.235841][ T5982] Bluetooth: hci0: command tx timeout [ 59.239854][ T6285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 59.319817][ T6294] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 59.326791][ T6294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6294 comm=syz.3.79 [ 59.341673][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.79'. [ 59.396429][ T6297] mkiss: ax0: crc mode is auto. [ 59.698647][ T6318] netlink: 2 bytes leftover after parsing attributes in process `syz.3.86'. [ 59.811715][ T6324] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 59.815082][ T6322] IPVS: Unknown mcast interface:  [ 59.815139][ T6322] IPVS: Unknown mcast interface:  [ 59.815158][ T6322] IPVS: Unknown mcast interface:  [ 59.815175][ T6322] IPVS: Unknown mcast interface:  [ 59.815193][ T6322] IPVS: Unknown mcast interface:  [ 59.815212][ T6322] IPVS: Unknown mcast interface:  [ 59.815231][ T6322] IPVS: Unknown mcast interface:  [ 59.815249][ T6322] IPVS: Unknown mcast interface:  [ 59.815268][ T6322] IPVS: Unknown mcast interface:  [ 59.815286][ T6322] IPVS: Unknown mcast interface:  [ 59.838582][ T6322] IPVS: Unknown mcast interface:  [ 59.840836][ T6322] IPVS: Unknown mcast interface:  [ 59.843053][ T6322] IPVS: Unknown mcast interface:  [ 59.845375][ T6322] IPVS: Unknown mcast interface:  [ 59.847566][ T6322] IPVS: Unknown mcast interface:  [ 59.849766][ T6322] IPVS: Unknown mcast interface:  [ 59.851940][ T6322] IPVS: Unknown mcast interface:  [ 59.854135][ T6322] IPVS: Unknown mcast interface:  [ 59.856537][ T6322] IPVS: Unknown mcast interface:  [ 59.858649][ T6322] IPVS: Unknown mcast interface:  [ 59.860644][ T6322] IPVS: Unknown mcast interface:  [ 59.862272][ T6322] IPVS: Unknown mcast interface:  [ 59.863842][ T6322] IPVS: Unknown mcast interface:  [ 59.865915][ T6322] IPVS: Unknown mcast interface:  [ 59.867945][ T6322] IPVS: Unknown mcast interface:  [ 59.869549][ T6322] IPVS: Unknown mcast interface:  [ 59.871140][ T6322] IPVS: Unknown mcast interface:  [ 59.872776][ T6322] IPVS: Unknown mcast interface:  [ 59.886383][ T6328] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 59.927468][ T6335] mmap: syz.0.91 (6335) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.087721][ T840] usb 7-1: USB disconnect, device number 2 [ 60.087858][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 60.092560][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 60.184359][ T6361] bridge0: entered allmulticast mode [ 60.190263][ T6361] pim6reg: entered allmulticast mode [ 60.313623][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 60.323749][ T6366] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.488059][ T6376] trusted_key: encrypted_key: keylen parameter is missing [ 60.539122][ T6385] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 60.632795][ T6395] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.643603][ T6395] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 60.652516][ T6397] bridge_slave_0: left allmulticast mode [ 60.654241][ T6397] bridge_slave_0: left promiscuous mode [ 60.656734][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.669673][ T6397] bridge_slave_1: left allmulticast mode [ 60.671624][ T6397] bridge_slave_1: left promiscuous mode [ 60.673573][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.679082][ T6397] bond0: (slave bond_slave_0): Releasing backup interface [ 60.686552][ T6397] bond0: (slave bond_slave_1): Releasing backup interface [ 60.693737][ T6397] team0: Port device team_slave_0 removed [ 60.701064][ T6397] team0: Port device team_slave_1 removed [ 60.703247][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.705990][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.709588][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.712085][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.737315][ T6400] team0: Mode changed to "loadbalance" [ 60.742816][ T6397] netlink: 'syz.2.111': attribute type 10 has an invalid length. [ 60.753012][ T6397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.756879][ T6397] team0: Port device bond0 added [ 60.828196][ T6397] team0 (unregistering): Port device bond0 removed [ 60.856399][ T6400] can0: slcan on ttyS3. [ 60.985873][ T5982] Bluetooth: hci2: command tx timeout [ 60.986216][ T6396] can0 (unregistered): slcan off ttyS3. [ 60.987736][ T5982] Bluetooth: hci1: command tx timeout [ 60.991574][ T5975] Bluetooth: hci3: command tx timeout [ 61.396253][ T6455] macvlan2: entered allmulticast mode [ 61.398172][ T6455] veth1_vlan: entered allmulticast mode [ 61.401342][ T6457] tipc: Started in network mode [ 61.402975][ T6457] tipc: Node identity ac1414aa, cluster identity 4711 [ 61.406390][ T6457] tipc: Enabled bearer , priority 10 [ 61.424862][ T840] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.486791][ T6465] fuse: Bad value for 'fd' [ 61.531155][ T6467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6467 comm=syz.3.130 [ 61.555301][ T6467] kvm: Disabled LAPIC found during irq injection [ 61.578225][ T840] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 61.581760][ T840] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.586557][ T840] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 61.590563][ T840] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 61.593169][ T840] usb 7-1: Manufacturer: syz [ 61.596381][ T840] usb 7-1: config 0 descriptor?? [ 61.596598][ T6483] tmpfs: Unknown parameter 'usrquoda_block_hardlimit' [ 61.645561][ T6486] trusted_key: syz.3.134 sent an empty control message without MSG_MORE. [ 61.656902][ T840] rc_core: IR keymap rc-hauppauge not found [ 61.658963][ T840] Registered IR keymap rc-empty [ 61.661770][ T840] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 61.678621][ T840] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input6 [ 61.847301][ T6506] openvswitch: netlink: Flow actions attr not present in new flow. [ 61.853850][ T6490] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 61.857281][ T6491] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 62.214070][ T6295] bridge0: port 3(syz_tun) entered disabled state [ 62.221809][ T6295] syz_tun (unregistering): left allmulticast mode [ 62.224257][ T6295] syz_tun (unregistering): left promiscuous mode [ 62.226798][ T6295] bridge0: port 3(syz_tun) entered disabled state [ 62.267119][ T6543] netlink: 'syz.0.154': attribute type 21 has an invalid length. [ 62.269650][ T6543] netlink: 'syz.0.154': attribute type 4 has an invalid length. [ 62.272055][ T6543] netlink: 'syz.0.154': attribute type 5 has an invalid length. [ 62.405654][ T61] tipc: Node number set to 2886997162 [ 62.562903][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.647322][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.647352][ T5975] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.651767][ T5975] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.657421][ T5975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.660709][ T5975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.663929][ T5975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.728096][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.806660][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.814059][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 62.908947][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.911269][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.913672][ T6548] bridge_slave_0: entered allmulticast mode [ 62.916413][ T6548] bridge_slave_0: entered promiscuous mode [ 62.919541][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.921796][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.924154][ T6548] bridge_slave_1: entered allmulticast mode [ 62.927610][ T6548] bridge_slave_1: entered promiscuous mode [ 62.982122][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.988917][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.037131][ T6548] team0: Port device team_slave_0 added [ 63.045126][ T6548] team0: Port device team_slave_1 added [ 63.077580][ T60] bridge_slave_1: left allmulticast mode [ 63.079735][ T60] bridge_slave_1: left promiscuous mode [ 63.082657][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.087979][ T60] bridge_slave_0: left allmulticast mode [ 63.089992][ T60] bridge_slave_0: left promiscuous mode [ 63.091924][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.174108][ T40] kauditd_printk_skb: 93 callbacks suppressed [ 63.174119][ T40] audit: type=1400 audit(1757461976.065:301): avc: denied { setopt } for pid=6558 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.483747][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.488511][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.492259][ T60] bond0 (unregistering): Released all slaves [ 63.499316][ T60] bond1 (unregistering): Released all slaves [ 63.506098][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.508226][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.516300][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.530559][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.533529][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.544372][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.592771][ T6548] hsr_slave_0: entered promiscuous mode [ 63.595194][ T6548] hsr_slave_1: entered promiscuous mode [ 63.597192][ T6548] debugfs: 'hsr0' already exists in 'hsr' [ 63.598992][ T6548] Cannot create hsr debugfs directory [ 63.686655][ T6568] netlink: 'syz.0.160': attribute type 3 has an invalid length. [ 63.689164][ T6568] __nla_validate_parse: 9 callbacks suppressed [ 63.689172][ T6568] netlink: 132 bytes leftover after parsing attributes in process `syz.0.160'. [ 63.717808][ T40] audit: type=1400 audit(1757461976.615:302): avc: denied { listen } for pid=6569 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.727007][ T40] audit: type=1400 audit(1757461976.625:303): avc: denied { mount } for pid=6569 comm="syz.0.161" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 63.734151][ T6573] sctp: failed to load transform for md5: -2 [ 63.813467][ T6548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.817689][ T6548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.822313][ T6548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.828805][ T6548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.852089][ T60] hsr_slave_0: left promiscuous mode [ 63.858586][ T60] hsr_slave_1: left promiscuous mode [ 63.860850][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.863965][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.868505][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.871839][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.876490][ T40] audit: type=1400 audit(1757461976.775:304): avc: denied { block_suspend } for pid=6579 comm="syz.0.162" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.906748][ T60] veth1_vlan: left allmulticast mode [ 63.908747][ T60] veth1_macvtap: left promiscuous mode [ 63.911147][ T60] veth0_macvtap: left promiscuous mode [ 63.913023][ T60] veth1_vlan: left promiscuous mode [ 63.916072][ T60] veth0_vlan: left promiscuous mode [ 63.931638][ T40] audit: type=1400 audit(1757461976.825:305): avc: denied { connect } for pid=6594 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.937856][ T40] audit: type=1400 audit(1757461976.825:306): avc: denied { create } for pid=6594 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 64.187962][ T9] usb 7-1: USB disconnect, device number 3 [ 64.471509][ T60] team0 (unregistering): Port device team_slave_1 removed [ 64.518632][ T60] team0 (unregistering): Port device team_slave_0 removed [ 64.756789][ T5975] Bluetooth: hci0: command tx timeout [ 64.928052][ T40] audit: type=1400 audit(1757461977.825:307): avc: denied { read } for pid=6610 comm="syz.1.169" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 64.937044][ T40] audit: type=1400 audit(1757461977.825:308): avc: denied { open } for pid=6610 comm="syz.1.169" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 64.963070][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.984783][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.994476][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.997131][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.012732][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.015688][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.018024][ T40] audit: type=1400 audit(1757461977.905:309): avc: denied { setopt } for pid=6614 comm="syz.2.