last executing test programs: 55.201542306s ago: executing program 1 (id=643): r0 = socket$inet6(0xa, 0x3, 0x5) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000002}}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b70800000000ff907b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200900, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000100)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0004010a0000000d0085a168216b46d32345653600648d040012000a00050049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320004d1ddf66ed538f252325000"/120, 0x78, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x301800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pimreg1\x00', 0x800}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0xc0a85322, &(0x7f0000000100)={{0x0, 0xfa}, {0x0, 0xa}, 0x0, 0x1}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880) ioctl$SIOCSIFHWADDR(r7, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="204004006ed9"}) tkill(0x0, 0x7) 55.108467474s ago: executing program 1 (id=644): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x39d202, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x141, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000200)={0x50, 0x0, r6, {0x7, 0x29, 0x20200}}, 0x50) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001440)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000003980)={0x0, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, @l2={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, @ethernet={0x306, @remote}, 0x7, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9, 0xfff, 0xff}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000080)=r10, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x4, 0x8, 0x801}, 0x14}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf25010000000000000009410000004c001800000096756470"], 0x68}, 0x1, 0x0, 0x0, 0x20004080}, 0x46010) sendmsg$netlink(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10", @ANYBLOB="675df2ebeb8202ed886af8605456"], 0x30}], 0x1, 0x0, 0x0, 0x20004000}, 0x0) r12 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 54.249196923s ago: executing program 1 (id=659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008510000002000000d6000000000000ed9400007b000000008500000018000000950000006c000000"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x80) (async, rerun: 32) socket$inet6(0xa, 0x2, 0x0) (rerun: 32) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @multicast, 'ip6gretap0\x00'}}, 0x1e) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@empty, @local, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8864, 0x6, 0x0, 0x1}}, {@llc={0x8864, {@llc={0xf4, 0x80, "1a"}}}}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) (async, rerun: 64) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64) connect$netrom(r3, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async, rerun: 64) listen(r4, 0x80) (rerun: 64) accept$netrom(r4, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) recvmmsg(r3, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20048}, 0x80) (async, rerun: 32) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="000000000000000018200000", @ANYRES32, @ANYBLOB="00000000000000008500000000009500000000000000181200000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x3, 0x0, 0x2) (async, rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) mount(0x0, 0x0, &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x11, "25263408eb2f1b51ffc86d031c0496df1a"}, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (rerun: 32) 54.153624357s ago: executing program 1 (id=662): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0xc3, 0x0, 0x4, "797b6dfd09fafb9c00fe381f1b12ef25", "6c0bd8b7e8b1119ae5dee4610ce49baa0cdddea23c8621ee5854162091aadf2c6c79396e84e39769de3c8ea9f1bde96bfbe02c399cc7dfa3bcbd95427845b4e9d1f53dda16717ec543e26d3801fc08b922704beef94d53995ca0cae82df5e7c6b44343a36b1cd4915cdfcf10c7d1d13dc558c2f6d39090a94c88dcbc25a87cc1ad9acc85fb341b6368034e9aa22cc3a0e7df11620762662566a641ce665fa6a60595ac392100b8928f856682e239"}, 0xc3, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x8, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54cfe062}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_DELCHAIN={0x88, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x45, 0xc, "f2c09f48798faa7536438503ec456acdc341680ffe36f35b3e1f03a6945b890c71f1a39944110b11445549bd55d364b7b422e6bec604f56678cb4c5c1a9b889b0e"}]}, @NFT_MSG_DELCHAIN={0x114, 0x5, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3398b54d}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x222b5f79}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}]}, @NFTA_CHAIN_USERDATA={0x90, 0xc, "bb946c557fb22d66422030098b9f6d06ab8a931db281d050861c3e8a45fb22dd5151291dd07d01d32449403e7a7bdbbbea56badc0ed8fbaf5c3ad3e93b5889f1570e8d494e42ae4a1888ebe6122db05efb7f8edc1b39ef8bb4ea5d5fe71266a2573ef974f3bb2a5da199efae3d54cfa6add8250f0f9c3457bbd79f84aa8574451f432164a628cb8cbb1c957e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x234}, 0x1, 0x0, 0x0, 0x8804}, 0x8000) r2 = openat(r1, &(0x7f00000004c0)='./file0\x00', 0x40000, 0x144) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CDROMPAUSE(r4, 0x5301) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000540)={0x0, 0x0, 0x6, 0x0, 0xab8}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@ifindex, 0x1e, 0x0, 0xb0cc, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@cgroup=r1, r4, 0x1, 0x2038, 0x0, @void, @void, @value=r6, @void, r5}, 0x20) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000740)) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000780)={r4}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)=r1}, 0x20) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x200000, 0x0) io_uring_enter(r7, 0x40ef, 0xce87, 0x38, &(0x7f00000008c0)={[0x10000]}, 0x8) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f0000000900)={0x1, 0xc000000000, 0x3}) openat(r4, &(0x7f0000000940)='./file0\x00', 0x2c000, 0x1b0) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) ioctl(r1, 0xc0000000, &(0x7f00000009c0)="18d108b2dde5aedb16e8212720f61a1ff34eeec0e59296928892eef4423be341ac327b1b73575030a706a6fef9ceccff77031082a5c94b8075a5da653d948f27053c564b294ce4fe1d3d960310a896fb680dcddce7e9192315e6c7749aefd1643bbafb47b64a0a4b07e0") exit(0x8244) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x50, r8, 0x2497b000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x58, &(0x7f0000000a40)}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000b00)=r9, 0x4) writev(r3, &(0x7f0000001080)=[{&(0x7f0000000b40)="44a92743a4f1bc0b757b8ba3f1ddfe6a847adf0a9df1c66fd8e11372729f7bafa89ad636cbddc4dd8f46e528e51165e56e3d527b2488101bf7a8fb515456d0f11444459729faf680e61fa8f741cbfc25a33a72270026e656ad9dba74c2ec47162b57782c6cc9bf5a116a7fe9149e2b461751063077e078c71aa927041e4d274ebe6e8410", 0x84}, {&(0x7f0000000c00)="a0c61f1c3b05df599586f7c7c6e3177542da85b1033668a9a83304d4823fd7721ea0d2af5b00e310bf947f2795a6163b24b05db2e1d28708a403925994746aa82318abd1050aee3cb373b5c481a58eb948dbeb8a8f54f98cb454dae6097b0b1c676f880ba26b7dc720672ad5009b9718b761399c1f6e57e1643ad6ecc6e813c1a58be431b6ccae1536c43be96db147b6b0089ebd8511639e94704ebf1641ebc857ca5b4565ce6104945314ac7526b216bae1e4dae13cd3adab0b8c7c083fac2a852974fbfa1854f0f3", 0xc9}, {&(0x7f0000000d00)="f332cfca4a40fe5569602d20e624da50b85532e9ae2aff9a0ac23f51ac1e6ba515bbd36114a4f5f51f6d7e0c284fe92545800aa1efb6659d2c2aeb0e5c1dfe77b2a0e1c4804b96dda24b633edaff9fc8d078c0fd231ef16dd22b565ec3c72652c342246a09b029649d50421ff40040b1a2b11a6e8b54576458e0cc56d4a47b966a161934f4a38d51ac6b4782cbda78f11acccfdb9d46f828209265a123b0bde8b4e563f4358a846ed217066c9884a3e4d14851e222026919ab5a69b8a741b48e27eec615013a7ac7", 0xc8}, {&(0x7f0000000e00)="388f608e2380c1ad33c9e7b41318066abc72572776ffcc0716bb22156b5da087b051c05d221653100d436c0f971078406f864600516a972943db966c4709d17ed8359dcc546ce4efda40c6cca247465e97a56004e5edaa1ba2c1903e710da93eeff946f5a271f380b1f15b891ddb30d3637a66a2654acd91259997b1b6f182fadc23a06395a0ad9662ab9ff38e1e6d4789e21572c6c9f65f16", 0x99}, {&(0x7f0000000ec0)="6530be726d891b3f53bf8c027f7c743012793b7b8937450771298329e189347c5b82a6071a1443288b71f5e0bafa13c0c8578bc5dd09c3a13fd5324212b522f7fc5f883c0dd428853f278c5881950739df6fb627c50117ac388be883769280b54aec33620ebb3a9a48029197ea2dad0b80d19ca14cab45240fc90f7af50eb571446712931f114c3e30f20be86e86432db8d6da68a7187b965dbdad6cc76e7c092f056759a5aa5d32c7397d58cecebfc82214b8e7b59d71863a06b49aa0e3df8451b4abe5f308f4201a27d973736c1dd5a3406eaed2420ef3", 0xd8}, {&(0x7f0000000fc0)="0a3b92d6366b5aaede7e6f07e3aaa5f6f8164f0d92accf4673ee81346956c87077e1a2", 0x23}, {&(0x7f0000001000)="ef4b8e2eaebd652b1cfbdf0e41aa5be32870101f8cf5c1550f92ee172472694f80f747a4d8206a4cf133241897eed1a8856eb4643813bada2b52ba600691f06314baca9fdda88c71b8952f6631a790ca27b6e7ffd5fb7b48824cf66232", 0x5d}], 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000001100)='ns/time_for_children\x00') ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001140)=0x0) prlimit64(r11, 0x6, &(0x7f0000001180)={0x9, 0x7fffffffffffffff}, 0x0) 53.290345857s ago: executing program 1 (id=686): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_dev$cec(&(0x7f00000008c0), 0x0, 0x80) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0x6) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = getpgid(r4) setpgid(0x0, r5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x11d) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmsg$can_j1939(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/133, 0x85}, {&(0x7f0000000380)=""/111, 0x6f}, {&(0x7f0000000200)=""/25, 0x19}], 0x3}, 0x10000) sendmmsg$alg(r7, &(0x7f00000005c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="10b07449", 0x4}], 0x1, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x4000000) read$alg(r7, &(0x7f00000001c0)=""/4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r0, r2, 0x0) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000100)="19104126", 0x4}], 0x1) 52.4011283s ago: executing program 1 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x2, 0x0, 0x0, @pid=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r7 = accept4(r4, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f00000006c0)=ANY=[@ANYRES32=r8]) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000000000000d004"]) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r10) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x74}}, 0x0) ioctl$VIDIOC_REQBUFS(r11, 0xc0585609, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x0, 0x40}) ioctl$VIDIOC_DV_TIMINGS_CAP(r11, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x8, 0x1, 0x10, 0x7, 0x81, 0x80000001, 0x1a}}) 37.198777261s ago: executing program 32 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x2, 0x0, 0x0, @pid=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r7 = accept4(r4, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r9, 0x400442c8, &(0x7f00000006c0)=ANY=[@ANYRES32=r8]) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000000000000d004"]) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r10) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x74}}, 0x0) ioctl$VIDIOC_REQBUFS(r11, 0xc0585609, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x0, 0x40}) ioctl$VIDIOC_DV_TIMINGS_CAP(r11, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x8, 0x1, 0x10, 0x7, 0x81, 0x80000001, 0x1a}}) 28.310762321s ago: executing program 0 (id=1049): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) openat$mice(0xffffff9c, &(0x7f0000000380), 0x100) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000480)=0x7fffffff, 0x4) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x0, 0x3, 0x41, {0x41, 0x22, "c4a823a7b0286853c5ca59752c90f95b6ca51511ae14c08e843829e71eef35c026fe942acf0e74566367c370c62f953ff53dd5f575c9a56100c7c9d861c9d6"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000100)={0x0, 0xf, 0xf2, {0x5, 0xf, 0xf2, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7d, 0xe, 0x7}, @ssp_cap={0x1c, 0x10, 0xa, 0xa, 0x4, 0x9, 0x0, 0xe, [0xc00f, 0xff003f, 0xffffc0, 0x0]}, @generic={0xc7, 0x10, 0xa, "71fef8c73278105eee1acb04f5895653c2c09397235353b840181c68f1ddd690f5181853669a402dfaf74f26b994e94aec384897e6ff99f87d047577a3adf38c523b8c7ae97cc1d57c4bf0a483d557e3c30cda69541e61849ea741598e6a536821ca6e5372a26c4bd57eba17f478478fe0ab8510ea27be6bf4349b6740f596c384bd672ca8bdfeaaa4f1286ec43ad6f44ae86762f617486dce233581f4f40e90afef8f0f8ff6aece682916cda9e2a8eb8a09ca3c84d8176544d1afc734a4373b2d4fce51"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf2, 0x3, 0x0, 0x0, "95116f81", "5fe1141e"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x10, 0x81, 0x0, 0xe, 0x0, 0x1000}}}, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x40, 0x16, 0x1b, "ec0c91074eef74d493f95a943132db86de845d5f6ae485f27d10e7"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x40, 0x8}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "9da8"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000540)={0x40, 0x13, 0x6}, &(0x7f0000000580)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "f3d4"}, &(0x7f0000000600)={0x40, 0x1a, 0x2}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x5}}) 25.230635027s ago: executing program 0 (id=1088): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x140048, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x5}}, {@version_L}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x38, 0x34, 0x66, 0x30, 0x38, 0x33, 0x65], 0x2d, [0x37, 0x38, 0x38, 0x31], 0x2d, [0x34, 0x30, 0x39, 0x35], 0x2d, [0x31, 0x36, 0x0, 0x64], 0x2d, [0x36, 0x30, 0x32, 0x61, 0x62, 0x66, 0x39, 0x35]}}}]}}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@float={0x9, 0x0, 0x0, 0x10, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x31, 0x2}, @struct={0x1, 0x2, 0x0, 0x4, 0x0, 0x800, [{0x4, 0x3, 0x7}, {0xe, 0x0, 0x1}]}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000300)=""/164, 0x5d, 0xa4, 0x1, 0x5}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x3, 0x3, 0x111e, 0x2890c, r1, 0x6, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x9, @value=r3}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x6, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x1, 0x6, 0x8, 0xb, 0x8, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff0000}]}, &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x2, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000004c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x8, 0xa9, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[r1, r4, r1, r1, r4, r4, r1, r4], &(0x7f0000000580)=[{0x1, 0x1, 0xb, 0x8}, {0x5, 0x1, 0xa, 0xf}, {0x1, 0x2, 0x3, 0x2}, {0x0, 0x4, 0x1, 0x8}, {0x5, 0x1, 0xb, 0x8}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000400)='ext4_ext_load_extent\x00', r5, 0x0, 0xbb2}, 0x18) r6 = syz_open_dev$ndb(&(0x7f0000000700), 0x0, 0x400) ioctl$NBD_CLEAR_QUE(r6, 0xab05) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000740)={r5, r1}, 0xc) (async, rerun: 32) syz_open_dev$ndb(&(0x7f0000000780), 0x0, 0x121000) (async, rerun: 32) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000800)="34c8a348b28153a6a4bcb388ace5a89b90ff54bb327f6ac5a4de60cffd1bbdab109fcd0fa5", 0x25}, {&(0x7f0000000840)="067b0aaca37f473ca40e978635470a92aadff5075114bc2597d8166e5337b8702c5615402ca755b45005159da90ad7fa59e638f7fc0829b3cdef77108c4882e60b91a60e8e619d2299f0cd2f110b1586b97119", 0x53}, {&(0x7f00000008c0)="0998ad82634a041c625c0af55d05b6439f4d1864a8b46cd5983305d22c33ae124b4dad96b62b0cf2f63ccf90b5e575a6af1d47e72db0ce9db37482a2c85117aa276692104ae5b5ccb9162dadbeeab32ee30b3a4ec93a23d37809b899621d45c89ddd4a446918595ea28c6dae783d71919ca551e30d095a435fece3", 0x7b}, {&(0x7f0000000940)="dc326bad28ee4d03539983b29b89ae3b67e3838e50d5e5f406d42d6ffa97d4b7cd431f2e06d0703aa3c6017907e63f58ceedf3d1c0a0943f1ece33f4d9b3631e9527cb4158fdf923045b618ad2edb200da6d69e924ab85b76a221e52b860f52e840c9fe4bd1b3dab419061c67cb2e04ccf0cd3733136283c2fa5d4142c02e2b8f37cd0f0d9b8b5110a6ad252e860321e7e2755b19e55153bbcad370bce6ee0b44c4b8b707361c80a2fe7fe840736a372caf3f635b04bb7004a6f693ec47d812d18f118b04662728b17fb4e78e1185bb04880d7d08bbf58e45e5a1d34a36337b10deab8cb323dcef77f62f81516510400", 0xf0}, {&(0x7f0000000a40)="53a50c963a53622eaefdcd50dca29627ee35f4199b4b2ef93c179b745c75a1fbfa71371ac9fd94da2b6de9b95bc1f669a39e63e2719b1d32eab4ddccc5297efd33729137ff260fecf3d69057292a78194731dbe7b0143528c063b0714ac4d4cc825c7912f27edb416f18894ad6d3bc929db2c8f33838bec8c20e6ce8a2132ca830e311d76f2bac5606a5dd81dd688db8e412ff46ce0dddf9db9036af86373bb975fe703eeb5815fd7c32de6784333a4ded89b5c46872751d6361e4af0d5ca100db7689fe721506e1576a402e9f7af4a7c324285b4448cc5575d06a8c108fb613b2a1149184972c8208eafb23352b5218", 0xf0}, {&(0x7f0000000b40)="0a5d01c0b6272a0169eef5ad37d130dbf23bcd1896fee84385b212d31d9ee95b37a32d499ffe3fb3b2c58252b36fd663a4e838ffa37bdfe0ec8b069c078e0abb1ccf95b6aa08d92cd46c89a401a3f1689d05451326ea8317fa118dc75b4777dcaa915dc99c59a24ecec8bbc61e6b2b3ee541f374220b3ecea04d7d3081f570a97d658b018eddf9c7c4b2ba564ae37298bcfa0d662dc359e324b6e5335baf00534c7b362c255dece43650cb5b5e7984a73e649c40d1d28ff35544ae037c1172f7934346baa0cf69e5de41f19c2471980f6c2e8a90c7d6c45712331afc86bef7b334400276cd5e0a4b8dfdac4e68d8f9", 0xef}], 0x6, &(0x7f0000000cc0)=[@hopopts={{0x48, 0x29, 0x36, {0x2c, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x8}, @pad1, @enc_lim={0x4, 0x1, 0x80}, @pad1, @ra={0x5, 0x2, 0x76}, @pad1, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x10, {0x3, 0x2, 0xff, 0x4, [0x7fffffffffffffff]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}, @dstopts={{0x78, 0x29, 0x37, {0x0, 0xb, '\x00', [@ra={0x5, 0x2, 0x2d9}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x81}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xd7}, @pad1, @calipso={0x7, 0x30, {0x2, 0xa, 0x6, 0x3ff, [0x6, 0x9, 0xe10, 0x1ff, 0xfffffffffffffffc]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0xe8}}], 0x1, 0x240048c5) (async) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000e00)=@rose={'rose', 0x0}, 0x10) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000e40)={{{@in6=@ipv4={""/10, ""/2, @initdev}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@dev}}, &(0x7f0000000f40)=0xe8) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000501, r9, &(0x7f0000000f80)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r3, {0x80000001}}, './file0/file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000001080)={'syztnl0\x00', &(0x7f0000001000)={'gre0\x00', r2, 0x7800, 0x20, 0x3, 0x7, {{0xf, 0x4, 0x2, 0x37, 0x3c, 0x64, 0x0, 0xe, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x4e}, @loopback, {[@noop, @timestamp_prespec={0x44, 0x24, 0x7d, 0x3, 0x6, [{@remote, 0x2}, {@broadcast, 0x72}, {@multicast1, 0xfffffffb}, {@multicast2, 0x7}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001140)={'syztnl2\x00', &(0x7f00000010c0)={'sit0\x00', r8, 0x700, 0x40, 0x3, 0x0, {{0x14, 0x4, 0x0, 0xe, 0x50, 0x64, 0x0, 0xb3, 0x29, 0x0, @private=0xa010102, @multicast2, {[@generic={0x83, 0x4, "1c4a"}, @cipso={0x86, 0xe, 0x3, [{0x5, 0x8, "2217a5b8b239"}]}, @end, @generic={0x94, 0xe, "489bf1ed883852bc4f972711"}, @noop, @end, @lsrr={0x83, 0x17, 0x5a, [@local, @empty, @remote, @remote, @empty]}]}}}}}) (async) r13 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001180), 0x1, 0x0) setsockopt$MRT_ADD_VIF(r13, 0x0, 0xca, &(0x7f00000011c0)={0x0, 0x4, 0x4d, 0x5, @vifc_lcl_addr=@multicast1, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000001280)=[0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000001300)=[{}], 0x8, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0x74, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) getsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000001540)={@loopback, 0x0}, &(0x7f0000001580)=0x14) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000001e80)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e40)={&(0x7f0000001600)={0x83c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4089}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r12}, {0x4}}, {{0x8, 0x1, r11}, {0x214, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x25af}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x41}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x747}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x62}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r16}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9c}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r11}, {0x124, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7d}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0x20, 0x8, 0x1}, {0x4, 0x1, 0x6, 0x8}, {0x5376, 0x9, 0x3, 0x1ff}, {0x7126, 0x4, 0x6, 0x2}, {0xc, 0xb, 0x8, 0x8}, {0x1, 0x8, 0x2, 0x9}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}]}}]}, 0x83c}, 0x1, 0x0, 0x0, 0x8000}, 0xc082) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001ec0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone(0x1080, &(0x7f0000001f00)="b4f23d80c3a48f6c", 0x8, &(0x7f0000001f40), &(0x7f0000001f80), &(0x7f0000001fc0)="029541fa9b45ff0db0c2bf0ecad16d42514bd79fe7b2a6cf462ddb22ee7ae5483ce6cfbbf8e398a119e835af8e533f8d9151895cdadd0ff290b49d306cd2c3a9460dbf7a7af033ca830c36e1cc6f9210d114a016054c28c23b62b4a5bfdd962189d705f439ddae6110d468a145448c3aec5fb2") (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002240)={r5, 0x0, 0x22, 0xfd, &(0x7f0000002040)="5d83024e3e5a8a6179c13f0028d0f64feae75f118522fe81831b8f41ba0a608717ba", &(0x7f0000002080)=""/253, 0x2, 0x0, 0x49, 0x2b, &(0x7f0000002180)="d3ba462a5ab7160220fc7347db586b937c369c9421efc70dfd8b33de84e92412de652c86c8115f58513983f2deb91d603f2114461819d614685600259eda8565fbe0928c5853deb35d", &(0x7f0000002200)="8affda8e8ae9c877497dce9f77ecac5890fe581975c2043504b34f57af561d2ef2923affcb112e6bf94e98", 0x4, 0x0, 0x1283600}, 0x50) (async) ioctl$CEC_RECEIVE(r13, 0xc0386106, &(0x7f00000022c0)={0xb, 0x0, 0x9, 0x7, 0x80000000, 0x676, "666fb7e99be00adefeecc59f46cbd5f5", 0x7, 0x0, 0x0, 0x1, 0x1, 0x8, 0xde}) 25.225888978s ago: executing program 0 (id=1089): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x1a4, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x8, 0x5}, {0x6, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x178, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfe, 0x7, 0x8001, 0x6, 0x1, 0x7, 0x8, 0x3}}, {0xa, 0x2, [0x8, 0x5, 0x2]}}, {{0x1c, 0x1, {0x6, 0xfb, 0x9, 0x3, 0x1, 0x3, 0x3, 0x6}}, {0x10, 0x2, [0x1000, 0x400, 0x101, 0x1, 0x7, 0x7f]}}, {{0x1c, 0x1, {0x9, 0x91, 0x3, 0x9, 0x2, 0x7, 0x7, 0x7}}, {0x12, 0x2, [0x0, 0xccd, 0x4, 0xf, 0x80, 0x3, 0x2]}}, {{0x1c, 0x1, {0xa, 0x6, 0x1, 0x4, 0x1, 0x2f5, 0x3, 0x3}}, {0xa, 0x2, [0x8, 0x584, 0x4]}}, {{0x1c, 0x1, {0x0, 0xfd, 0x1, 0x7, 0x3, 0x7, 0x0, 0x3}}, {0xa, 0x2, [0x9, 0x81, 0x5d]}}, {{0x1c, 0x1, {0x0, 0x0, 0x3, 0xffffffff, 0x1, 0x5, 0xea56, 0x2}}, {0x8, 0x2, [0x8, 0x3ff]}}, {{0x1c, 0x1, {0x1c, 0x19, 0x2, 0x3, 0x0, 0x6, 0xffff, 0x3}}, {0xa, 0x2, [0x40, 0x2, 0x0]}}, {{0x1c, 0x1, {0x3, 0x6, 0x80, 0x1000, 0x1, 0x400, 0x4, 0x4}}, {0xc, 0x2, [0x7, 0x9, 0x7, 0x9]}}, {{0x1c, 0x1, {0x0, 0x40, 0xa, 0x2, 0x2, 0xa, 0x43f, 0x6}}, {0x10, 0x2, [0x6, 0xced8, 0xffff, 0x9, 0x3, 0x8]}}]}]}, 0x1a4}}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000240)=0x1) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 25.139297003s ago: executing program 0 (id=1090): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) userfaultfd(0x801) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x15) 25.138831396s ago: executing program 0 (id=1091): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="080002"], 0x40}}, 0x8080) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r2 = signalfd(r0, &(0x7f0000000100)={[0x100000001]}, 0x8) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi5\x00', 0x400000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000180)={'s526\x00', [0x7, 0x4c, 0x3f8, 0x6, 0xc4c0, 0x0, 0x56c9, 0x9, 0x4f, 0x9, 0xfffffc00, 0x4, 0x0, 0x401, 0x5b3, 0x1, 0x2, 0x6, 0xfffffffc, 0x8000, 0x0, 0x3, 0x8, 0x0, 0x0, 0x3, 0x1, 0xffffffff, 0x2, 0x6, 0x7, 0x101]}) 25.138493593s ago: executing program 0 (id=1092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYRES16=r2, @ANYRESDEC=r2, @ANYRES16, @ANYRESDEC=r0], 0x5c}}, 0x8800) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90ecabe833ca12054887f4142a64471dbe048", 0x20) iopl(0x3) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf25070000000800010003000000081e645c000500020000000a0004007770616e330000000c0017000201aaaaaaaaaaaa"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_io_uring_setup(0x35ea, &(0x7f00000003c0)={0x0, 0x0, 0x400, 0x2, 0x3c5}, 0xfffffffffffffffe, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x10, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) r6 = fanotify_init(0x4, 0x0) r7 = open(&(0x7f0000000040)='.