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.031762][ T6625] overlayfs: failed to clone upperpath [ 65.081366][ T40] audit: type=1400 audit(1757461977.975:310): avc: denied { create } for pid=6628 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.090623][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.174'. [ 65.148262][ T6630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=6630 comm=syz.1.174 [ 65.153526][ T6630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=6630 comm=syz.1.174 [ 65.176974][ T34] IPVS: starting estimator thread 0... [ 65.224685][ T6650] IPVS: Error connecting to the multicast addr [ 65.258085][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.273300][ T6653] netlink: 'syz.1.180': attribute type 10 has an invalid length. [ 65.279339][ T6647] IPVS: using max 45 ests per chain, 108000 per kthread [ 65.285112][ T6653] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.287653][ T6653] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.298762][ T6653] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.301145][ T6653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.303655][ T6653] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.306470][ T6653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.319764][ T6653] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 65.333706][ T6653] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 65.443247][ T6548] veth0_vlan: entered promiscuous mode [ 65.453345][ T6548] veth1_vlan: entered promiscuous mode [ 65.473586][ T6548] veth0_macvtap: entered promiscuous mode [ 65.478477][ T6548] veth1_macvtap: entered promiscuous mode [ 65.486914][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.492832][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.499573][ T46] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.503358][ T46] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.511282][ T46] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.514080][ T46] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.520546][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 65.546429][ T219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.549506][ T219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.566142][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.569196][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.909625][ T6714] netlink: 184620 bytes leftover after parsing attributes in process `syz.0.191'. [ 65.997498][ T6723] binder: 6717:6723 ioctl c0306201 2000000003c0 returned -14 [ 66.123031][ T6732] netlink: 32 bytes leftover after parsing attributes in process `syz.2.196'. [ 66.128366][ T6732] netlink: 32 bytes leftover after parsing attributes in process `syz.2.196'. [ 66.132165][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 66.132735][ T6732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.140760][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 66.182998][ T6737] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.198'. [ 66.188825][ T6737] netlink: zone id is out of range [ 66.190471][ T6737] netlink: get zone limit has 8 unknown bytes [ 66.214575][ T6742] 9pnet_fd: Insufficient options for proto=fd [ 66.297839][ T6748] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 66.302363][ T6751] tipc: Enabling of bearer rejected, failed to enable media [ 66.418024][ T6767] geneve2: entered promiscuous mode [ 66.420264][ T6767] geneve2: entered allmulticast mode [ 66.423942][ T219] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.427669][ T219] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.432506][ T219] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.440006][ T219] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 66.478930][ T6782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.498462][ T6784] openvswitch: netlink: nsh attr 0 has unexpected len 4 expected 0 [ 66.500973][ T6784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.627216][ T6800] overlayfs: failed to clone upperpath [ 66.824908][ T5975] Bluetooth: hci0: command tx timeout [ 66.936279][ T6820] No control pipe specified [ 67.957562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.965166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 68.501111][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 68.501127][ T40] audit: type=1400 audit(1757461981.395:348): avc: denied { open } for pid=6942 comm="syz.4.259" path="/dev/ptyqd" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 68.517667][ T40] audit: type=1400 audit(1757461981.415:349): avc: denied { ioctl } for pid=6942 comm="syz.4.259" path="/dev/ptyqd" dev="devtmpfs" ino=140 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 68.547654][ T6943] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 68.616656][ T40] audit: type=1400 audit(1757461981.515:350): avc: denied { read write } for pid=6947 comm="syz.1.261" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 68.619769][ T6954] bond1: entered allmulticast mode [ 68.631768][ T40] audit: type=1400 audit(1757461981.515:351): avc: denied { open } for pid=6947 comm="syz.1.261" path="/dev/input/mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 68.641852][ T5975] Bluetooth: hci2: unknown advertising packet type: 0xf1 [ 68.686710][ T40] audit: type=1400 audit(1757461981.575:352): avc: denied { shutdown } for pid=6965 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.823004][ T40] audit: type=1400 audit(1757461981.715:353): avc: denied { mount } for pid=6981 comm="syz.4.272" name="/" dev="ramfs" ino=14775 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.857709][ T6989] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 68.904858][ T5975] Bluetooth: hci0: command tx timeout [ 69.021127][ T40] audit: type=1400 audit(1757461981.915:354): avc: denied { load_policy } for pid=7000 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 69.021362][ T7001] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 69.030469][ T7001] SELinux: failed to load policy [ 69.068187][ T7004] __nla_validate_parse: 7 callbacks suppressed [ 69.068202][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'. [ 69.073873][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'. [ 69.079917][ T7004] netlink: 50 bytes leftover after parsing attributes in process `syz.2.280'. [ 69.089306][ T40] audit: type=1400 audit(1757461981.985:355): avc: denied { mount } for pid=7003 comm="syz.2.280" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.118430][ T40] audit: type=1400 audit(1757461982.015:356): avc: denied { create } for pid=7010 comm="syz.4.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 69.119640][ T7011] program syz.4.282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.342631][ T7015] syz.2.284 uses obsolete (PF_INET,SOCK_PACKET) [ 69.348982][ T7016] openvswitch: netlink: Flow actions attr not present in new flow. [ 69.418737][ T40] audit: type=1400 audit(1757461982.315:357): avc: denied { setopt } for pid=7019 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.426887][ T839] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 69.505373][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.288'. [ 69.544367][ T7031] bridge1: port 1(veth3) entered blocking state [ 69.549281][ T7031] bridge1: port 1(veth3) entered disabled state [ 69.552155][ T7031] veth3: entered allmulticast mode [ 69.555667][ T7031] veth3: entered promiscuous mode [ 69.596513][ T7048] bridge0: entered allmulticast mode [ 69.596634][ T7038] block nbd2: Unsupported socket: shutdown callout must be supported. [ 69.599136][ T7048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 69.606884][ T839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.611436][ T839] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.616522][ T7048] bridge_slave_1: left allmulticast mode [ 69.618262][ T839] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 69.618334][ T7048] bridge_slave_1: left promiscuous mode [ 69.622117][ T839] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.624096][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.631982][ T7048] bridge_slave_0: left allmulticast mode [ 69.633756][ T7048] bridge_slave_0: left promiscuous mode [ 69.634838][ T839] usb 9-1: config 0 descriptor?? [ 69.635707][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.649294][ T7048] bond0: (slave bridge0): Releasing backup interface [ 69.652590][ T7048] bridge0 (unregistering): left allmulticast mode [ 69.920323][ T7055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.927664][ T7055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.952925][ T7061] hfsplus: unable to find HFS+ superblock [ 70.015451][ T1185] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.021721][ T1185] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.025944][ T1185] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.029748][ T1185] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.043275][ T7065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.060487][ T839] usbhid 9-1:0.0: can't add hid device: -71 [ 70.063110][ T839] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 70.076254][ T839] usb 9-1: USB disconnect, device number 2 [ 70.131909][ T7072] ======================================================= [ 70.131909][ T7072] WARNING: The mand mount option has been deprecated and [ 70.131909][ T7072] and is ignored by this kernel. Remove the mand [ 70.131909][ T7072] option from the mount to silence this warning. [ 70.131909][ T7072] ======================================================= [ 70.140842][ T7074] nbd: must specify a size in bytes for the device [ 70.144512][ T7072] FAT-fs (nullb0): bogus number of reserved sectors [ 70.148007][ T7072] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 70.179963][ T7076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.183919][ T7076] process 'syz.4.301' launched './file0' with NULL argv: empty string added [ 70.301547][ T7088] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 70.317165][ T7090] netlink: 'syz.1.307': attribute type 30 has an invalid length. [ 70.632429][ T7117] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 70.648064][ T7117] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 70.650212][ T7117] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 70.654622][ T7117] vhci_hcd vhci_hcd.0: Device attached [ 70.658683][ T7120] vhci_hcd: connection closed [ 70.659775][ T219] vhci_hcd: stop threads [ 70.663091][ T219] vhci_hcd: release socket [ 70.664565][ T219] vhci_hcd: disconnect device [ 70.879948][ T7149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7149 comm=syz.4.325 [ 70.885034][ T7149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.325'. [ 70.904537][ T7149] vlan2: entered allmulticast mode [ 70.906446][ T7149] bond2: entered allmulticast mode [ 70.908458][ T7149] bond2: (slave vlan2): Opening slave failed [ 70.984952][ T5975] Bluetooth: hci0: command tx timeout [ 70.999853][ T7159] netlink: 'syz.0.328': attribute type 8 has an invalid length. [ 71.149080][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.151289][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.251604][ T7172] netlink: 'syz.1.331': attribute type 28 has an invalid length. [ 71.254919][ T7172] netlink: 'syz.1.331': attribute type 3 has an invalid length. [ 71.258095][ T7172] netlink: 132 bytes leftover after parsing attributes in process `syz.1.331'. [ 71.268071][ T7172] kvm: MWAIT instruction emulated as NOP! [ 71.406252][ T7180] 9pnet_fd: Insufficient options for proto=fd [ 71.427525][ T7185] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 71.432924][ T7185] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 71.679025][ T7198] netlink: 'syz.1.339': attribute type 10 has an invalid length. [ 71.681587][ T7198] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 71.685235][ T7198] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 71.689226][ T7198] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 71.891051][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 71.914405][ T5982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.918044][ T5982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.920984][ T5982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.924143][ T5982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.927886][ T5982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.950451][ T7214] netlink: 'syz.0.347': attribute type 10 has an invalid length. [ 71.958516][ T7214] team0: Device hsr_slave_0 failed to register rx_handler [ 72.090571][ T7209] chnl_net:caif_netlink_parms(): no params data found [ 72.115427][ T840] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 72.155261][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 72.158301][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 72.166659][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.169099][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.171579][ T7209] bridge_slave_0: entered allmulticast mode [ 72.174331][ T7209] bridge_slave_0: entered promiscuous mode [ 72.179181][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.181380][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.183666][ T7209] bridge_slave_1: entered allmulticast mode [ 72.187091][ T7209] bridge_slave_1: entered promiscuous mode [ 72.266625][ T840] usb 6-1: Using ep0 maxpacket: 8 [ 72.270522][ T840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 72.274009][ T840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 72.277137][ T840] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 72.280027][ T840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.283964][ T840] usb 6-1: config 0 descriptor?? [ 72.305949][ T7209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.316852][ T7209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.351520][ T7209] team0: Port device team_slave_0 added [ 72.354635][ T7209] team0: Port device team_slave_1 added [ 72.401085][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.427837][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.430122][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.440934][ T7209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.449338][ T7209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.452047][ T7209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.461899][ T7209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.482965][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.492110][ T840] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 