\x00', 0x100, 0x0) fanotify_mark(r6, 0x441, 0x8000029, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x142, 0x20) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r9 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x8, 0x0, @mcast1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559e6f7000000004db1b8f1b612", 0x30}], 0x10}, 0xb00) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)="5f7327a543a8f33e22", 0x9}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8051) connect$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x3, {0x2, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x88d0) r10 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x7, &(0x7f0000003040)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00000000008000"}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0904000000000000000002000000340004803000b953b7cb8d6708a47fe801800e000100696d6d6564696174650000001c000280100002800c00028008000180ffffffff08000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000190a"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 23.629927453s ago: executing program 4 (id=1114): r0 = socket$inet(0x2, 0x3, 0x2) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000080)={0x0, 0x0}) (async) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="ef62ace74bd76578", 0x8, 0x840, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) 23.629453609s ago: executing program 4 (id=1115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) ftruncate(r1, 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000680)=[{0x2, 0x5, 0xb}, {0x5, 0xff, 0x7}], 0x2, 0x1ff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) socket$kcm(0x29, 0x7, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) r9 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, &(0x7f0000002700)={0x1, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}], 0x0}, 0x20) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r13, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r12, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r13}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r11], 0x1, 0x80000}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "35fbb0295d"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x20004000) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000ea88c9fef6c6e4b78f17047134ca2fa34f4e3d0910ea7c6f705476037885512229bc93ca8b14d118a8029f9f29e198150f5f9dbec8e4ea04ea108cb2b35e758e08e7a1560b6a74065cad9fa521418a9f57cbb91e32deeea736242f3fb8f45ea2c56185f8a91683debb7dca69253a0b378871825fe49105"], 0x0) 23.561037338s ago: executing program 4 (id=1116): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000d85a7d80790301a18a842132a1a53f79da6d8955aeae25fcb68516af383c42b5d8fee5f0b3ac0ce6fdfc3bfe5c02523877512812eb39acf6fa9c79f10950ed7e6b23e703f8fce07201faea2b10f2cafe4aa5e05fa77b2dcb5ac5edbf248ef7cf6c8780f1d371a4700c52cf59a806ae25fa5de4d80bcecc"]) 23.560811474s ago: executing program 4 (id=1117): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000c40)=[{}, {}, {}], &(0x7f0000000c80)=0x18) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @remote}, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3a00}}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000cc0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000240)="0d6489fa80e043bb176a59a2f7e7ff455b0ad367922ee4d156aba21149ff01423935f77518291fb083a1abcdb77f92da67193c823114b7978aec34ca2fb64963ed37834c99fa0ed9ba1e65d4c5ff8b775d7b50809aa221463e2c1e3961af525fbc019c965128fa1ad8b905306d7160ecedae86e8f1ffccbc9af5d76cfd49572616e13a59e2d884bb2ac26d018bbb03a8e8efe00c283380116f57e45c99067dc5755b632fead1e76897989c6faabf2ead444889e9de1bbd5dc8cbdfce2a49985815c5defe94") ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000d00)=ANY=[@ANYBLOB="d8080000130002002dbd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="08001500fa29070008000100", @ANYRES32=r3, @ANYBLOB="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"], 0x8d8}, 0x1, 0x0, 0x0, 0x44004}, 0x1) 23.491092592s ago: executing program 4 (id=1118): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) (async) r1 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xb8d5, 0x80, 0x3, 0x289}) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x4) (async) close_range(r1, 0xffffffffffffffff, 0x0) r3 = dup(r0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) (async) socket(0x11, 0x3, 0x0) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$packet(0x11, 0x2, 0x300) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000180)=0xa55, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 23.332207718s ago: executing program 4 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)="5f7327a543a8f33e22", 0x9}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8051) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x88d0) (async) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r4 = gettid() mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4]) (async) ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x8, &(0x7f0000000340)={[0x1000]}) (async) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x3, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 10.099634125s ago: executing program 33 (id=1092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYRES16=r2, @ANYRESDEC=r2, @ANYRES16, @ANYRESDEC=r0], 0x5c}}, 0x8800) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90ecabe833ca12054887f4142a64471dbe048", 0x20) iopl(0x3) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf25070000000800010003000000081e645c000500020000000a0004007770616e330000000c0017000201aaaaaaaaaaaa"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_io_uring_setup(0x35ea, &(0x7f00000003c0)={0x0, 0x0, 0x400, 0x2, 0x3c5}, 0xfffffffffffffffe, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x10, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) r6 = fanotify_init(0x4, 0x0) r7 = open(&(0x7f0000000040)='.\x00', 0x100, 0x0) fanotify_mark(r6, 0x441, 0x8000029, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x142, 0x20) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r9 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x8, 0x0, @mcast1}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559e6f7000000004db1b8f1b612", 0x30}], 0x10}, 0xb00) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)="5f7327a543a8f33e22", 0x9}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8051) connect$can_j1939(r4, &(0x7f0000000000)={0x1d, r5, 0x3, {0x2, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x88d0) r10 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x7, &(0x7f0000003040)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00000000008000"}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0904000000000000000002000000340004803000b953b7cb8d6708a47fe801800e000100696d6d6564696174650000001c000280100002800c00028008000180ffffffff08000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000190a"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 8.422981673s ago: executing program 34 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)="5f7327a543a8f33e22", 0x9}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8051) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x88d0) (async) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r4 = gettid() mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4]) (async) ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x8, &(0x7f0000000340)={[0x1000]}) (async) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x3, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 2.429979658s ago: executing program 3 (id=1318): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0x3ff}}, [0x5516, 0x8000000000000000, 0x2, 0xe0, 0x3, 0x5, 0x1002, 0x84bd, 0x0, 0x653, 0x9af, 0x3, 0x9, 0x1, 0x2]}, &(0x7f00000001c0)=0x100) setsockopt$MRT_TABLE(r1, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) r3 = fcntl$getown(r1, 0x9) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/time_for_children\x00') sendfile(r0, r0, 0x0, 0x8) 2.258854796s ago: executing program 5 (id=1328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0xb, 0xe4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @generic={0x89, 0x2}]}}, {{0xfffc, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8, 0x61}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)=0x61) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.19084892s ago: executing program 2 (id=1329): io_setup(0x6, &(0x7f00000004c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000040000008500000029000000180100002020602500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcbd) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x2) write$qrtrtun(r3, &(0x7f0000000300)="f7b920e49a48d1", 0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r0, 0x1d, 0x1, 0x10001, &(0x7f0000000340)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB='#\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="c598657664c46341f4db676d2ff1e2f872b42539fe608f62941601be01000000aa29ab62feef8c4bfcef7aa8455e483d3df2f7e28f996f6271b754e06000e6b18b9b0f5cc61c69b4c6d8b020e02e7ecf5b18f7517bd19b2244f4fbfe39445dfd0290eb1c6bdd1ef0413a72981c00f2dce3", @ANYRES64=r4], 0x20) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x8, 0x8, &(0x7f00000002c0)="050000000fbd0000", &(0x7f0000000140)=""/2, 0xc0f, 0x0, 0x2a, 0xfffffffffffffe9b, 0x0, 0x0, 0x4}, 0x50) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r8, 0x0, 0x0) write$6lowpan_enable(r8, &(0x7f0000000a00)='0', 0x1) ioctl$USBDEVFS_GET_SPEED(r7, 0x551f) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000180)={r11, 0x0, 0x0}) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000000)={0x1f, 0x3}, 0x6) getsockname(r13, 0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240), &(0x7f0000000280), 0x0, r12}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r10], &(0x7f0000000200), &(0x7f0000000300)=[0x0], &(0x7f0000000580)}) eventfd2(0x1, 0x80800) 2.120744772s ago: executing program 5 (id=1330): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0xffff) (async) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) (async) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x414}}) io_uring_enter(r0, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) (async) io_uring_enter(r0, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) 2.119906813s ago: executing program 5 (id=1331): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r4}, 0xc) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa560a8e390c7688a822008100340008004502001c0067000002329078e06e3eb9346f8be40b70519e3784070460000001ffffffff6494548f67ed9740"], 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000110000e1"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e000004feffffff00000000417c0000040042800c00018006006b00800a00000c00028008000100", @ANYRES32=0x0, @ANYBLOB="ffab89664121f00140666f1cb74ae6af31a446a0c2b98303f4"], 0x30}, 0x1, 0x0, 0x0, 0x400c093}, 0xc000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006f80)=ANY=[@ANYBLOB="a03700002d00012826bd7000fcdbdf250400000005000b"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20004004) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) 2.00615447s ago: executing program 2 (id=1332): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x17, 0x3, 0x0, 0xfffffffffffffdd7) (rerun: 32) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) 2.005536704s ago: executing program 2 (id=1333): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) sendto$inet6(r0, &(0x7f0000000040)="9a1e", 0x2, 0x4, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @local, 0x1}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = io_uring_setup(0x74f8, &(0x7f00000000c0)) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000001940)={0x2, 0x4e20, @private=0xa010101}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r4) (async) r5 = dup(r4) bind$bt_l2cap(r5, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) bind$bt_l2cap(r5, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) listen(r4, 0x9) (async) listen(r4, 0x9) accept4$vsock_stream(r5, 0x0, 0x0, 0x80000) close_range(r2, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 1.840761458s ago: executing program 2 (id=1334): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000780)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x1}}, 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}, [@offload={0xc, 0x1c, {r4}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="000100001800010000000000fedbdf250a000000ff00ff0800200000b1000880324d76b5be2a06d619308aab715360ab2eb3a32a85c757c6275ee5d91b08242ffdbe6d0a6d1deee842bca9e9ec6780f823bdfac40a347ade2d6151c1"], 0x100}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000007c0)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 1.790718067s ago: executing program 2 (id=1335): r0 = socket$kcm(0x10, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, r2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r7, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}]}, 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r4, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000128bd7000fddbdf250200000008000100", @ANYRES32=r8, @ANYBLOB="b43d17e7d5be2914910e18f3983cd0acf6c6cb593730bb059056e2472ecde8f28da964155740d4011671dba42e71548b5c3392f1"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x11, &(0x7f0000000080)=0xd8ec, 0x4) r10 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r10, 0xc02c564a, &(0x7f0000000040)={0x2, 0x6469620a, 0x3, @discrete={0xfffffff8, 0x9183}}) ioctl$KDENABIO(r4, 0x4b36) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r11 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$VIDIOC_G_STD(r11, 0x80085617, &(0x7f0000000940)) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001800090400000000000000000a0000000000eb17b0e10000140001000000000000000000000000000000000014000100ff010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="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", 0x1a3}], 0x1}, 0x0) 1.790152975s ago: executing program 2 (id=1336): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r2, &(0x7f0000000180)=""/174, 0xae) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x1e71, 0x2009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x9191, 0xbf, 0x1, {0x22, 0x76e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x87, 0xf0}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xb, 0x1, 0x9c, 0x40, 0x9}, 0x29, &(0x7f00000000c0)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0xf, 0x6, 0x7fffffd, 0xf, 0x9, [0xf, 0xff00f0, 0xffc030, 0x0, 0x3f0f, 0xc0]}]}, 0x1, [{0x94, &(0x7f0000000240)=@string={0x94, 0x3, "91b9b6fc8305132eef4991c229c9cd56a5d67882cc5b8a6e0012e0354f5d8d5abc574ba38e2a4b171cc92536c72ce3f10a7ea22cd821d97d398f9f2cdf217c4a388159ca8fa15fc85f9af79d21a584971a0a40c0fdf2b893bd9e352742fcf3693c18467a67db2beaf9c17b6ce302968b85fa530a303d67e3ca27efa964a4c2670b901e4ec7042e610401b71ca34d1aa3a8a1"}}]}) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000000)=0x9) 1.571013456s ago: executing program 3 (id=1337): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x20000078) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8001, 0x38, {"f16b2400"}, 0x5, 0x2, 0x1ff}}}, 0x90) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000480)={0x0, "b500e2279c2996817bb959eb2b238deda525e1dbdeffafbf2500"}) 1.570828253s ago: executing program 3 (id=1338): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="37eb290aca"], 0x20000600}}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) landlock_restrict_self(r2, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003404000100e140010"], 0x80}}, 0x0) 1.500963886s ago: executing program 3 (id=1339): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x8040) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000040), 0x169101, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000001080)='/proc/slabinfo\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r2}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) gettid() (async) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) migrate_pages(r3, 0xff, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x1) (async) migrate_pages(r3, 0xff, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x1) r4 = syz_clone(0x90152200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) (async) process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 1.50000149s ago: executing program 3 (id=1340): r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x1, {}, 0xff}, 0x18) (async) bind$can_j1939(r3, &(0x7f00000001c0)={0x1d, r5, 0x1, {0x2, 0xf0, 0x3}}, 0x18) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x810}, 0xc0) creat(&(0x7f0000000180)='./file0\x00', 0xc) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x20, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x3, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440108ea6000", @ANYRES16=r9, @ANYBLOB="010026bd7000fbdbdf253400000008000300", @ANYRES32=r11, @ANYBLOB="0a0006000302d995f3610000140055001c3c83a8a37efba26ac3f31143d5752e08001f01750f0000"], 0x44}}, 0x400d0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) fsopen(&(0x7f0000000080)='efivarfs\x00', 0x1) 1.429861401s ago: executing program 3 (id=1341): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000380)='\'', 0x1) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf25010000001c000180060001000200000008000300ac1414bb080003007f000001"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdb97b240}, 0x40000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x4, 0x6d, 0x3, 0x8, 0xb77b6e0000000000, 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) kcmp(r3, r4, 0x3, r5, r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 1.140255916s ago: executing program 5 (id=1343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$CDROMPLAYTRKIND(r2, 0x5304, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x86}) (async) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1) (async) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) 1.028786487s ago: executing program 5 (id=1344): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0xad) r2 = inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0/../file0/file0\x00', 0x40000aa) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0xc771, 0xffffffc0, 0x7fffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r3, 0x20049549e2a2d659) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x2, 0x0, 0x3}}, 0x7b) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0x4806, 0x4) r4 = socket(0x1d, 0x800, 0x8) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000001c0)=0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES64=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000ddc0)={0x2020, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x80000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0/file0\x00', 0xe7) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x24, 0x0, 0x41046180, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1, 0x80000}}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r7, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="30bdf3120592d96b21396b2dd729b0ebb6795106c5e3c0fc408965d832eec4185cf7a55cedd2dc6639fc43008d7305f286c54723d002c3f9dd046f6c5ac860f49297956ff6c49e979a3ff5f1c8d65b43d0b167c5b59ffa11a27e5fd61ef4323c8a7193ad9f1ef611f3652bc3be1557ccfb27cbc41a4601b2995f34d92c2abb384f98353fa188a6e83e77b466091f122cd655793d3a09f630e8e60fe2ca55bd9b74f5395b09c20fb24cfc664110c27e18b6e29477ac9e45b7f63bdba752cfaad8fa888197cf70ff0e2e260e0d619f3ab5", @ANYRESHEX=r1], 0xffdd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fc00100}]}) r9 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r9, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) 539.075718ms ago: executing program 6 (id=1346): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x31, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xcc}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @generic={0x0, 0x7, 0xc, 0xfffa, 0x40}, @call={0x85, 0x0, 0x0, 0x39}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x8f, &(0x7f0000000140)=""/143, 0x41000, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0x10, 0x82, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)=[{0x3, 0x5, 0xd, 0x7}, {0x2, 0x2, 0x2, 0x1}], 0x10, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000003c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x400, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x55, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) read$FUSE(r5, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000300)={0x29, 0x6, 0x0, {0x6, 0x3}}, 0x29) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000080000000000000500000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000660900e281000000dbaaf0ff50000000bf8600000000000007080000c8070000bfa4009da14abc8f80bec15be15b8628b9980000000000000018221000119cbed959abbcdf08f543d15faae56da2d80c97ad00"/168, @ANYRES32=r1, @ANYRESDEC=r3], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) 410.70498ms ago: executing program 6 (id=1347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000b7080000000000007baa00fe000000"], 0x0, 0x7}, 0x94) (async) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40043d0d, 0x0) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 270.831428ms ago: executing program 6 (id=1348): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a000000000000611180"], 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000c14010027bd7000fcdbdf2508000100000000000800030004000000a4b0e0ef784c4382d5a2fe4006f6b8a1681d6f76edab28b148fb9eae8c17ca228636974deb62e09c66347955a0de07136d711f2b03f0df95e5493a252025f4ff43647c933403c84e786f68c4154b4e64014946c923d946f2799e73e337c69b86efabc5a2a450234873f3a5a57cd37a11d92b4b751535393aa92f80c9cff8a629d13b42695c1730e0834d315e6cdd01987336"], 0x20}, 0x1, 0x0, 0x0, 0x24008011}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012abd"], 0x24}, 0x1, 0x0, 0x0, 0x240000c4}, 0x24000000) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="cc0000000000000012"]) 270.594852ms ago: executing program 6 (id=1349): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffa, 0x7, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_EGRESS_BLOCK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000c00c) 160.982882ms ago: executing program 6 (id=1350): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x480) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000100)=""/118) 160.626041ms ago: executing program 5 (id=1351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240)="da17562a127c6f24f7a24b39cac07a66d7607ae2a272a5ecdd47be56e863c8ad9e0b5f288c8e6a8ce65ec67448e6fe4e90b984544160b67fffb25b3ff0ceacc06a197f7a69e6b238e6b29356103214c6ee1b2b03e620e2069571e4b1cc5e5e61d026f26b7d918de7222a0850b40eaa90678fa685f749b357adf9598bc0edc652123a63723655606f4dbf03053400c0cc2759a242ef4eb0ee", &(0x7f00000001c0)=@buf="fd67260931c24e9418f07f2ed5d2fd0e9c7d2bb65bf03b1b", 0x4}, 0x20) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x4000000000003) sendfile(r0, r1, &(0x7f0000000100)=0x6, 0x100000000010001) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f0000000080)={0x28, 0x4, r2, r3, 0x141a8e, 0x7, 0x3, 0x18188}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00'}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 6 (id=1352): r0 = socket(0x1d, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) listen(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) (async) write$binfmt_elf32(r5, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)="f40fc16e524ec21a02c8220571876aa12adf7ee0ccb443d1a170c881bf0116b25f8acda00d568683ce0214ce00fa19a3abadaa9459d580e0a9e280b7c70ca631cd45ffcd06182468b083bc93ce0d2efc3f9f36f338d4359581528336091b5ef643e1dd590bf473ec1178012ef5f8c451c2a712e91ed48a8811320f9ba78861c9b35207bd6afb64e8a47116e387884627fdf36c731d7207281222e53f36ab61443656562a3654e1efd14460a15dd3221c56fac456d95bb30bc9d738c5c848706e9d", 0xcb}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000b80)="55c5aae3c0166065809e675b3cef43b961ed32dc0f0415f8e75d82bd9c4cc76ad0d9e4b3ffec8a1f7eea280fabda7bcd7caa75b50c115527cf10607330bc4b1da1a0d8c647aa6527a654bd9a0c9db153e1e4d08fdfad6fb3d44169d2faf5c0205f5f35fd41129911dedeb1e0e2bf93450a32e0d5b8581ff516ad163b9d40935bfcdc9b", 0x83}, {&(0x7f0000000180)="f3", 0x1}], 0x43}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001080)="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", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000140)='s', 0x1}, {&(0x7f00000009c0)="1e", 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="85"}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): parsing attributes in process `syz.3.666'. [ 91.415370][ T8251] comedi comedi4: comedi_config --init_data is deprecated [ 91.424113][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'. [ 91.427373][ T8266] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 91.430141][ T8266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.451171][ T8268] netlink: 'syz.3.668': attribute type 1 has an invalid length. [ 91.470201][ T8272] QAT: Invalid ioctl -2145626081 [ 91.472937][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 91.487875][ T8277] xt_TCPMSS: Only works on TCP SYN packets [ 91.617309][ T8298] netlink: 'syz.0.678': attribute type 1 has an invalid length. [ 91.620039][ T8298] NCSI netlink: No device for ifindex 0 [ 91.651780][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 91.651791][ T40] audit: type=1400 audit(1751947976.890:595): avc: denied { read } for pid=8303 comm="syz.0.681" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.664016][ T40] audit: type=1400 audit(1751947976.890:596): avc: denied { open } for pid=8303 comm="syz.0.681" path="/dev/usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.673119][ T40] audit: type=1400 audit(1751947976.890:597): avc: denied { ioctl } for pid=8303 comm="syz.0.681" path="/dev/usbmon8" dev="devtmpfs" ino=762 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 91.795337][ T40] audit: type=1400 audit(1751947977.040:598): avc: denied { map } for pid=8309 comm="syz.0.682" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.802541][ T40] audit: type=1400 audit(1751947977.040:599): avc: denied { execute } for pid=8309 comm="syz.0.682" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.820509][ T40] audit: type=1400 audit(1751947977.060:600): avc: denied { validate_trans } for pid=8309 comm="syz.0.682" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 91.863239][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 92.006134][ T8313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.013653][ T8315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.031777][ T10] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 92.035277][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.038225][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.041636][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 