72.502747][ T7257] netlink: 'syz.0.358': attribute type 13 has an invalid length. [ 72.550937][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.561535][ T7209] hsr_slave_0: entered promiscuous mode [ 72.564241][ T7209] hsr_slave_1: entered promiscuous mode [ 72.651727][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.698453][ T7206] iowarrior 6-1:0.0: Error -90 while submitting URB [ 72.702316][ T6035] usb 6-1: USB disconnect, device number 2 [ 72.720074][ T7209] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 72.729293][ T7209] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 72.735996][ T7209] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 72.741574][ T7209] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.796264][ T7209] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.798626][ T7209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.801043][ T7209] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.803354][ T7209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.817013][ T60] bridge_slave_1: left allmulticast mode [ 72.817414][ T7298] Bluetooth: MGMT ver 1.23 [ 72.818820][ T60] bridge_slave_1: left promiscuous mode [ 72.822567][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.830625][ T60] bridge_slave_0: left allmulticast mode [ 72.832414][ T60] bridge_slave_0: left promiscuous mode [ 72.834229][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.070143][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.074514][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.079537][ T60] bond0 (unregistering): Released all slaves [ 73.090447][ T60] bond1 (unregistering): Released all slaves [ 73.101161][ T60] bond2 (unregistering): Released all slaves [ 73.121591][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.125070][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.186394][ T7209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.199196][ T7209] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.211431][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.213745][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.219478][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.221870][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.268535][ T7209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.303647][ T7314] netlink: 'syz.1.373': attribute type 10 has an invalid length. [ 73.320615][ T7209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.359315][ T7329] overlayfs: failed to resolve './file0': -2 [ 73.450651][ T60] hsr_slave_0: left promiscuous mode [ 73.453420][ T60] hsr_slave_1: left promiscuous mode [ 73.456197][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.459202][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.462735][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.466901][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.501559][ T60] veth1_macvtap: left promiscuous mode [ 73.503339][ T60] veth0_macvtap: left promiscuous mode [ 73.505288][ T60] veth1_vlan: left promiscuous mode [ 73.506989][ T60] veth0_vlan: left promiscuous mode [ 73.556004][ T7350] netlink: 'syz.2.378': attribute type 1 has an invalid length. [ 73.624886][ T34] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 73.642691][ T40] kauditd_printk_skb: 143 callbacks suppressed [ 73.642702][ T40] audit: type=1400 audit(1757461986.535:501): avc: denied { write } for pid=7347 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.650807][ T40] audit: type=1400 audit(1757461986.535:502): avc: denied { name_connect } for pid=7347 comm="syz.0.379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 73.793061][ T34] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.797098][ T34] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 73.800124][ T34] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.802894][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.809111][ T7337] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 73.813148][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.947044][ T5975] Bluetooth: hci0: command tx timeout [ 74.025634][ T40] audit: type=1400 audit(1757461986.925:503): avc: denied { create } for pid=7336 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.067105][ T6053] usb 6-1: USB disconnect, device number 3 [ 74.087473][ T60] team0 (unregistering): Port device team_slave_1 removed [ 74.154573][ T60] team0 (unregistering): Port device team_slave_0 removed [ 74.592537][ T7364] netlink: 'syz.1.380': attribute type 12 has an invalid length. [ 74.595005][ T40] audit: type=1400 audit(1757461987.495:504): avc: denied { bind } for pid=7363 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.595946][ T40] audit: type=1400 audit(1757461987.495:505): avc: denied { name_bind } for pid=7363 comm="syz.0.381" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 74.596150][ T40] audit: type=1400 audit(1757461987.495:506): avc: denied { node_bind } for pid=7363 comm="syz.0.381" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 74.610968][ T7364] __nla_validate_parse: 2 callbacks suppressed [ 74.610983][ T7364] netlink: 120 bytes leftover after parsing attributes in process `syz.1.380'. [ 74.617926][ T40] audit: type=1400 audit(1757461987.515:507): avc: denied { ioctl } for pid=7363 comm="syz.0.381" path="socket:[17701]" dev="sockfs" ino=17701 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.623243][ T7209] veth0_vlan: entered promiscuous mode [ 74.633144][ T7364] tipc: Started in network mode [ 74.635619][ T7364] tipc: Node identity 00000000000000008, cluster identity 4711 [ 74.643320][ T7209] veth1_vlan: entered promiscuous mode [ 74.668622][ T7209] veth0_macvtap: entered promiscuous mode [ 74.672633][ T7209] veth1_macvtap: entered promiscuous mode [ 74.682916][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.690237][ T7209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.697424][ T1145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.703110][ T1145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.707884][ T1145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.707975][ T40] audit: type=1400 audit(1757461987.605:508): avc: denied { ioctl } for pid=7378 comm="syz.2.384" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 74.711471][ T1145] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.720456][ T40] audit: type=1400 audit(1757461987.625:509): avc: denied { read } for pid=7378 comm="syz.2.384" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.730755][ T40] audit: type=1400 audit(1757461987.625:510): avc: denied { open } for pid=7378 comm="syz.2.384" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.798778][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.801058][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.825002][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.827293][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.000444][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 75.014118][ T7418] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 75.024638][ T7428] netem: incorrect ge model size [ 75.027976][ T7428] netem: change failed [ 75.050779][ T7416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.393'. [ 75.053966][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.393'. [ 75.111988][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 75.239782][ T7454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.280611][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 75.284451][ T7457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.407'. [ 75.379267][ T7461] netlink: 27 bytes leftover after parsing attributes in process `syz.1.408'. [ 75.383433][ T7461] netlink: 27 bytes leftover after parsing attributes in process `syz.1.408'. [ 75.417607][ T7468] Invalid logical block size (-5) [ 75.440987][ T7472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.451456][ T7472] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 75.494151][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 75.497942][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 75.564113][ T7487] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 75.642714][ T7508] program syz.1.420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.679110][ T7513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.857257][ T7537] block device autoloading is deprecated and will be removed. [ 75.906055][ T7544] vim2m vim2m.0: vidioc_s_fmt queue busy [ 75.921492][ T7545] tmpfs: Bad value for 'mpol' [ 76.024884][ T5975] Bluetooth: hci0: command tx timeout [ 76.893925][ T7636] delete_channel: no stack [ 77.012008][ T7665] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 77.094845][ T61] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 77.254852][ T61] usb 7-1: Using ep0 maxpacket: 16 [ 77.258397][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.261823][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.266617][ T61] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 77.270589][ T61] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 77.274192][ T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.278225][ T61] usb 7-1: config 0 descriptor?? [ 77.287483][ T7681] validate_nla: 1 callbacks suppressed [ 77.287493][ T7681] netlink: 'syz.5.467': attribute type 4 has an invalid length. [ 77.297728][ T7682] netlink: 'syz.5.467': attribute type 4 has an invalid length. [ 77.301782][ T7682] netlink: 'syz.5.467': attribute type 4 has an invalid length. [ 77.304428][ T7682] netlink: 'syz.5.467': attribute type 4 has an invalid length. [ 77.308033][ T7682] netlink: 'syz.5.467': attribute type 4 has an invalid length. [ 77.310606][ T7682] netlink: 'syz.5.467': attribute type 4 has an invalid length. [ 77.313086][ T7682] netlink: 'syz.5.467': attribute type 4 has an invalid length. [ 77.316496][ T7682] netlink: 'syz.5.467': attribute type 4 has an invalid length. [ 77.318943][ T7682] netlink: 'syz.5.467': attribute type 4 has an invalid length. [ 77.321344][ T7682] netlink: 'syz.5.467': attribute type 4 has an invalid length. [ 77.353233][ T7687] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7687 comm=syz.5.468 [ 77.387842][ T7687] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 77.510447][ T7695] vlan2: entered promiscuous mode [ 77.512322][ T7695] vlan2: entered allmulticast mode [ 77.513963][ T7695] hsr_slave_1: entered allmulticast mode [ 77.691026][ T61] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 77.693336][ T61] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 77.696276][ T61] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 77.698458][ T61] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 77.700644][ T61] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 77.707444][ T61] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 77.728722][ T61] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 77.733054][ T61] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 77.829021][ T7715] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 77.917882][ T29] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 77.918225][ T6036] usb 7-1: USB disconnect, device number 4 [ 77.921468][ T29] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 77.927756][ T29] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 77.931286][ T29] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 78.066816][ T7728] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7728 comm=syz.1.481 [ 78.071317][ T7728] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7728 comm=syz.1.481 [ 78.104844][ T5975] Bluetooth: hci0: command tx timeout [ 78.633751][ T7751] macvlan0: entered promiscuous mode [ 78.721041][ T40] kauditd_printk_skb: 103 callbacks suppressed [ 78.721052][ T40] audit: type=1400 audit(1757461991.615:614): avc: denied { read } for pid=7753 comm="syz.5.486" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 78.734791][ T40] audit: type=1400 audit(1757461991.615:615): avc: denied { open } for pid=7753 comm="syz.5.486" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 78.742370][ T40] audit: type=1400 audit(1757461991.615:616): avc: denied { ioctl } for pid=7753 comm="syz.5.486" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 78.765244][ T7756] ipvlan2: entered promiscuous mode [ 78.767510][ T7756] bridge0: port 1(ipvlan2) entered blocking state [ 78.769715][ T7756] bridge0: port 1(ipvlan2) entered disabled state [ 78.771736][ T7756] ipvlan2: entered allmulticast mode [ 78.774240][ T7756] ipvlan2: left allmulticast mode [ 78.805582][ T7758] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 78.815558][ T7758] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 78.875869][ T7764] ip6gretap1: entered promiscuous mode [ 78.877947][ T7764] ip6gretap1: entered allmulticast mode [ 78.892940][ T7762] program syz.2.489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.905002][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 78.921677][ T7770] team0: Device gtp0 is of different type [ 78.946500][ T7763] Falling back ldisc for ttyS3. [ 79.017069][ T40] audit: type=1400 audit(1757461991.915:617): avc: denied { create } for pid=7774 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.020406][ T5975] Bluetooth: hci3: Malformed LE Event: 0x0d [ 79.021389][ T7775] overlayfs: workdir and upperdir must reside under the same mount [ 79.027246][ T40] audit: type=1400 audit(1757461991.915:618): avc: denied { getopt } for pid=7774 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.035674][ T40] audit: type=1400 audit(1757461991.915:619): avc: denied { mount } for pid=7774 comm="syz.2.492" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 79.089984][ T40] audit: type=1400 audit(1757461991.985:620): avc: denied { unmount } for pid=5977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 79.120786][ T40] audit: type=1400 audit(1757461992.015:621): avc: denied { nlmsg_read } for pid=7780 comm="syz.2.