92.045535][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.048464][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.051796][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 92.056022][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.058817][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.062142][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 92.065166][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.067978][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.071296][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 92.074655][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.077514][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.080865][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 92.083785][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.086566][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.089883][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 92.092636][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.095463][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.098827][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 92.101666][ T10] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 92.104671][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 92.108088][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 92.112023][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 92.115060][ T10] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 92.117764][ T10] usb 7-1: Product: syz [ 92.119165][ T10] usb 7-1: Manufacturer: syz [ 92.120687][ T10] usb 7-1: SerialNumber: syz [ 92.124471][ T10] usb 7-1: config 0 descriptor?? [ 92.129675][ T10] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 92.194438][ T40] audit: type=1400 audit(1751947977.440:601): avc: denied { mounton } for pid=8320 comm="syz.1.686" path="/173/file1/file0" dev="autofs" ino=24138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 92.335189][ T8336] SELinux: policydb version 1298488467 does not match my version range 15-34 [ 92.338898][ T8336] SELinux: failed to load policy [ 92.374252][ T8339] netlink: 'syz.0.689': attribute type 10 has an invalid length. [ 92.376761][ T8339] team0: entered promiscuous mode [ 92.378413][ T8339] team_slave_0: entered promiscuous mode [ 92.381095][ T8339] team_slave_1: entered promiscuous mode [ 92.383231][ T8339] bridge0: port 3(team0) entered blocking state [ 92.387523][ T8339] bridge0: port 3(team0) entered disabled state [ 92.389837][ T8339] team0: entered allmulticast mode [ 92.391532][ T8339] team_slave_0: entered allmulticast mode [ 92.393383][ T8339] team_slave_1: entered allmulticast mode [ 92.397005][ T8339] bridge0: port 3(team0) entered blocking state [ 92.399416][ T8339] bridge0: port 3(team0) entered forwarding state [ 92.440267][ T8343] netlink: 'syz.0.690': attribute type 32 has an invalid length. [ 92.498046][ T40] audit: type=1400 audit(1751947977.740:602): avc: denied { getopt } for pid=8351 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.505691][ T40] audit: type=1400 audit(1751947977.750:603): avc: denied { accept } for pid=8351 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.517172][ T40] audit: type=1400 audit(1751947977.760:604): avc: denied { append } for pid=8355 comm="syz.3.692" name="cec3" dev="devtmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.631622][ T8362] can: request_module (can-proto-5) failed. [ 92.657096][ T8365] io-wq is not configured for unbound workers [ 92.700674][ T8362] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 92.720678][ T8367] tipc: Started in network mode [ 92.722318][ T8367] tipc: Node identity ce74fcece1e8, cluster identity 4711 [ 92.724809][ T8367] tipc: Enabled bearer , priority 0 [ 92.729678][ T8367] tipc: Resetting bearer [ 93.491085][ T8364] tipc: Disabling bearer [ 93.679481][ T8385] netlink: 'syz.0.698': attribute type 12 has an invalid length. [ 93.682023][ T8385] netlink: 'syz.0.698': attribute type 29 has an invalid length. [ 93.684933][ T8385] netlink: 'syz.0.698': attribute type 2 has an invalid length. [ 94.353399][ C0] usb 7-1: yurex_control_callback - control failed: -2 [ 94.405572][ T5970] usb 7-1: USB disconnect, device number 18 [ 94.412751][ T5970] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 94.436384][ T8431] tipc: Enabled bearer , priority 0 [ 94.502519][ T8430] tipc: Disabling bearer [ 94.623432][ T8435] __nla_validate_parse: 10 callbacks suppressed [ 94.623444][ T8435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'. [ 94.628277][ T8435] netlink: 2 bytes leftover after parsing attributes in process `syz.0.710'. [ 94.670811][ T8437] netlink: 60 bytes leftover after parsing attributes in process `syz.0.711'. [ 94.738695][ T8441] binder: BINDER_SET_CONTEXT_MGR already set [ 94.740663][ T8441] binder: 8440:8441 ioctl 4018620d 2000000000c0 returned -16 [ 94.788754][ T8451] fuse: Unknown parameter '' [ 95.221007][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 95.375518][ T8475] FAT-fs (nullb0): bogus number of reserved sectors [ 95.377914][ T8475] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 95.413165][ T8477] input: syz1 as /devices/virtual/input/input17 [ 95.637412][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.727'. [ 95.943265][ T836] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 96.094975][ T836] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 96.098298][ T836] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.101241][ T836] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.105763][ T836] usb 8-1: config 0 interface 0 has no altsetting 0 [ 96.108657][ T836] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.111564][ T836] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.116051][ T836] usb 8-1: config 0 interface 0 has no altsetting 0 [ 96.119179][ T836] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.122078][ T836] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.122582][ T8504] overlayfs: missing 'lowerdir' [ 96.126009][ T836] usb 8-1: config 0 interface 0 has no altsetting 0 [ 96.130383][ T836] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.134114][ T836] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.138616][ T836] usb 8-1: config 0 interface 0 has no altsetting 0 [ 96.141706][ T836] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.145137][ T836] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.148592][ T836] usb 8-1: config 0 interface 0 has no altsetting 0 [ 96.151489][ T836] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.154687][ T836] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.158629][ T836] usb 8-1: config 0 interface 0 has no altsetting 0 [ 96.163127][ T836] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.166096][ T836] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.169533][ T836] usb 8-1: config 0 interface 0 has no altsetting 0 [ 96.172491][ T836] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.176180][ T836] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.179615][ T836] usb 8-1: config 0 interface 0 has no altsetting 0 [ 96.183397][ T836] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 96.186343][ T836] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 96.188980][ T836] usb 8-1: Product: syz [ 96.190360][ T836] usb 8-1: Manufacturer: syz [ 96.191901][ T836] usb 8-1: SerialNumber: syz [ 96.195022][ T836] usb 8-1: config 0 descriptor?? [ 96.195319][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.733'. [ 96.199620][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.733'. [ 96.200894][ T836] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 96.335961][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 96.343712][ T8517] netlink: 'syz.2.737': attribute type 4 has an invalid length. [ 96.346410][ T8517] netlink: 'syz.2.737': attribute type 4 has an invalid length. [ 96.360042][ T8517] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !å¯fIZEô¿¹ô,ô =©ÜÝ$)²% Ä‚L [ 96.399148][ T8496] netlink: 'syz.3.729': attribute type 8 has an invalid length. [ 96.400287][ T8495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.729'. [ 96.401626][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 96.409984][ T836] usb 8-1: USB disconnect, device number 8 [ 96.415735][ T836] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 96.670185][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 96.670196][ T40] audit: type=1400 audit(1751947981.910:615): avc: denied { mounton } for pid=8538 comm="syz.0.741" path="/proc/685/task" dev="proc" ino=22504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 96.714596][ T6036] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 96.840256][ T8539] cgroup: fork rejected by pids controller in /syz0 [ 96.879441][ T6036] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.888610][ T6036] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.897551][ T6036] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.901317][ T6036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.962139][ T40] audit: type=1400 audit(1751947982.200:616): avc: denied { setopt } for pid=8572 comm="syz.3.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 97.109589][ T6036] usb 7-1: usb_control_msg returned -32 [ 97.111497][ T6036] usbtmc 7-1:16.0: can't read capabilities [ 97.665030][ T34] usb 7-1: USB disconnect, device number 19 [ 98.055463][ T40] audit: type=1400 audit(1751947983.300:617): avc: denied { write } for pid=8619 comm="syz.0.745" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.065016][ T40] audit: type=1400 audit(1751947983.300:618): avc: denied { setattr } for pid=8619 comm="syz.0.745" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 98.193969][ T40] audit: type=1400 audit(1751947983.440:619): avc: denied { create } for pid=8651 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 98.234620][ T8652] netlink: 'syz.2.746': attribute type 3 has an invalid length. [ 98.337097][ T8660] syzkaller1: entered promiscuous mode [ 98.338911][ T8660] syzkaller1: entered allmulticast mode [ 98.514154][ T6036] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 98.664280][ T6036] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.667510][ T6036] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.670282][ T6036] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.674288][ T6036] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 98.677785][ T6036] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 98.681149][ T6036] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 98.684065][ T6036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.689363][ T8656] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 98.694954][ T6036] hub 7-1:1.0: bad descriptor, ignoring hub [ 98.697470][ T6036] hub 7-1:1.0: probe with driver hub failed with error -5 [ 98.700796][ T6036] cdc_wdm 7-1:1.0: skipping garbage [ 98.703000][ T6036] cdc_wdm 7-1:1.0: skipping garbage [ 98.708290][ T6036] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 98.710797][ T6036] cdc_wdm 7-1:1.0: Unknown control protocol [ 98.893752][ T40] audit: type=1400 audit(1751947984.140:620): avc: denied { read write } for pid=8655 comm="syz.2.747" name="cdc-wdm0" dev="devtmpfs" ino=3138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 98.901098][ T40] audit: type=1400 audit(1751947984.140:621): avc: denied { open } for pid=8655 comm="syz.2.747" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 99.324940][ T8696] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3354 [ 99.426417][ T8656] usb 7-1: reset low-speed USB device number 20 using dummy_hcd [ 99.575700][ T8730] netfs: Couldn't get user pages (rc=-14) [ 99.578112][ T40] audit: type=1400 audit(1751947984.820:622): avc: denied { execute } for pid=8729 comm="syz.0.767" path="/234/file0/cpu.stat" dev="9p" ino=35913959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.675971][ T8734] __nla_validate_parse: 4 callbacks suppressed [ 99.675983][ T8734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.768'. [ 99.718297][ T8736] netlink: 'syz.0.769': attribute type 10 has an invalid length. [ 99.726055][ T8656] usb 7-1: device firmware changed [ 99.726780][ T8736] team0: Device hsr_slave_0 failed to register rx_handler [ 99.729861][ T6036] usb 7-1: USB disconnect, device number 20 [ 99.732337][ T8656] cdc_wdm 7-1:1.0: Error autopm - -16 [ 99.760970][ T8739] overlay: Unknown parameter 'euid>00000000000000000000' [ 99.764031][ T40] audit: type=1400 audit(1751947985.010:623): avc: denied { accept } for pid=8737 comm="syz.0.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 99.776254][ T5964] hid-generic 0007:0017:0002.0003: reserved main item tag 0xd [ 99.778821][ T5964] hid-generic 0007:0017:0002.0003: unknown main item tag 0x1 [ 99.781446][ T5964] hid-generic 0007:0017:0002.0003: reserved main item tag 0xe [ 99.791656][ T5964] hid-generic 0007:0017:0002.0003: hidraw0: HID v0.06 Device [syz0] on syz0 [ 99.821003][ T8742] fido_id[8742]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.873224][ T6036] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 100.025259][ T6036] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.029262][ T6036] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 100.032776][ T6036] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.037992][ T6036] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 100.041758][ T6036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.047255][ T8672] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.050420][ T6036] hub 7-1:1.0: bad descriptor, ignoring hub [ 100.052409][ T6036] hub 7-1:1.0: probe with driver hub failed with error -5 [ 100.055099][ T6036] cdc_wdm 7-1:1.0: skipping garbage [ 100.056860][ T6036] cdc_wdm 7-1:1.0: skipping garbage [ 100.058579][ T6036] cdc_wdm 7-1:1.0: skipping garbage [ 100.060307][ T6036] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 100.236605][ T8765] bond4: entered allmulticast mode [ 100.269119][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 100.287958][ T8768] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.292023][ T8768] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.296086][ T8768] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.299576][ T8768] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.306456][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 100.363239][ T6036] usb 7-1: USB disconnect, device number 21 [ 100.404783][ T8777] syzkaller1: entered promiscuous mode [ 100.406575][ T8777] syzkaller1: entered allmulticast mode [ 100.675675][ T40] audit: type=1400 audit(1751947985.920:624): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 100.707047][ T8803] Dead loop on virtual device ip6_vti0, fix it urgently! [ 100.709475][ T8803] Dead loop on virtual device ip6_vti0, fix it urgently! [ 100.711843][ T8803] Dead loop on virtual device ip6_vti0, fix it urgently! [ 100.714459][ T8803] Dead loop on virtual device ip6_vti0, fix it urgently! [ 100.716835][ T8803] Dead loop on virtual device ip6_vti0, fix it urgently! [ 100.719162][ T8803] Dead loop on virtual device ip6_vti0, fix it urgently! [ 100.853464][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 100.935356][ T8828] trusted_key: encrypted_key: insufficient parameters specified [ 100.971580][ T8835] overlayfs: maximum fs stacking depth exceeded [ 100.977173][ T8835] overlayfs: maximum fs stacking depth exceeded [ 100.979674][ T8835] overlayfs: maximum fs stacking depth exceeded [ 100.981994][ T8835] overlayfs: maximum fs stacking depth exceeded [ 100.985924][ T8835] overlayfs: maximum fs stacking depth exceeded [ 100.988299][ T8835] overlayfs: maximum fs stacking depth exceeded [ 100.990654][ T8835] overlayfs: maximum fs stacking depth exceeded [ 100.993223][ T8835] overlayfs: maximum fs stacking depth exceeded [ 100.995624][ T8835] overlayfs: maximum fs stacking depth exceeded [ 100.998118][ T8835] overlayfs: maximum fs stacking depth exceeded [ 101.000761][ T8835] overlayfs: maximum fs stacking depth exceeded [ 101.003933][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 101.006593][ T8835] overlayfs: maximum fs stacking depth exceeded [ 101.008823][ T10] usb 5-1: config 2 interface 0 has no altsetting 0 [ 101.011317][ T8835] overlayfs: maximum fs stacking depth exceeded [ 101.014681][ T8835] overlayfs: maximum fs stacking depth exceeded [ 101.019333][ T10] usb 5-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 101.022258][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.025307][ T10] usb 5-1: Product: syz [ 101.026683][ T10] usb 5-1: Manufacturer: syz [ 101.028221][ T10] usb 5-1: SerialNumber: syz [ 101.197698][ T8845] netlink: 'syz.2.799': attribute type 11 has an invalid length. [ 101.200937][ T8845] netlink: 141296 bytes leftover after parsing attributes in process `syz.2.799'. [ 101.205982][ T8845] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 101.211213][ T8848] vcan0: entered allmulticast mode [ 101.214777][ T8844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.245571][ T10] usb 5-1: USB disconnect, device number 7 [ 101.286610][ T8854] netlink: 'syz.3.802': attribute type 2 has an invalid length. [ 101.290172][ T8854] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 101.298851][ T8854] binder: 8853:8854 ioctl 40044900 21 returned -22 [ 101.325575][ T8856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=8856 comm=syz.2.803 [ 101.491911][ T8878] batadv_slave_1: entered promiscuous mode [ 101.858670][ T8917] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.992150][ T8938] binder: 8933:8938 ioctl c0306201 2000000003c0 returned -14 [ 101.997792][ T8938] binder: 8933:8938 ioctl ae04 0 returned -22 [ 102.086824][ T8949] netlink: 'syz.2.832': attribute type 14 has an invalid length. [ 102.158126][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 102.158137][ T40] audit: type=1400 audit(1751947987.400:634): avc: denied { bind } for pid=8954 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.168683][ T40] audit: type=1400 audit(1751947987.400:635): avc: denied { listen } for pid=8954 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.179170][ T40] audit: type=1400 audit(1751947987.410:636): avc: denied { ioctl } for pid=8954 comm="syz.3.835" path="socket:[27690]" dev="sockfs" ino=27690 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.270595][ T40] audit: type=1400 audit(1751947987.510:637): avc: denied { create } for pid=8965 comm="syz.3.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 102.316132][ T8970] evm: overlay not supported [ 102.475262][ T40] audit: type=1400 audit(1751947987.720:638): avc: denied { connect } for pid=8978 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 102.647582][ T40] audit: type=1400 audit(1751947987.890:639): avc: denied { mount } for pid=8986 comm="syz.0.843" name="/" dev="configfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 102.656476][ T40] audit: type=1400 audit(1751947987.900:640): avc: denied { getopt } for pid=8986 comm="syz.0.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.671997][ T40] audit: type=1400 audit(1751947987.910:641): avc: denied { unmount } for pid=5952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 102.810874][ T8991] binder: 8988:8991 ioctl c0306201 200000000640 returned -22 [ 103.196715][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.201055][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.236083][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.238935][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.238948][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.242231][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.424328][ T9010] nbd3: detected capacity change from 0 to 12 [ 103.430324][ T5956] block nbd3: Send control failed (result -89) [ 103.433206][ T5956] block nbd3: Request send failed, requeueing [ 103.438124][ T5967] block nbd3: Receive control failed (result -32) [ 103.440592][ T67] block nbd3: Dead connection, failed to find a fallback [ 103.444046][ T67] block nbd3: shutting down sockets [ 103.446493][ T67] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.449798][ T67] buffer_io_error: 23 callbacks suppressed [ 103.449806][ T67] Buffer I/O error on dev nbd3, logical block 0, async page read [ 103.454654][ T5956] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.458907][ T5956] Buffer I/O error on dev nbd3, logical block 0, async page read [ 103.461908][ T5956] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.464881][ T5956] Buffer I/O error on dev nbd3, logical block 0, async page read [ 103.467369][ T5956] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.473604][ T5956] Buffer I/O error on dev nbd3, logical block 0, async page read [ 103.476462][ T5956] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.479379][ T5956] Buffer I/O error on dev nbd3, logical block 0, async page read [ 103.482291][ T5956] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.486297][ T5956] Buffer I/O error on dev nbd3, logical block 0, async page read [ 103.489206][ T5956] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.490334][ T40] audit: type=1400 audit(1751947988.730:642): avc: denied { mount } for pid=9019 comm="syz.2.852" name="/" dev="9p" ino=35913804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 103.492343][ T5956] Buffer I/O error on dev nbd3, logical block 0, async page read [ 103.492437][ T5956] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.506046][ T5956] Buffer I/O error on dev nbd3, logical block 0, async page read [ 103.509338][ T5956] ldm_validate_partition_table(): Disk read failed. [ 103.511960][ T5956] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.515872][ T5956] Buffer I/O error on dev nbd3, logical block 0, async page read [ 103.519554][ T5956] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.522996][ T40] audit: type=1800 audit(1751947988.760:643): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.852" name="bus" dev="9p" ino=35913964 res=0 errno=0 [ 103.524261][ T5956] Buffer I/O error on dev nbd3, logical block 0, async page read [ 103.531047][ T5956] Dev nbd3: unable to read RDB block 0 [ 103.535556][ T5956] nbd3: unable to read partition table [ 103.537431][ T5956] nbd3: partition table beyond EOD, truncated [ 103.545358][ T5956] ldm_validate_partition_table(): Disk read failed. [ 103.547837][ T5956] Dev nbd3: unable to read RDB block 0 [ 103.550639][ T5956] nbd3: unable to read partition table [ 103.552452][ T5956] nbd3: partition table beyond EOD, truncated [ 103.607514][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 103.615554][ T9026] geneve2: entered promiscuous mode [ 103.617735][ T9026] geneve2: entered allmulticast mode [ 103.886647][ T9054] syz.2.862: attempt to access beyond end of device [ 103.886647][ T9054] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 103.890926][ T9054] SQUASHFS error: Failed to read block 0x0: -5 [ 103.892909][ T9054] unable to read squashfs_super_block [ 104.263171][ T837] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 104.268374][ T9067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 104.271130][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 104.281398][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 104.284383][ T9067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 104.287110][ T9067] netlink: 'syz.3.868': attribute type 19 has an invalid length. [ 104.290405][ T9067] smc: net device bond0 applied user defined pnetid SYZ2 [ 104.376401][ T9070] Attempt to restore checkpoint with obsolete wellknown handles [ 104.413092][ T837] usb 7-1: device descriptor read/64, error -71 [ 104.629105][ T9072] syzkaller1: entered promiscuous mode [ 104.630860][ T9072] syzkaller1: entered allmulticast mode [ 104.653292][ T837] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 104.783310][ T837] usb 7-1: device descriptor read/64, error -71 [ 104.893294][ T837] usb usb7-port1: attempt power cycle [ 105.253456][ T837] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 105.273579][ T837] usb 7-1: device descriptor read/8, error -71 [ 105.533123][ T837] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 105.564036][ T837] usb 7-1: device descriptor read/8, error -71 [ 105.676139][ T837] usb usb7-port1: unable to enumerate USB device [ 105.870244][ T9121] tls_set_device_offload_rx: netdev not found [ 106.262801][ T9148] netlink: 'syz.3.890': attribute type 1 has an invalid length. [ 106.265522][ T9148] netlink: 244 bytes leftover after parsing attributes in process `syz.3.890'. [ 106.269142][ T9157] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 106.315056][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 106.317843][ T9160] netlink: 40 bytes leftover after parsing attributes in process `syz.3.893'. [ 106.326885][ T9160] xt_hashlimit: size too large, truncated to 1048576 [ 106.425182][ T9168] macvlan2: entered promiscuous mode [ 106.426915][ T9168] macvlan2: entered allmulticast mode [ 106.428871][ T9168] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 106.822258][ T9191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.903'. [ 106.825345][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 106.974271][ T6036] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 107.042437][ T9197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.098142][ T9197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.124840][ T6036] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 107.127539][ T6036] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 107.132127][ T6036] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 107.137500][ T6036] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 107.140862][ T6036] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 107.146195][ T6036] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.148999][ T6036] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.149921][ T9208] netlink: 'syz.0.908': attribute type 1 has an invalid length. [ 107.152457][ T9197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.157111][ T6036] usb 8-1: Product: syz [ 107.158427][ T6036] usb 8-1: Manufacturer: syz [ 107.165542][ T6036] cdc_wdm 8-1:1.0: skipping garbage [ 107.167241][ T6036] cdc_wdm 8-1:1.0: skipping garbage [ 107.170157][ T6036] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 107.172089][ T6036] cdc_wdm 8-1:1.0: Unknown control protocol [ 107.184658][ T9209] netlink: 132 bytes leftover after parsing attributes in process `syz.0.908'. [ 107.194623][ T9208] 8021q: adding VLAN 0 to HW filter on device bond5 [ 107.274791][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 107.274802][ T40] audit: type=1400 audit(1751947992.520:652): avc: denied { name_connect } for pid=9216 comm="syz.0.911" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 107.326938][ T40] audit: type=1400 audit(1751947992.570:653): avc: denied { setopt } for pid=9216 comm="syz.0.911" lport=38736 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 107.411061][ T9222] team0: left allmulticast mode [ 107.413187][ T9222] team_slave_0: left allmulticast mode [ 107.415301][ T9222] team_slave_1: left allmulticast mode [ 107.417720][ T9222] bridge0: port 3(team0) entered disabled state [ 107.423905][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.426076][ T837] usb 8-1: USB disconnect, device number 9 [ 107.426081][ C2] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 107.426148][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 107.431982][ C2] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 107.437927][ T9222] bridge_slave_1: left allmulticast mode [ 107.439708][ T9222] bridge_slave_1: left promiscuous mode [ 107.441580][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.446643][ T9222] bond0: (slave bond_slave_0): Releasing backup interface [ 107.453147][ T9222] bond0: (slave bond_slave_1): Releasing backup interface [ 107.458059][ T9222] team_slave_0: left promiscuous mode [ 107.460372][ T9224] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 107.467869][ T9222] team0: Port device team_slave_0 removed [ 107.470316][ T9222] team_slave_1: left promiscuous mode [ 107.477674][ T9222] team0: Port device team_slave_1 removed [ 107.480530][ T9222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.485050][ T9222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.489048][ T9222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.491961][ T9222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.502021][ T9222] bond3: (slave bridge1): Releasing active interface [ 107.518957][ T9224] lo: entered promiscuous mode [ 107.521276][ T9224] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 107.530361][ T9222] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 107.531552][ T9224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.539884][ T9224] bond0: (slave lo): Enslaving as an active interface with an up link [ 107.545893][ T9222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.548666][ T9222] bond0: entered promiscuous mode [ 107.550720][ T9222] team0: Port device bond0 added [ 107.745795][ T9238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.915'. [ 107.749950][ T40] audit: type=1400 audit(1751947992.990:654): avc: denied { setopt } for pid=9237 comm="syz.2.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 107.818349][ T40] audit: type=1400 audit(1751947993.060:655): avc: denied { listen } for pid=9246 comm="syz.2.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 107.829439][ T9247] wireguard0: entered promiscuous mode [ 107.831628][ T9247] wireguard0: entered allmulticast mode [ 108.053183][ T836] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 108.205043][ T836] usb 5-1: not running at top speed; connect to a high speed hub [ 108.209217][ T836] usb 5-1: config 7 has an invalid interface number: 86 but max is 1 [ 108.211773][ T836] usb 5-1: config 7 has an invalid interface number: 78 but max is 1 [ 108.214761][ T836] usb 5-1: config 7 has an invalid interface number: 60 but max is 1 [ 108.217316][ T836] usb 5-1: config 7 has 3 interfaces, different from the descriptor's value: 2 [ 108.220098][ T836] usb 5-1: config 7 has no interface number 0 [ 108.222022][ T836] usb 5-1: config 7 has no interface number 1 [ 108.224194][ T836] usb 5-1: config 7 has no interface number 2 [ 108.226746][ T836] usb 5-1: config 7 interface 86 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 108.230099][ T836] usb 5-1: config 7 interface 86 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 108.233625][ T836] usb 5-1: config 7 interface 86 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 108.237033][ T836] usb 5-1: config 7 interface 86 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 108.240380][ T836] usb 5-1: config 7 interface 86 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 108.244158][ T836] usb 5-1: config 7 interface 86 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 108.247455][ T836] usb 5-1: config 7 interface 86 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 108.250826][ T836] usb 5-1: config 7 interface 86 altsetting 4 has 12 endpoint descriptors, different from the interface descriptor's value: 15 [ 108.255592][ T836] usb 5-1: config 7 interface 78 altsetting 190 has a duplicate endpoint with address 0x6, skipping [ 108.259060][ T836] usb 5-1: config 7 interface 78 altsetting 190 has an invalid descriptor for endpoint zero, skipping [ 108.262460][ T836] usb 5-1: config 7 interface 78 altsetting 190 has an endpoint descriptor with address 0x99, changing to 0x89 [ 108.266234][ T836] usb 5-1: config 7 interface 78 altsetting 190 has 3 endpoint descriptors, different from the interface descriptor's value: 21 [ 108.270321][ T836] usb 5-1: config 7 interface 60 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 108.275084][ T836] usb 5-1: config 7 interface 60 altsetting 0 endpoint 0x5 has invalid maxpacket 927, setting to 64 [ 108.278799][ T836] usb 5-1: config 7 interface 60 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 108.282234][ T836] usb 5-1: config 7 interface 60 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 108.286555][ T836] usb 5-1: config 7 interface 60 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 108.290802][ T836] usb 5-1: config 7 interface 60 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 108.294499][ T836] usb 5-1: config 7 interface 60 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 108.299074][ T40] audit: type=1400 audit(1751947993.540:656): avc: denied { execute } for pid=9251 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 108.299521][ T40] audit: type=1400 audit(1751947993.540:657): avc: denied { execute_no_trans } for pid=9251 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 108.308779][ T836] usb 5-1: config 7 interface 60 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 108.322104][ T836] usb 5-1: config 7 interface 86 has no altsetting 0 [ 108.325173][ T836] usb 5-1: config 7 interface 78 has no altsetting 0 [ 108.326908][ T9253] netlink: 'syz.3.921': attribute type 2 has an invalid length. [ 108.331076][ T9253] netlink: 'syz.3.921': attribute type 1 has an invalid length. [ 108.333574][ T836] usb 5-1: New USB device found, idVendor=15c2, idProduct=003f, bcdDevice= a.f4 [ 108.333596][ T836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.333613][ T836] usb 5-1: Product: syz [ 108.333625][ T836] usb 5-1: Manufacturer: 蘗腂æšï‚’⻅ῷ껖룺ᇢ켹姬淞䷞얣䅸疹嶉얱ᨨ䫬헤ᅱæ¸ïŸ£å®éˆ…쇗ቖ髅⤤ᄕ◙鸗ᰨ䈙í›è¾½à»ªê˜§êˆ”èŸà¶™Ò·æŒ·ä…¾á–ºìº¾ì²–칋䀄㭠뺪陘탈蟈浛î™ê»²é¥‹è†•ä‰¶âš£ê®‡îˆê–Žî’…í˜ë‡¶íŠ¨ë‘¥ã ©ì³¢ïšë£á»”逨㧃铽㩡ᾆ꤫⒫担ê½â££íŒžë…±éŽ€á•žâŒ†é¡½ê“…뗲켻ï«â€ƒä€•ï…è¹²ç©ì®ªè‡£â‡œâ²˜ì²¼æ®‹æ«¡ëŒ’졚筓е얒샙åµÇ´å¦œìž” [ 108.333657][ T836] usb 5-1: SerialNumber: syz [ 108.355663][ T9253] netlink: 'syz.3.921': attribute type 1 has an invalid length. [ 108.360221][ T9254] netlink: 'syz.3.921': attribute type 2 has an invalid length. [ 108.363872][ T9254] netlink: 'syz.3.921': attribute type 1 has an invalid length. [ 108.372056][ T9254] netlink: 'syz.3.921': attribute type 1 has an invalid length. [ 108.384319][ T9253] netlink: 'syz.3.921': attribute type 2 has an invalid length. [ 108.387667][ T9253] netlink: 784 bytes leftover after parsing attributes in process `syz.3.921'. [ 108.484243][ T5961] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.487704][ T5961] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.490890][ T5961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.495167][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.497660][ T5961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.504367][ T5967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.507015][ T5967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.509649][ T5967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.512615][ T5967] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.515452][ T5967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.634548][ T9279] program syz.2.926 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.660226][ T8725] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.675411][ T9265] chnl_net:caif_netlink_parms(): no params data found [ 108.727862][ T9286] 9pnet_fd: Insufficient options for proto=fd [ 108.742275][ T8725] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.749569][ T40] audit: type=1400 audit(1751947993.990:658): avc: denied { ioctl } for pid=9244 comm="syz.0.918" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0xaf10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 108.762525][ T40] audit: type=1400 audit(1751947994.000:659): avc: denied { map } for pid=9244 comm="syz.0.918" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 108.774751][ T9295] loop6: detected capacity change from 0 to 524287999 [ 108.801721][ T836] imon 5-1:7.86: unable to register, err -19 [ 108.810423][ T836] imon 5-1:7.78: unable to register, err -19 [ 108.818042][ T8725] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.825892][ T836] imon 5-1:7.60: unable to register, err -19 [ 108.830105][ T836] usb 5-1: USB disconnect, device number 8 [ 108.874189][ T9265] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.876574][ T9265] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.878823][ T9265] bridge_slave_0: entered allmulticast mode [ 108.881530][ T9265] bridge_slave_0: entered promiscuous mode [ 108.885768][ T9265] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.886573][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.933'. [ 108.888123][ T9265] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.894036][ T9265] bridge_slave_1: entered allmulticast mode [ 108.896795][ T9265] bridge_slave_1: entered promiscuous mode [ 108.939958][ T9265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.972412][ T8725] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.980678][ T9265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.042339][ T9265] team0: Port device team_slave_0 added [ 109.048874][ T9265] team0: Port device team_slave_1 added [ 109.090542][ T9265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.093522][ T9265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.102667][ T9265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.108404][ T9265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.111136][ T9265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.120938][ T9265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.151499][ T9324] hsr0: entered promiscuous mode [ 109.154568][ T9324] macsec2: entered allmulticast mode [ 109.156271][ T9324] hsr0: entered allmulticast mode [ 109.157857][ T9324] hsr_slave_0: entered allmulticast mode [ 109.159648][ T9324] hsr_slave_1: entered allmulticast mode [ 109.211116][ T9336] "syz.2.943" (9336) uses obsolete ecb(arc4) skcipher [ 109.211286][ T40] audit: type=1401 audit(1751947994.450:660): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 109.214342][ T9265] hsr_slave_0: entered promiscuous mode [ 109.223515][ T9265] hsr_slave_1: entered promiscuous mode [ 109.224046][ T9340] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 109.225604][ T9265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.228422][ T40] audit: type=1400 audit(1751947994.470:661): avc: denied { relabelto } for pid=9335 comm="syz.2.943" name="198" dev="tmpfs" ino=1082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 109.230635][ T9265] Cannot create hsr debugfs directory [ 109.288614][ T8725] bridge_slave_1: left allmulticast mode [ 109.291222][ T8725] bridge_slave_1: left promiscuous mode [ 109.303558][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.310380][ T8725] bridge_slave_0: left allmulticast mode [ 109.313453][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.505891][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 