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.174014][ T40] audit: type=1400 audit(1757461992.065:622): avc: denied { write } for pid=7792 comm="syz.2.497" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 79.306778][ T40] audit: type=1400 audit(1757461992.205:623): avc: denied { load_policy } for pid=7814 comm="syz.5.503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 79.307070][ T7815] SELinux: policydb magic number 0x80fe does not match expected magic number 0xf97cff8c [ 79.316663][ T7815] SELinux: failed to load policy [ 79.401212][ T7832] hsr_slave_0: left promiscuous mode [ 79.530558][ T7846] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 79.533680][ T7847] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 79.669014][ T7859] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.672203][ T7859] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 79.729183][ T7859] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.733246][ T7859] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 79.808704][ T7859] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.812344][ T7859] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 79.880975][ T7859] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.885196][ T7859] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 79.956873][ T1185] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 79.959569][ T1185] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 79.967079][ T1185] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 79.969773][ T1185] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 79.980892][ T1185] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 79.983901][ T1185] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 79.990168][ T1185] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 79.992906][ T1185] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 80.009088][ T7861] __nla_validate_parse: 21 callbacks suppressed [ 80.009097][ T7861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.519'. [ 80.047769][ T7866] netlink: 92 bytes leftover after parsing attributes in process `syz.0.520'. [ 80.177134][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 80.184815][ T5975] Bluetooth: hci0: command tx timeout [ 80.249505][ T7889] netlink: 56 bytes leftover after parsing attributes in process `syz.5.527'. [ 80.271686][ T7891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7891 comm=syz.2.528 [ 80.276321][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.528'. [ 80.296538][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 80.302228][ T7891] vlan2: entered allmulticast mode [ 80.304485][ T7891] bond2: entered allmulticast mode [ 80.352056][ T7897] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 80.364595][ T1145] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 80.365565][ T7897] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.476187][ T60] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 80.914416][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 81.014542][ T7950] Failed to initialize the IGMP autojoin socket (err -2) [ 81.200422][ T7965] team0: Device ipvlan1 failed to register rx_handler [ 81.213581][ T7975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.240191][ T7977] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.244630][ T7979] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 81.276717][ T7986] tipc: Enabling of bearer rejected, failed to enable media [ 81.281704][ T7981] Failed to initialize the IGMP autojoin socket (err -2) [ 81.288006][ T7988] block nbd2: Attempted send on invalid socket [ 81.290156][ T7988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.293458][ T7988] (syz.2.558,7988,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 81.298514][ T7988] (syz.2.558,7988,3):ocfs2_sb_probe:753 ERROR: status = -5 [ 81.303265][ T7988] (syz.2.558,7988,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 81.306277][ T7988] (syz.2.558,7988,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 81.315090][ T7977] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.346707][ T7994] netlink: 108 bytes leftover after parsing attributes in process `syz.2.560'. [ 81.389484][ T8000] can0: slcan on ttyS3. [ 81.396228][ T59] cfg80211: failed to load regulatory.db [ 81.460325][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.565'. [ 81.489541][ T7977] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.515737][ T7999] can0 (unregistered): slcan off ttyS3. [ 81.587314][ T7977] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.608854][ T8019] nfs: Unknown parameter 'lok' [ 81.621527][ T8022] Driver unsupported XDP return value 0 on prog (id 87) dev N/A, expect packet loss! [ 81.689934][ T8029] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 81.698474][ T8029] netlink: 328 bytes leftover after parsing attributes in process `syz.0.573'. [ 81.732091][ T46] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.741227][ T8028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.744397][ T219] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.752097][ T219] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.758902][ T1145] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.264790][ T5975] Bluetooth: hci0: command tx timeout [ 82.584493][ T8085] validate_nla: 32 callbacks suppressed [ 82.584507][ T8085] netlink: 'syz.1.591': attribute type 178 has an invalid length. [ 82.584691][ T8086] smc: net device bond0 applied user defined pnetid SYZ0 [ 83.486044][ T8141] netlink: 'syz.1.607': attribute type 10 has an invalid length. [ 83.488625][ T8141] team0: Cannot enslave team device to itself [ 83.522238][ T8143] openvswitch: netlink: Key type 30 is not supported [ 83.580388][ T8145] program syz.1.609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.634837][ T838] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 83.681393][ T8149] netlink: 'syz.1.610': attribute type 10 has an invalid length. [ 83.683984][ T8149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.689343][ T8149] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 83.777723][ T8157] ISOFS: Unable to identify CD-ROM format. [ 83.784898][ T838] usb 7-1: Using ep0 maxpacket: 8 [ 83.787953][ T838] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 83.790552][ T838] usb 7-1: config 179 has no interface number 0 [ 83.792524][ T838] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 83.797598][ T838] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 83.801126][ T838] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 83.804579][ T838] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 83.808871][ T838] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 83.812934][ T838] usb 7-1: config 179 interface 65 has no altsetting 0 [ 83.815121][ T838] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 83.817444][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 83.817894][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.829810][ T838] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input9 [ 84.004033][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 84.004043][ T40] audit: type=1400 audit(1757461996.895:677): avc: denied { map } for pid=8165 comm="syz.5.613" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.013452][ T40] audit: type=1400 audit(1757461996.895:678): avc: denied { execute } for pid=8165 comm="syz.5.613" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.021575][ T40] audit: type=1400 audit(1757461996.925:679): avc: denied { read append } for pid=8136 comm="syz.2.606" name="event4" dev="devtmpfs" ino=2911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.024993][ T8137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.029270][ T40] audit: type=1400 audit(1757461996.925:681): avc: denied { open } for pid=8136 comm="syz.2.606" path="/dev/input/event4" dev="devtmpfs" ino=2911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.031722][ T8137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.039113][ T40] audit: type=1400 audit(1757461996.925:680): avc: denied { read append } for pid=8136 comm="syz.2.606" name="event4" dev="devtmpfs" ino=2911 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.053262][ T34] usb 7-1: USB disconnect, device number 5 [ 84.053315][ C3] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 84.087115][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 84.203642][ T40] audit: type=1400 audit(1757461997.095:682): avc: denied { write } for pid=8183 comm="syz.5.618" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 84.208426][ T8186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54944 sclass=netlink_route_socket pid=8186 comm=syz.5.618 [ 84.240804][ T40] audit: type=1400 audit(1757461997.135:683): avc: denied { getopt } for pid=8188 comm="syz.5.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.594955][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 84.641261][ T8160] ceph: No mds server is up or the cluster is laggy [ 84.713555][ T8194] netlink: 'syz.2.621': attribute type 11 has an invalid length. [ 85.064564][ T40] audit: type=1400 audit(1757461997.955:684): avc: denied { ioctl } for pid=8206 comm="syz.1.625" path="socket:[21900]" dev="sockfs" ino=21900 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 85.121950][ T8211] tipc: Trying to set illegal importance in message [ 85.157841][ T40] audit: type=1400 audit(1757461998.055:685): avc: denied { read } for pid=8212 comm="syz.1.628" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.262487][ T8215] batadv_slave_0: entered promiscuous mode [ 85.292250][ T40] audit: type=1400 audit(1757461998.185:686): avc: denied { append } for pid=8216 comm="syz.1.630" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.471209][ T8220] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 85.537387][ T8224] __nla_validate_parse: 13 callbacks suppressed [ 85.537399][ T8224] netlink: 20 bytes leftover after parsing attributes in process `syz.2.633'. [ 86.164091][ T8262] overlayfs: failed to resolve './file1': -2 [ 86.192239][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 86.219119][ T8280] input: syz0 as /devices/virtual/input/input10 [ 86.221832][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.649'. [ 86.239140][ T8280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=8280 comm=syz.1.648 [ 86.624821][ T6036] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 86.755809][ T8337] smc: net device bond0 applied user defined pnetid SYZ2 [ 86.758197][ T8337] netlink: 14 bytes leftover after parsing attributes in process `syz.0.665'. [ 86.771687][ T8337] smc: removing net device bond0 with user defined pnetid SYZ2 [ 86.776292][ T8337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.777917][ T6036] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 86.782527][ T6036] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.787425][ T6036] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 86.787766][ T8337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.791848][ T6036] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 86.800059][ T6036] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.805530][ T6036] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.806131][ T8337] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 86.809189][ T6036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.811212][ T6036] usb 7-1: config 0 descriptor?? [ 86.820089][ T8289] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 86.829985][ T8337] bond0 (unregistering): Released all slaves [ 86.953561][ T8346] trusted_key: encrypted_key: insufficient parameters specified [ 87.110013][ T8365] binder: Bad value for 'max' [ 87.115118][ T1474] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 87.145124][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 87.194657][ T8373] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 87.230343][ T6036] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 87.246092][ T6036] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 87.252488][ T8379] netlink: 'syz.0.681': attribute type 4 has an invalid length. [ 87.256850][ T8379] netlink: 'syz.0.681': attribute type 4 has an invalid length. [ 87.259426][ T8379] netlink: 'syz.0.681': attribute type 4 has an invalid length. [ 87.261907][ T8379] netlink: 'syz.0.681': attribute type 4 has an invalid length. [ 87.264782][ T8379] netlink: 'syz.0.681': attribute type 4 has an invalid length. [ 87.266443][ T1474] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 87.267516][ T8379] netlink: 'syz.0.681': attribute type 4 has an invalid length. [ 87.270740][ T1474] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.270767][ T1474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.273929][ T8379] netlink: 'syz.0.681': attribute type 4 has an invalid length. [ 87.278878][ T1474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 87.291295][ T1474] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.296761][ T1474] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.300772][ T1474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.310935][ T1474] usb 6-1: config 0 descriptor?? [ 87.313901][ T8339] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 87.350968][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.682'. [ 87.358536][ C2] vcan0: j1939_xtp_rx_dat: no tx connection found [ 87.360953][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.364421][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.367733][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.370982][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.374156][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.377466][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.380674][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.384049][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.387411][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.390689][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.393917][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.397339][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.400806][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.404189][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.407555][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.410884][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.413997][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.417303][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.420495][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.423329][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.425917][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.429167][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.431493][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.434452][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.437245][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.437286][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.437294][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.437325][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.437338][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.437371][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 87.437379][ C2] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 87.452435][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 87.452461][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 87.549464][ T839] usb 7-1: USB disconnect, device number 6 [ 87.925189][ T1474] usbhid 6-1:0.0: can't add hid device: -71 [ 87.927825][ T1474] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 87.934048][ T1474] usb 6-1: USB disconnect, device number 4 [ 88.082149][ T8386] binder: 8385:8386 ioctl c00c620f 200000000140 returned -22 [ 88.228362][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.686'. [ 88.232080][ T8395] Unsupported xt match [ 88.232090][ T8395] unable to load match [ 88.237158][ T8386] Failed to initialize the IGMP autojoin socket (err -2) [ 88.481450][ T8404] validate_nla: 58 callbacks suppressed [ 88.481462][ T8404] netlink: 'syz.1.690': attribute type 1 has an invalid length. [ 88.485805][ T8404] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.690'. [ 88.491482][ T8408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.691'. [ 88.537820][ T8410] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8410 comm=syz.2.692 [ 88.542086][ T8410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8410 comm=syz.2.692 [ 88.632936][ T8424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8424 comm=syz.0.696 [ 88.726658][ T8279] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.863890][ T8279] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.951833][ T5982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.955418][ T5982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.958600][ T5982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.961825][ T5982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.965446][ T5982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.969222][ T8279] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.987968][ T8432] Failed to initialize the IGMP autojoin socket (err -2) [ 88.996706][ T8437] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 89.020328][ T8279] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.162706][ T8432] chnl_net:caif_netlink_parms(): no params data found [ 89.363036][ T8279] bridge_slave_1: left allmulticast mode [ 89.365345][ T8279] bridge_slave_1: left promiscuous mode [ 89.367441][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.371605][ T8279] bridge_slave_0: left allmulticast mode [ 89.373478][ T8279] bridge_slave_0: left promiscuous mode [ 89.377516][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.423862][ T8459] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 89.757451][ T8279] bond1 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 89.760924][ T8279] bond1 (unregistering): (slave ip6gretap2): Releasing backup interface [ 89.980754][ T8279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.986246][ T8279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.991857][ T8279] bond0 (unregistering): Released all slaves [ 90.013666][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 90.013683][ T40] audit: type=1400 audit(1757462002.905:714): avc: denied { mount } for pid=8473 comm="syz.2.706" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 90.078779][ T8279] bond1 (unregistering): Released all slaves [ 90.089202][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.091583][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.094208][ T8432] bridge_slave_0: entered allmulticast mode [ 90.097307][ T8432] bridge_slave_0: entered promiscuous mode [ 90.104647][ T40] audit: type=1400 audit(1757462002.995:715): avc: denied { unmount } for pid=5977 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 90.120384][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.122638][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.124981][ T8432] bridge_slave_1: entered allmulticast mode [ 90.127282][ T40] audit: type=1400 audit(1757462003.025:716): avc: denied { map } for pid=8478 comm="syz.2.707" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 90.127432][ T8432] bridge_slave_1: entered promiscuous mode [ 90.289845][ T8432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.294298][ T40] audit: type=1400 audit(1757462003.185:717): avc: denied { accept } for pid=8488 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.333520][ T8432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.366310][ T40] audit: type=1400 audit(1757462003.265:718): avc: denied { mounton } for pid=8498 comm="syz.2.712" path="/138/bus" dev="tmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 90.366575][ T8499] FAT-fs (nullb0): bogus number of reserved sectors [ 90.376012][ T8499] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 90.381449][ T8499] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 90.499416][ T8432] team0: Port device team_slave_0 added [ 90.517001][ T8432] team0: Port device team_slave_1 added [ 90.526824][ T8503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.552448][ T40] audit: type=1400 audit(1757462003.445:719): avc: denied { create } for pid=8504 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.558460][ T40] audit: type=1400 audit(1757462003.455:720): avc: denied { getopt } for pid=8504 comm="syz.2.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 90.600371][ T8432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.603180][ T8432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.611865][ T8432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.620147][ T8279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.622843][ T8279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.628687][ T8279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.631054][ T8279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.650543][ T8279] veth1_macvtap: left promiscuous mode [ 90.652212][ T8279] veth0_macvtap: left promiscuous mode [ 90.655288][ T8279] veth1_vlan: left promiscuous mode [ 90.656873][ T8279] veth0_vlan: left promiscuous mode [ 90.798794][ T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 90.976139][ T29] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.978979][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.982053][ T29] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.984819][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.989331][ T29] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.992091][ T29] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.994476][ T29] usb 7-1: Product: syz [ 90.995744][ T5975] Bluetooth: hci0: command tx timeout [ 90.995891][ T29] usb 7-1: Manufacturer: syz [ 91.004159][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 91.005840][ T29] cdc_wdm 7-1:1.0: skipping garbage [ 91.013235][ T29] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 91.015110][ T29] cdc_wdm 7-1:1.0: Unknown control protocol [ 91.098903][ T8509] overlayfs: missing 'workdir' [ 91.107720][ T40] audit: type=1400 audit(1757462004.005:721): avc: denied { watch_sb } for pid=8508 comm="syz.0.717" path="/264/file0/file0" dev="tmpfs" ino=1412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.208218][ T40] audit: type=1400 audit(1757462004.105:722): avc: denied { read write } for pid=8504 comm="syz.2.715" name="cdc-wdm0" dev="devtmpfs" ino=2956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 91.218679][ T40] audit: type=1400 audit(1757462004.105:723): avc: denied { open } for pid=8504 comm="syz.2.715" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 91.285396][ T6684] usb 7-1: USB disconnect, device number 7 [ 91.308358][ T8279] team0 (unregistering): Port device team_slave_1 removed [ 91.370112][ T8279] team0 (unregistering): Port device team_slave_0 removed [ 91.696700][ T8521] sock: sock_set_timeout: `syz.2.720' (pid 8521) tries to set negative timeout [ 91.748103][ T8525] __nla_validate_parse: 1 callbacks suppressed [ 91.748118][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.722'. [ 91.906122][ T8432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.909012][ T8432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.919018][ T8432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.124669][ T8535] tipc: Started in network mode [ 92.126412][ T8535] tipc: Node identity 36e6bc54bf45, cluster identity 4711 [ 92.128787][ T8535] tipc: Enabled bearer , priority 0 [ 92.134275][ T8432] hsr_slave_0: entered promiscuous mode [ 92.140139][ T8432] hsr_slave_1: entered promiscuous mode [ 92.147752][ T8547] ALSA: seq fatal error: cannot create timer (-22) [ 92.150612][ T8534] syzkaller0: entered promiscuous mode [ 92.152343][ T8534] syzkaller0: entered allmulticast mode [ 92.257125][ T8534] tipc: Resetting bearer [ 92.273054][ T8560] netlink: 'syz.0.733': attribute type 10 has an invalid length. [ 92.273980][ T8532] tipc: Resetting bearer [ 92.290915][ T8532] tipc: Disabling bearer [ 92.299790][ T8560] hsr_slave_0: left promiscuous mode [ 92.301841][ T8560] hsr_slave_1: left promiscuous mode [ 92.452028][ T8432] netdevsim netdevsim6 netdevsim0: renamed from eth14 [ 92.457013][ T8432] netdevsim netdevsim6 netdevsim1: renamed from eth15 [ 92.462153][ T8432] netdevsim netdevsim6 netdevsim2: renamed from eth16 [ 92.467372][ T8432] netdevsim netdevsim6 netdevsim3: renamed from eth17 [ 92.597393][ T8432] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.604935][ T8592] ubi31: attaching mtd0 [ 92.606339][ T8592] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 92.616217][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.618550][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.632987][ T8596] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 92.638949][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 92.641826][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.644940][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.657484][ T8594] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 92.661759][ T1185] Bluetooth: hci4: Frame reassembly failed (-84) [ 92.851442][ T8432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.000325][ T8641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 93.075207][ T5982] Bluetooth: hci0: command tx timeout [ 93.087190][ T8641] team0: Port device team_slave_0 removed [ 93.161035][ T8432] veth0_vlan: entered promiscuous mode [ 93.173549][ T8432] veth1_vlan: entered promiscuous mode [ 93.190590][ T8660] openvswitch: netlink: Unknown key attributes 2 [ 93.237650][ T8432] veth0_macvtap: entered promiscuous mode [ 93.247007][ T8432] veth1_macvtap: entered promiscuous mode [ 93.282602][ T8432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.298620][ T8432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.303801][ T8432] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 93.311377][ T8432] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 93.317813][ T8432] wireguard: wg0: Could not create IPv4 socket [ 93.321203][ T8432] wireguard: wg1: Could not create IPv4 socket [ 93.324521][ T8432] wireguard: wg2: Could not create IPv4 socket [ 94.384635][ T8687] tipc: Enabled bearer , priority 0 [ 94.386943][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.389612][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.392268][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.395715][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.398694][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.401335][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.404002][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.407540][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.410301][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.413541][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.416506][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.419311][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.422578][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.426320][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.429612][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.432197][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.434824][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.437479][ T8687] tipc: Enabling of bearer rejected, already enabled [ 94.450205][ T8688] tipc: Disabling bearer [ 94.664939][ T5975] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 94.665397][ T5982] Bluetooth: hci4: command 0x1003 tx timeout [ 94.975458][ T6065] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 95.031474][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 95.031490][ T40] audit: type=1400 audit(1757462007.925:739): avc: denied { module_load } for pid=8705 comm="syz.1.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 95.134847][ T6065] usb 7-1: Using ep0 maxpacket: 32 [ 95.138021][ T6065] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 95.140763][ T6065] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 95.143763][ T6065] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 95.147328][ T6065] usb 7-1: config 1 has no interface number 0 [ 95.149311][ T6065] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.152837][ T6065] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 95.158351][ T6065] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 95.161362][ T6065] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.169078][ T6065] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 95.374850][ T838] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 95.547295][ T838] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 95.550207][ T838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.554672][ T838] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 95.557710][ T838] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 95.560426][ T838] usb 6-1: Manufacturer: syz [ 95.566268][ T838] usb 6-1: config 0 descriptor?? [ 95.624914][ T838] rc_core: IR keymap rc-hauppauge not found [ 95.627610][ T838] Registered IR keymap rc-empty [ 95.630496][ T838] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 95.636082][ T838] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 95.720682][ T6065] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 95.841109][ T838] usb 6-1: USB disconnect, device number 5 [ 95.900625][ T8729] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 95.922156][ T34] usb 7-1: USB disconnect, device number 8 [ 95.926143][ T34] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 96.044470][ T8734] Unsupported ieee802154 address type: 0 [ 96.044865][ T40] audit: type=1400 audit(1757462008.935:740): avc: denied { bind } for pid=8733 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 96.046774][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 96.379377][ T8743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.425855][ T5982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.430300][ T5982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.434058][ T5982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.434573][ T40] audit: type=1400 audit(1757462009.325:741): avc: denied { getopt } for pid=8744 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 96.438872][ T5982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.448639][ T5982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.466446][ T8745] Failed to initialize the IGMP autojoin socket (err -2) [ 96.470375][ T8749] netlink: 'syz.0.771': attribute type 3 has an invalid length. [ 96.472955][ T8749] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.771'. [ 96.570514][ T40] audit: type=1400 audit(1757462009.465:742): avc: denied { bind } for pid=8760 comm="syz.0.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.575914][ T8763] fuse: Bad value for 'user_id' [ 96.580372][ T8763] fuse: Bad value for 'user_id' [ 96.606694][ T8765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.777'. [ 96.728603][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 96.731367][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'. [ 96.734225][ T8775] netlink: 'syz.2.780': attribute type 18 has an invalid length. [ 96.808099][ T8784] 9pnet: Found fid 0 not clunked [ 96.878601][ T40] audit: type=1400 audit(1757462009.775:743): avc: denied { mount } for pid=8789 comm="syz.0.783" name="/" dev="ramfs" ino=26972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 96.881958][ T8790] overlayfs: failed to clone upperpath [ 96.925242][ T40] audit: type=1400 audit(1757462009.825:744): avc: denied { ioctl } for pid=8791 comm="syz.1.785" path="socket:[25396]" dev="sockfs" ino=25396 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 96.988556][ T5975] Bluetooth: hci2: unexpected subevent 0x0a length: 107 > 30 [ 96.992083][ T5975] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 96.997327][ T5975] CPU: 0 UID: 0 PID: 5975 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 96.997342][ T5975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 96.997349][ T5975] Workqueue: hci2 hci_rx_work [ 96.997374][ T5975] Call Trace: [ 96.997378][ T5975] [ 96.997383][ T5975] dump_stack_lvl+0x16c/0x1f0 [ 96.997399][ T5975] sysfs_warn_dup+0x7f/0xa0 [ 96.997414][ T5975] sysfs_create_dir_ns+0x24b/0x2b0 [ 96.997427][ T5975] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 96.997440][ T5975] ? find_held_lock+0x2b/0x80 [ 96.997456][ T5975] ? do_raw_spin_unlock+0x172/0x230 [ 96.997469][ T5975] kobject_add_internal+0x2c4/0x9b0 [ 96.997485][ T5975] kobject_add+0x16e/0x240 [ 96.997500][ T5975] ? __pfx_kobject_add+0x10/0x10 [ 96.997515][ T5975] ? do_raw_spin_unlock+0x172/0x230 [ 96.997526][ T5975] ? kobject_put+0xab/0x5a0 [ 96.997542][ T5975] device_add+0x288/0x1aa0 [ 96.997558][ T5975] ? __pfx_dev_set_name+0x10/0x10 [ 96.997568][ T5975] ? __pfx_device_add+0x10/0x10 [ 96.997582][ T5975] ? mgmt_send_event_skb+0x2fb/0x460 [ 96.997597][ T5975] hci_conn_add_sysfs+0x17e/0x230 [ 96.997609][ T5975] le_conn_complete_evt+0x1075/0x1d70 [ 96.997623][ T5975] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 96.997634][ T5975] ? bt_warn+0xe4/0x120 [ 96.997642][ T5975] ? __pfx_bt_warn+0x10/0x10 [ 96.997654][ T5975] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 96.997665][ T5975] ? skb_pull_data+0x166/0x210 [ 96.997679][ T5975] hci_le_meta_evt+0x354/0x5e0 [ 96.997690][ T5975] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 96.997703][ T5975] hci_event_packet+0x682/0x11c0 [ 96.997713][ T5975] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 96.997726][ T5975] ? __pfx_hci_event_packet+0x10/0x10 [ 96.997737][ T5975] ? kcov_remote_start+0x3c9/0x6d0 [ 96.997749][ T5975] ? lockdep_hardirqs_on+0x7c/0x110 [ 96.997769][ T5975] hci_rx_work+0x2c5/0x16b0 [ 96.997781][ T5975] ? rcu_is_watching+0x12/0xc0 [ 96.997796][ T5975] process_one_work+0x9cc/0x1b70 [ 96.997812][ T5975] ? __pfx_process_one_work+0x10/0x10 [ 96.997828][ T5975] ? assign_work+0x1a0/0x250 [ 96.997840][ T5975] worker_thread+0x6c8/0xf10 [ 96.997856][ T5975] ? __kthread_parkme+0x19e/0x250 [ 96.997872][ T5975] ? __pfx_worker_thread+0x10/0x10 [ 96.997884][ T5975] kthread+0x3c2/0x780 [ 96.997895][ T5975] ? __pfx_kthread+0x10/0x10 [ 96.997907][ T5975] ? rcu_is_watching+0x12/0xc0 [ 96.997919][ T5975] ? __pfx_kthread+0x10/0x10 [ 96.997929][ T5975] ret_from_fork+0x5d4/0x6f0 [ 96.997939][ T5975] ? __pfx_kthread+0x10/0x10 [ 96.997949][ T5975] ret_from_fork_asm+0x1a/0x30 [ 96.997968][ T5975] [ 96.997984][ T5975] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 97.084541][ T5975] Bluetooth: hci2: failed to register connection device [ 97.168100][ T40] audit: type=1400 audit(1757462010.065:745): avc: denied { append } for pid=8806 comm="syz.2.791" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 97.175768][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 97.344825][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 97.348411][ T34] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 97.350961][ T34] usb 6-1: config 0 has no interface number 0 [ 97.354773][ T34] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 97.357717][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.360209][ T34] usb 6-1: Product: syz [ 97.360218][ T34] usb 6-1: Manufacturer: syz [ 97.360226][ T34] usb 6-1: SerialNumber: syz [ 97.361610][ T34] usb 6-1: config 0 descriptor?? [ 97.368320][ T34] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 97.371861][ T34] usb 6-1: selecting invalid altsetting 1 [ 97.373544][ T34] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 97.379518][ T34] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 97.383131][ T34] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 97.387179][ T34] usb 6-1: media controller created [ 97.399636][ T34] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.412982][ T8814] dlm: Unknown command passed to DLM device : 255 [ 97.412982][ T8814] [ 97.414019][ T40] audit: type=1400 audit(1757462010.305:746): avc: denied { setopt } for pid=8813 comm="syz.2.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 97.414087][ T8815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8815 comm=syz.2.793 [ 97.458703][ T8819] vfat: Unknown parameter 'discard' [ 97.494365][ T40] audit: type=1400 audit(1757462010.385:747): avc: denied { write } for pid=8820 comm="syz.2.795" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 97.494957][ T8821] random: crng reseeded on system resumption [ 97.504159][ T40] audit: type=1400 audit(1757462010.385:748): avc: denied { open } for pid=8820 comm="syz.2.795" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 97.554136][ T8827] block nbd2: Attempted send on invalid socket [ 97.556443][ T8827] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 97.559899][ T8827] XFS (nbd2): SB validate failed with error -5. [ 97.628024][ T8842] ceph: No mds server is up or the cluster is laggy [ 97.631425][ T838] libceph: mon0 (1)[c::]:6789 connect error [ 97.722959][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.804'. [ 97.734594][ T8859] bridge3: entered allmulticast mode [ 97.908361][ T5982] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 97.987913][ T8885] overlay: Bad value for 'verity' [ 98.139736][ T8745] netdevsim netdevsim6 netdevsim0: renamed from eth14 [ 98.143991][ T8745] netdevsim netdevsim6 netdevsim1: renamed from eth15 [ 98.149301][ T8745] netdevsim netdevsim6 netdevsim2: renamed from eth16 [ 98.153864][ T8899] netlink: 'syz.2.816': attribute type 13 has an invalid length. [ 98.157512][ T8745] netdevsim netdevsim6 netdevsim3: renamed from eth17 [ 98.416842][ T8745] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 98.422928][ T8745] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 98.429295][ T8745] wireguard: wg0: Could not create IPv4 socket [ 98.432230][ T8745] wireguard: wg1: Could not create IPv4 socket [ 98.435146][ T8745] wireguard: wg2: Could not create IPv4 socket [ 98.517350][ T34] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 98.520957][ T8793] usb 6-1: dvb_usb_ce6230: I2C read not implemented [ 98.523389][ T34] zl10353_read_register: readreg error (reg=127, ret==-110) [ 98.526852][ T34] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 98.546129][ T34] usb 6-1: USB disconnect, device number 6 [ 98.604873][ T6065] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 98.764882][ T6065] usb 7-1: Using ep0 maxpacket: 8 [ 98.770411][ T6065] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 98.773500][ T6065] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.777458][ T6065] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.780769][ T6065] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.783535][ T6065] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.788999][ T6065] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.792364][ T6065] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.003384][ T6065] usb 7-1: usb_control_msg returned -32 [ 99.005678][ T6065] usbtmc 7-1:16.0: can't read capabilities [ 99.059894][ T8970] loop7: detected capacity change from 0 to 7 [ 99.103238][ T8970] Dev loop7: unable to read RDB block 7 [ 99.106679][ T8970] loop7: unable to read partition table [ 99.109165][ T8970] loop7: partition table beyond EOD, truncated [ 99.112010][ T8970] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 99.344956][ T61] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 99.359036][ T8996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.362370][ T8996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.367235][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 99.511457][ T61] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 99.515269][ T61] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.518536][ T61] usb 6-1: Product: syz [ 99.520284][ T61] usb 6-1: Manufacturer: syz [ 99.522179][ T61] usb 6-1: SerialNumber: syz [ 99.529437][ T61] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 99.558552][ T29] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 99.772070][ T839] usb 6-1: USB disconnect, device number 7 [ 99.976516][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 99.979740][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 99.988705][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'. [ 100.346457][ T9015] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 100.402902][ T9018] 9pnet_virtio: no channels available for device 127.0.0.1 [ 100.403240][ T9020] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 100.403558][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.844'. [ 100.416480][ T9020] CIFS mount error: No usable UNC path provided in device string! [ 100.416480][ T9020] [ 100.420154][ T9020] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 100.585236][ T29] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 100.588628][ T29] ath9k_htc: Failed to initialize the device [ 100.592335][ T839] usb 6-1: ath9k_htc: USB layer deinitialized [ 101.217517][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'. [ 101.220339][ T9057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.857'. [ 101.223115][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.857'. [ 101.227176][ T9057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.857'. [ 101.230871][ T9057] netlink: 104 bytes leftover after parsing attributes in process `syz.1.857'. [ 101.281261][ T9061] netlink: 48 bytes leftover after parsing attributes in process `syz.0.859'. [ 101.286702][ T9061] : renamed from bridge_slave_0 (while UP) [ 101.292168][ T9061] bridge0: port 1() entered disabled state [ 101.376283][ T838] usb 7-1: USB disconnect, device number 9 [ 101.757991][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 101.758008][ T40] audit: type=1400 audit(1757462014.655:762): avc: denied { write } for pid=9075 comm="syz.2.864" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 101.760725][ T9077] rtc_cmos 00:05: Alarms can be up to one day in the future [ 101.852713][ T5982] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 101.854131][ T40] audit: type=1400 audit(1757462014.745:763): avc: denied { ioctl } for pid=9078 comm="syz.2.865" path="socket:[28702]" dev="sockfs" ino=28702 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.894687][ T9082] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.866'. [ 102.186462][ T9093] [U] [ 102.333492][ T40] audit: type=1400 audit(1757462015.225:764): avc: denied { read write } for pid=9105 comm="syz.1.874" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.340594][ T40] audit: type=1400 audit(1757462015.225:765): avc: denied { open } for pid=9105 comm="syz.1.874" path="/177/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.350203][ T40] audit: type=1800 audit(1757462015.235:766): pid=9106 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.874" name="/" dev="9p" ino=2 res=0 errno=0 [ 102.407295][ T9102] syzkaller0: entered promiscuous mode [ 102.409011][ T9102] syzkaller0: entered allmulticast mode [ 102.504866][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 102.571689][ T40] audit: type=1400 audit(1757462015.465:767): avc: denied { accept } for pid=9114 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 103.966504][ T40] audit: type=1400 audit(1757462016.865:768): avc: denied { append } for pid=9134 comm="syz.1.882" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.995923][ T40] audit: type=1400 audit(1757462016.895:769): avc: denied { setopt } for pid=9138 comm="syz.1.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.028279][ T40] audit: type=1400 audit(1757462016.925:770): avc: denied { lock } for pid=9142 comm="syz.1.887" path="socket:[28733]" dev="sockfs" ino=28733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 104.034339][ T9143] netlink: 36 bytes leftover after parsing attributes in process `syz.1.887'. [ 104.068027][ T40] audit: type=1400 audit(1757462016.965:771): avc: denied { watch watch_reads } for pid=9145 comm="syz.2.889" path="pipe:[5785]" dev="pipefs" ino=5785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 104.114586][ T9151] tc_dump_action: action bad kind [ 104.251043][ T9162] smc: adding net device bond0 with user defined pnetid SYZ2 [ 104.281959][ T9167] netlink: 64 bytes leftover after parsing attributes in process `syz.0.896'. [ 104.337134][ T5975] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.340834][ T5975] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.343860][ T5975] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.346786][ T5975] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.349555][ T5975] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.352168][ T9178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9178 comm=syz.1.895 [ 104.360000][ T9176] Failed to initialize the IGMP autojoin socket (err -2) [ 105.112650][ T9176] netdevsim netdevsim6 netdevsim0: renamed from eth14 [ 105.129187][ T9176] netdevsim netdevsim6 netdevsim1: renamed from eth15 [ 105.149273][ T9176] netdevsim netdevsim6 netdevsim2: renamed from eth16 [ 105.153832][ T9176] netdevsim netdevsim6 netdevsim3: renamed from eth17 [ 105.190424][ T9207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.906'. [ 105.211114][ T9202] overlayfs: upper fs does not support tmpfile. [ 105.340203][ T9235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.342544][ T9235] IPv6: NLM_F_CREATE should be set when creating new route [ 105.344672][ T9235] IPv6: NLM_F_CREATE should be set when creating new route [ 105.346732][ T9235] IPv6: NLM_F_CREATE should be set when creating new route [ 105.350418][ T9235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.433252][ T9250] erspan0: entered promiscuous mode [ 105.462800][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 105.472666][ T9176] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 105.479205][ T9176] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 105.482653][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 105.484992][ T9176] wireguard: wg0: Could not create IPv4 socket [ 105.489337][ T9176] wireguard: wg1: Could not create IPv4 socket [ 105.490296][ T9261] 9pnet_fd: p9_fd_create_tcp (9261): problem creating socket [ 105.492282][ T9176] wireguard: wg2: Could not create IPv4 socket [ 105.651943][ T9283] netlink: 84 bytes leftover after parsing attributes in process `syz.0.929'. [ 105.655993][ T9283] netlink: 84 bytes leftover after parsing attributes in process `syz.0.929'. [ 105.716110][ T9292] netlink: 24 bytes leftover after parsing attributes in process `syz.1.933'. [ 105.727573][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 105.731976][ T9288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.737002][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 105.782444][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.935'. [ 105.980494][ T9310] serio: Serial port ptm1 [ 106.424935][ T5982] Bluetooth: hci2: command tx timeout [ 107.154829][ T838] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 107.306774][ T838] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.310626][ T838] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.315230][ T838] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.318082][ T838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.464878][ T5975] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 107.523227][ T838] usb 6-1: usb_control_msg returned -32 [ 107.525595][ T838] usbtmc 6-1:16.0: can't read capabilities [ 107.534338][ T6053] usb 6-1: USB disconnect, device number 8 [ 107.599074][ T9361] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 108.081614][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 108.081624][ T40] audit: type=1326 audit(1757462020.975:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.2.962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638578eba9 code=0x7ffc0000 [ 108.092978][ T40] audit: type=1326 audit(1757462020.975:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.2.962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638578eba9 code=0x7ffc0000 [ 108.102675][ T40] audit: type=1326 audit(1757462020.975:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.2.962" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f638578eba9 code=0x7ffc0000 [ 108.110771][ T40] audit: type=1326 audit(1757462020.975:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.2.962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638578eba9 code=0x7ffc0000 [ 108.118540][ T40] audit: type=1326 audit(1757462020.975:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.2.962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638578eba9 code=0x7ffc0000 [ 108.125593][ T40] audit: type=1326 audit(1757462020.975:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.2.962" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f638578eba9 code=0x7ffc0000 [ 108.132821][ T40] audit: type=1326 audit(1757462020.975:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.2.962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638578eba9 code=0x7ffc0000 [ 108.140118][ T40] audit: type=1326 audit(1757462020.975:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.2.962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638578eba9 code=0x7ffc0000 [ 108.148370][ T40] audit: type=1326 audit(1757462020.975:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.2.962" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f638578eba9 code=0x7ffc0000 [ 108.155806][ T40] audit: type=1326 audit(1757462020.975:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.2.962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f638578eba9 code=0x7ffc0000 [ 108.262673][ T9413] netlink: 'syz.2.969': attribute type 6 has an invalid length. [ 108.287991][ T9415] overlayfs: failed to clone upperpath [ 108.307328][ T9420] tipc: Enabled bearer , priority 0 [ 108.310045][ T9420] syzkaller0: entered promiscuous mode [ 108.311756][ T9420] syzkaller0: entered allmulticast mode [ 108.326012][ T9420] tipc: Resetting bearer [ 108.333374][ T9420] tipc: Resetting bearer [ 108.344325][ T9420] tipc: Disabling bearer [ 108.511265][ T9435] debugfs: Bad value for 'gid' [ 108.512841][ T9435] debugfs: Bad value for 'gid' [ 108.829697][ T9456] random: crng reseeded on system resumption [ 108.941507][ T9464] syzkaller0: entered promiscuous mode [ 109.132831][ T9467] overlayfs: failed to clone upperpath [ 109.685367][ T9473] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 109.787323][ T9475] __nla_validate_parse: 2 callbacks suppressed [ 109.787338][ T9475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.987'. [ 109.934297][ T9477] overlayfs: failed to clone upperpath [ 110.112481][ T9506] syz.0.996 (9506): attempted to duplicate a private mapping with mremap. This is not supported. [ 110.122841][ T9508] bridge0: entered promiscuous mode [ 110.124859][ T9508] macsec0: entered promiscuous mode [ 110.156401][ T9514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=9514 comm=syz.1.999 [ 110.161273][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 110.242005][ T9523] binder: 9520:9523 ioctl c0306201 200000000080 returned -14 [ 110.304239][ T9528] geneve2: entered promiscuous mode [ 110.306029][ T9528] geneve2: entered allmulticast mode [ 110.341299][ T9532] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 110.501181][ T9538] netlink: 'syz.0.1007': attribute type 30 has an invalid length. [ 110.505615][ T9538] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 110.509545][ T9538] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 110.517865][ T9542] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1008'. [ 110.610992][ T9553] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 110.630194][ T9555] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 110.639894][ T9557] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1015'. [ 110.766847][ T9569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=9569 comm=syz.2.1019 [ 110.936505][ T9594] trusted_key: encrypted_key: insufficient parameters specified [ 110.944342][ T9594] ================================================================== [ 110.944356][ T9594] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 110.944390][ T9594] Write of size 8 at addr ffffc90005378000 by task syz.2.1026/9594 [ 110.944405][ T9594] [ 110.944413][ T9594] CPU: 3 UID: 0 PID: 9594 Comm: syz.2.1026 Not tainted syzkaller #0 PREEMPT(full) [ 110.944434][ T9594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.944446][ T9594] Call Trace: [ 110.944451][ T9594] [ 110.944458][ T9594] dump_stack_lvl+0x116/0x1f0 [ 110.944485][ T9594] print_report+0xcd/0x630 [ 110.944505][ T9594] ? __virt_addr_valid+0x81/0x610 [ 110.944531][ T9594] ? sys_imageblit+0x1a6f/0x1e60 [ 110.944556][ T9594] kasan_report+0xe0/0x110 [ 110.944575][ T9594] ? sys_imageblit+0x1a6f/0x1e60 [ 110.944604][ T9594] sys_imageblit+0x1a6f/0x1e60 [ 110.944632][ T9594] ? __pfx_sys_imageblit+0x10/0x10 [ 110.944658][ T9594] ? lock_acquire+0x179/0x350 [ 110.944685][ T9594] ? __page_table_check_ptes_set+0x1ae/0x420 [ 110.944721][ T9594] ? find_held_lock+0x2b/0x80 [ 110.944744][ T9594] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 110.944764][ T9594] ? pfn_valid+0x26a/0x4d0 [ 110.944787][ T9594] ? fb_pad_unaligned_buffer+0x38d/0x440 [ 110.944811][ T9594] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 110.944834][ T9594] bit_putcs+0x90f/0xde0 [ 110.944860][ T9594] ? __pfx_bit_putcs+0x10/0x10 [ 110.944881][ T9594] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 110.944906][ T9594] ? fb_get_color_depth+0x120/0x250 [ 110.944924][ T9594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.944946][ T9594] ? __pfx_bit_putcs+0x10/0x10 [ 110.944967][ T9594] fbcon_putcs+0x384/0x4a0 [ 110.944988][ T9594] do_update_region+0x2e6/0x3f0 [ 110.945018][ T9594] invert_screen+0x1e4/0x590 [ 110.945038][ T9594] ? __pfx_invert_screen+0x10/0x10 [ 110.945059][ T9594] ? __pfx_complement_pos+0x10/0x10 [ 110.945080][ T9594] ? vc_do_resize+0x24d/0x10e0 [ 110.945098][ T9594] ? __vmalloc_node_noprof+0xad/0xf0 [ 110.945125][ T9594] clear_selection+0x59/0x70 [ 110.945147][ T9594] vc_do_resize+0xd9b/0x10e0 [ 110.945172][ T9594] ? __pfx_vc_do_resize+0x10/0x10 [ 110.945191][ T9594] ? __lock_acquire+0xb97/0x1ce0 [ 110.945220][ T9594] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 110.945245][ T9594] fbcon_set_disp+0x7ad/0xe50 [ 110.945260][ T9594] ? fbcon_set_bitops+0x14d/0x1c0 [ 110.945281][ T9594] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 110.945306][ T9594] set_con2fb_map+0x703/0x1080 [ 110.945329][ T9594] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 110.945352][ T9594] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 110.945376][ T9594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.945397][ T9594] do_fb_ioctl+0x328/0x7e0 [ 110.945422][ T9594] ? __pfx_do_fb_ioctl+0x10/0x10 [ 110.945452][ T9594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.945483][ T9594] ? selinux_file_ioctl+0x180/0x270 [ 110.945510][ T9594] fb_ioctl+0xe5/0x150 [ 110.945533][ T9594] ? __pfx_fb_ioctl+0x10/0x10 [ 110.945557][ T9594] __x64_sys_ioctl+0x18b/0x210 [ 110.945586][ T9594] do_syscall_64+0xcd/0x4c0 [ 110.945610][ T9594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.945629][ T9594] RIP: 0033:0x7f638578eba9 [ 110.945644][ T9594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.945662][ T9594] RSP: 002b:00007f63865ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.945680][ T9594] RAX: ffffffffffffffda RBX: 00007f63859d5fa0 RCX: 00007f638578eba9 [ 110.945692][ T9594] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 110.945703][ T9594] RBP: 00007f6385811e19 R08: 0000000000000000 R09: 0000000000000000 [ 110.945714][ T9594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.945725][ T9594] R13: 00007f63859d6038 R14: 00007f63859d5fa0 R15: 00007ffe4740a7f8 [ 110.945742][ T9594] [ 110.945748][ T9594] [ 110.945753][ T9594] The buggy address belongs to a vmalloc virtual mapping [ 110.945766][ T9594] Memory state around the buggy address: [ 110.945781][ T9594] BUG: unable to handle page fault for address: fffff52000a6efe0 [ 110.945790][ T9594] #PF: supervisor read access in kernel mode [ 110.945800][ T9594] #PF: error_code(0x0000) - not-present page [ 110.945811][ T9594] PGD 17ffed067 P4D 17ffed067 PUD 1ca95067 PMD 2520c067 PTE 0 [ 110.945843][ T9594] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 110.945859][ T9594] CPU: 3 UID: 0 PID: 9594 Comm: syz.2.1026 Not tainted syzkaller #0 PREEMPT(full) [ 110.945879][ T9594] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 110.945890][ T9594] RIP: 0010:kasan_metadata_fetch_row+0x15/0x30 [ 110.945918][ T9594] Code: ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ee 03 48 01 c6 <48> 8b 06 48 89 07 48 8b 46 08 48 89 47 08 e9 48 5d 75 09 0f 1f 84 [ 110.945935][ T9594] RSP: 0018:ffffc90004ce7370 EFLAGS: 00010082 [ 110.945949][ T9594] RAX: dffffc0000000000 RBX: ffffc90005377f00 RCX: 1ffff9200099ce40 [ 110.945961][ T9594] RDX: 0000000000000000 RSI: fffff52000a6efe0 RDI: ffffc90004ce737c [ 110.945972][ T9594] RBP: 00000000fffffffe R08: 0000000000000007 R09: 0000000000000000 [ 110.945983][ T9594] R10: 0000000000000014 R11: 0000000000000000 R12: ffffc90005377f80 [ 110.945995][ T9594] R13: ffffc90005378000 R14: 0000000000000296 R15: ffffffff8530fd2f [ 110.946006][ T9594] FS: 00007f63865ae6c0(0000) GS:ffff8880d69b5000(0000) knlGS:0000000000000000 [ 110.946041][ T9594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.946057][ T9594] CR2: fffff52000a6efe0 CR3: 000000005ac6c000 CR4: 0000000000352ef0 [ 110.946069][ T9594] DR0: 0000000000000000 DR1: 000000000000003b DR2: 0000000000000000 [ 110.946081][ T9594] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 110.946094][ T9594] Call Trace: [ 110.946099][ T9594] [ 110.946105][ T9594] print_report+0x296/0x630 [ 110.946127][ T9594] ? sys_imageblit+0x1a6f/0x1e60 [ 110.946158][ T9594] kasan_report+0xe0/0x110 [ 110.946179][ T9594] ? sys_imageblit+0x1a6f/0x1e60 [ 110.946209][ T9594] sys_imageblit+0x1a6f/0x1e60 [ 110.946241][ T9594] ? __pfx_sys_imageblit+0x10/0x10 [ 110.946269][ T9594] ? lock_acquire+0x179/0x350 [ 110.946296][ T9594] ? __page_table_check_ptes_set+0x1ae/0x420 [ 110.946315][ T9594] ? find_held_lock+0x2b/0x80 [ 110.946336][ T9594] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 110.946356][ T9594] ? pfn_valid+0x26a/0x4d0 [ 110.946377][ T9594] ? fb_pad_unaligned_buffer+0x38d/0x440 [ 110.946400][ T9594] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 110.946422][ T9594] bit_putcs+0x90f/0xde0 [ 110.946449][ T9594] ? __pfx_bit_putcs+0x10/0x10 [ 110.946470][ T9594] ? __vmap_pages_range_noflush+0x1d0/0x230 [ 110.946496][ T9594] ? fb_get_color_depth+0x120/0x250 [ 110.946516][ T9594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.946538][ T9594] ? __pfx_bit_putcs+0x10/0x10 [ 110.946559][ T9594] fbcon_putcs+0x384/0x4a0 [ 110.946579][ T9594] do_update_region+0x2e6/0x3f0 [ 110.946608][ T9594] invert_screen+0x1e4/0x590 [ 110.946630][ T9594] ? __pfx_invert_screen+0x10/0x10 [ 110.946647][ T9594] ? __pfx_complement_pos+0x10/0x10 [ 110.946666][ T9594] ? vc_do_resize+0x24d/0x10e0 [ 110.946683][ T9594] ? __vmalloc_node_noprof+0xad/0xf0 [ 110.946706][ T9594] clear_selection+0x59/0x70 [ 110.946722][ T9594] vc_do_resize+0xd9b/0x10e0 [ 110.946746][ T9594] ? __pfx_vc_do_resize+0x10/0x10 [ 110.946764][ T9594] ? __lock_acquire+0xb97/0x1ce0 [ 110.946789][ T9594] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 110.946815][ T9594] fbcon_set_disp+0x7ad/0xe50 [ 110.946833][ T9594] ? fbcon_set_bitops+0x14d/0x1c0 [ 110.946855][ T9594] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 110.946880][ T9594] set_con2fb_map+0x703/0x1080 [ 110.946901][ T9594] fbcon_set_con2fb_map_ioctl+0x16c/0x220 [ 110.946923][ T9594] ? __pfx_fbcon_set_con2fb_map_ioctl+0x10/0x10 [ 110.946946][ T9594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.946967][ T9594] do_fb_ioctl+0x328/0x7e0 [ 110.946991][ T9594] ? __pfx_do_fb_ioctl+0x10/0x10 [ 110.947019][ T9594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.947048][ T9594] ? selinux_file_ioctl+0x180/0x270 [ 110.947073][ T9594] fb_ioctl+0xe5/0x150 [ 110.947093][ T9594] ? __pfx_fb_ioctl+0x10/0x10 [ 110.947116][ T9594] __x64_sys_ioctl+0x18b/0x210 [ 110.947148][ T9594] do_syscall_64+0xcd/0x4c0 [ 110.947173][ T9594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.947192][ T9594] RIP: 0033:0x7f638578eba9 [ 110.947206][ T9594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.947225][ T9594] RSP: 002b:00007f63865ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.947241][ T9594] RAX: ffffffffffffffda RBX: 00007f63859d5fa0 RCX: 00007f638578eba9 [ 110.947253][ T9594] RDX: 0000200000000180 RSI: 0000000000004610 RDI: 0000000000000003 [ 110.947264][ T9594] RBP: 00007f6385811e19 R08: 0000000000000000 R09: 0000000000000000 [ 110.947275][ T9594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.947285][ T9594] R13: 00007f63859d6038 R14: 00007f63859d5fa0 R15: 00007ffe4740a7f8 [ 110.947302][ T9594] [ 110.947309][ T9594] Modules linked in: [ 110.947319][ T9594] CR2: fffff52000a6efe0 [ 110.947328][ T9594] ---[ end trace 0000000000000000 ]--- [ 110.947335][ T9594] RIP: 0010:kasan_metadata_fetch_row+0x15/0x30 [ 110.947365][ T9594] Code: ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 b8 00 00 00 00 00 fc ff df 48 c1 ee 03 48 01 c6 <48> 8b 06 48 89 07 48 8b 46 08 48 89 47 08 e9 48 5d 75 09 0f 1f 84 [ 110.947383][ T9594] RSP: 0018:ffffc90004ce7370 EFLAGS: 00010082 [ 110.947398][ T9594] RAX: dffffc0000000000 RBX: ffffc90005377f00 RCX: 1ffff9200099ce40 [ 110.947410][ T9594] RDX: 0000000000000000 RSI: fffff52000a6efe0 RDI: ffffc90004ce737c [ 110.947421][ T9594] RBP: 00000000fffffffe R08: 0000000000000007 R09: 0000000000000000 [ 110.947432][ T9594] R10: 0000000000000014 R11: 0000000000000000 R12: ffffc90005377f80 [ 110.947443][ T9594] R13: ffffc90005378000 R14: 0000000000000296 R15: ffffffff8530fd2f [ 110.947454][ T9594] FS: 00007f63865ae6c0(0000) GS:ffff8880d69b5000(0000) knlGS:0000000000000000 [ 110.947470][ T9594] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.947482][ T9594] CR2: fffff52000a6efe0 CR3: 000000005ac6c000 CR4: 0000000000352ef0 [ 110.947543][ T9594] DR0: 0000000000000000 DR1: 000000000000003b DR2: 0000000000000000 [ 110.947556][ T9594] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 110.947570][ T9594] Kernel panic - not syncing: Fatal exception [ 110.948345][ T9594] Kernel Offset: disabled VM DIAGNOSIS: 23:53:44 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffffffff8e2977c0 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=ffffc90000007ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c29b089 CR3=0000000027139000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 050225dfdc020000 00060001001a0000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd628a9e76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd628a9e76 00007ffd628a9e7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13b4812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13b4812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13b4812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13b4812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13b4812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13b4812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13b49a74a8 00007f13b49a74a0 00007f13b49a7498 00007f13b49a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13b550d100 00007f13b49a7460 00007f13b49a0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13b49a74b8 00007f13b49a74b0 00007f13b49a74a8 00007f13b49a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801e2a2440 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000001 RSP=ffffc900006a0fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=ffffc900006a0ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555571117808 CR3=00000000513bb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000f8000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4740ab80 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4740ad06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4740ad06 00007ffe4740ad0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6385812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6385812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6385812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6385812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6385812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6385812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080010001 RBX=0000000000000000 RCX=ffffffff81608bf0 RDX=ffff88801e2a4880 RSI=ffffffff81608c38 RDI=ffffffff93dbcfe0 RBP=0000000000000002 RSP=ffffc90000648fd0 R8 =0000000000000001 R9 =fffffbfff27b79fc R10=ffffffff93dbcfe7 R11=ffffc90000648ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81608c39 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3bd640 CR3=000000004c164000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000004010010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef3336526 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef3336526 00007ffef333652c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f020f012e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f020f012e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f020f012e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f020f012e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f020f012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f020f012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a000801000000 0000000005000000 0000000000070014 0000000100010008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f020fd0d100 00007f020f1a7460 00007f020f1a0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f020f1a74b8 00007f020f1a74b0 00007f020f1a74a8 00007f020f1a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646ef5 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc90004ce6c00 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030396366666666 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b115060 R15=ffffffff85646e90 RIP=ffffffff85646f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f63865ae6c0 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=fffff52000a6efe0 CR3=000000005ac6c000 CR4=00352ef0 DR0=0000000000000000 DR1=000000000000003b DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000f8000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4740ad06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe4740ad06 00007ffe4740ad0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6385812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6385812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6385812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6385812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6385812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6385812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63859a74a8 00007f63859a74a0 00007f63859a7498 00007f63859a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f638650d100 00007f63859a7460 00007f63859a7478 00007f63859a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f63859a74b8 00007f63859a74b0 00007f63859a74a8 00007f63859a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000