109.510221][ T9367] nbd: must specify at least one socket [ 109.675908][ T8725] bond1 (unregistering): Released all slaves [ 109.752610][ T9378] netpci0: tun_chr_ioctl cmd 1074025672 [ 109.754540][ T9378] netpci0: ignored: set checksum disabled [ 109.774268][ T9381] program syz.3.953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.822895][ T9265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.828578][ T9265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.832941][ T9265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.861153][ T9265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.935464][ T9265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.946711][ T9265] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.954177][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.957371][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.969337][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.971706][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.015781][ T8725] hsr_slave_0: left promiscuous mode [ 110.019243][ T8725] hsr_slave_1: left promiscuous mode [ 110.021405][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.024945][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.027868][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.030281][ T8725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.057079][ T8725] veth1_macvtap: left promiscuous mode [ 110.059260][ T8725] veth0_macvtap: left promiscuous mode [ 110.061099][ T8725] veth1_vlan: left promiscuous mode [ 110.062821][ T8725] veth0_vlan: left promiscuous mode [ 110.182562][ T9404] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.604183][ T5961] Bluetooth: hci2: command tx timeout [ 110.644380][ T8725] team0 (unregistering): Port device team_slave_1 removed [ 110.704054][ T8725] team0 (unregistering): Port device team_slave_0 removed [ 111.267973][ T9265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.336952][ T9422] block device autoloading is deprecated and will be removed. [ 111.341562][ T9427] ªªªªªª2g,¾{: renamed from lo [ 111.347023][ T9430] kAFS: unparsable volume name [ 111.378167][ T9430] vlan2: entered promiscuous mode [ 111.379951][ T9430] bond0: entered promiscuous mode [ 111.381656][ T9430] bond_slave_0: entered promiscuous mode [ 111.384265][ T9430] bond_slave_1: entered promiscuous mode [ 111.388490][ T9437] ip6t_srh: unknown srh match flags B153 [ 111.430084][ T9427] kAFS: Can only specify source 'none' with -o dyn [ 111.437361][ T9265] veth0_vlan: entered promiscuous mode [ 111.442848][ T9265] veth1_vlan: entered promiscuous mode [ 111.461844][ T9265] veth0_macvtap: entered promiscuous mode [ 111.466168][ T9265] veth1_macvtap: entered promiscuous mode [ 111.475176][ T9265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.489619][ T9265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.494895][ T9265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.497718][ T9265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.500625][ T9265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.503679][ T9265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.555050][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.557607][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.578990][ T1243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.581524][ T1243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.628867][ T8725] IPVS: stop unused estimator thread 0... [ 111.755333][ T9466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.792797][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.971'. [ 111.822334][ T9494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 111.855520][ T9510] nfs4: Unknown parameter '*}'' [ 111.868478][ T9513] SELinux: Context system_u:object_r:crontab_exec_t:s0 is not valid (left unmapped). [ 111.919699][ T9519] hfs: can't find a HFS filesystem on dev sr0 [ 112.238370][ T9532] overlay: Bad value for 'workdir' [ 112.238433][ T9533] overlay: Bad value for 'workdir' [ 112.257726][ T9563] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 112.443353][ T6036] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 112.614820][ T6036] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.618050][ T6036] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.620743][ T6036] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.625234][ T6036] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 112.628656][ T6036] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 112.631998][ T6036] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 112.635068][ T6036] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.639633][ T9552] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 112.645436][ T6036] hub 8-1:1.0: bad descriptor, ignoring hub [ 112.647277][ T6036] hub 8-1:1.0: probe with driver hub failed with error -5 [ 112.650274][ T6036] cdc_wdm 8-1:1.0: skipping garbage [ 112.655182][ T6036] cdc_wdm 8-1:1.0: skipping garbage [ 112.659386][ T6036] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 112.661267][ T6036] cdc_wdm 8-1:1.0: Unknown control protocol [ 112.683496][ T5961] Bluetooth: hci2: command tx timeout [ 112.865149][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 112.865165][ T40] audit: type=1400 audit(1751947998.110:689): avc: denied { create } for pid=9611 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 112.938377][ T40] audit: type=1400 audit(1751947998.180:690): avc: denied { write } for pid=9611 comm="syz.4.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 113.060870][ T9637] syzkaller0: entered promiscuous mode [ 113.062727][ T9637] syzkaller0: entered allmulticast mode [ 113.142909][ T9650] netlink: 132 bytes leftover after parsing attributes in process `syz.0.996'. [ 113.395464][ T9552] usb 8-1: reset low-speed USB device number 10 using dummy_hcd [ 113.698396][ T9617] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.723472][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 113.726153][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 114.117499][ T835] usb 8-1: USB disconnect, device number 10 [ 114.196333][ T40] audit: type=1400 audit(1751947999.440:691): avc: denied { node_bind } for pid=9667 comm="syz.0.1000" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 114.274204][ T40] audit: type=1400 audit(1751947999.510:692): avc: denied { read } for pid=9680 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 114.341520][ T9685] tc_dump_action: action bad kind [ 114.530307][ T9692] Bluetooth: MGMT ver 1.23 [ 114.563239][ T10] IPVS: starting estimator thread 0... [ 114.566451][ T9694] could not open pipe file descriptor [ 114.626918][ T9703] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1011'. [ 114.654425][ T9695] IPVS: using max 44 ests per chain, 105600 per kthread [ 114.679677][ T9706] tipc: Started in network mode [ 114.681340][ T9706] tipc: Node identity b6c606b65b79, cluster identity 4711 [ 114.684261][ T9706] tipc: Enabled bearer , priority 0 [ 114.689917][ T40] audit: type=1326 audit(1751947999.930:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9705 comm="syz.3.1012" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6fed8e929 code=0x0 [ 114.710010][ T9484] tipc: Subscription rejected, illegal request [ 114.744032][ T9715] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1015'. [ 114.750246][ T9715] pimreg3: entered allmulticast mode [ 114.753244][ T5961] Bluetooth: hci2: command tx timeout [ 114.791364][ T9721] tipc: Resetting bearer [ 115.783125][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 115.786200][ T837] tipc: Node number set to 3988719286 [ 115.945340][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.949145][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 115.952591][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 115.956783][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.961056][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.964337][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.971469][ T24] usb 5-1: config 0 descriptor?? [ 115.974443][ T9737] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.980534][ T9721] tipc: Disabling bearer [ 116.132322][ T9751] loop2: detected capacity change from 0 to 7 [ 116.142519][ T9751] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 116.144572][ T9751] loop2: partition table partially beyond EOD, truncated [ 116.148037][ T9751] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 116.179786][ T5956] udevd[5956]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 116.225129][ T9760] overlayfs: failed to decode file handle (len=6, type=65535, flags=0, err=-22) [ 116.263826][ T9767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9767 comm=syz.3.1026 [ 116.293563][ T9760] overlay: filesystem on ./bus not supported as upperdir [ 116.395140][ T24] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 116.404301][ T24] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 116.476034][ T9777] xt_hashlimit: size too large, truncated to 1048576 [ 116.627992][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 116.628009][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1035'. [ 116.628024][ T9786] validate_nla: 6 callbacks suppressed [ 116.628030][ T9786] netlink: 'syz.4.1035': attribute type 19 has an invalid length. [ 116.658552][ T837] usb 5-1: USB disconnect, device number 9 [ 116.747642][ T9795] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1039'. [ 116.778595][ T9797] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 116.778652][ T9797] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 116.818729][ T9797] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1040'. [ 116.833429][ T5961] Bluetooth: hci2: command tx timeout [ 116.849185][ T40] audit: type=1400 audit(1751948002.090:694): avc: denied { ioctl } for pid=9800 comm="syz.2.1041" path="socket:[30876]" dev="sockfs" ino=30876 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.927280][ T9804] netlink: 'syz.2.1042': attribute type 1 has an invalid length. [ 116.980190][ T40] audit: type=1400 audit(1751948002.220:695): avc: denied { append } for pid=9808 comm="syz.4.1044" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 117.066606][ T9820] xt_connbytes: Forcing CT accounting to be enabled [ 117.069034][ T9820] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 117.076129][ T9820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1047'. [ 117.143884][ T9818] nbd4: detected capacity change from 0 to 12 [ 117.146906][ T5956] block nbd4: Send control failed (result -89) [ 117.148877][ T5956] block nbd4: Request send failed, requeueing [ 117.153423][ T5961] block nbd4: Receive control failed (result -32) [ 117.153443][ T67] block nbd4: Dead connection, failed to find a fallback [ 117.155542][ T67] block nbd4: shutting down sockets [ 117.155567][ T67] blk_print_req_error: 25 callbacks suppressed [ 117.155574][ T67] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.155591][ T67] buffer_io_error: 25 callbacks suppressed [ 117.155596][ T67] Buffer I/O error on dev nbd4, logical block 0, async page read [ 117.155718][ T5956] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.171977][ T5956] Buffer I/O error on dev nbd4, logical block 0, async page read [ 117.174661][ T5956] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.177504][ T5956] Buffer I/O error on dev nbd4, logical block 0, async page read [ 117.179930][ T5956] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.182650][ T5956] Buffer I/O error on dev nbd4, logical block 0, async page read [ 117.187654][ T5956] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.190563][ T5956] Buffer I/O error on dev nbd4, logical block 0, async page read [ 117.194600][ T5956] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.198315][ T5956] Buffer I/O error on dev nbd4, logical block 0, async page read [ 117.202495][ T5956] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.204949][ T40] audit: type=1400 audit(1751948002.440:696): avc: denied { write } for pid=9817 comm="syz.4.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.205896][ T5956] Buffer I/O error on dev nbd4, logical block 0, async page read [ 117.215195][ T5956] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.218012][ T5956] Buffer I/O error on dev nbd4, logical block 0, async page read [ 117.220494][ T5956] ldm_validate_partition_table(): Disk read failed. [ 117.222593][ T5956] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.225615][ T5956] Buffer I/O error on dev nbd4, logical block 0, async page read [ 117.228841][ T5956] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.231727][ T5956] Buffer I/O error on dev nbd4, logical block 0, async page read [ 117.234654][ T5956] Dev nbd4: unable to read RDB block 0 [ 117.236558][ T5956] nbd4: unable to read partition table [ 117.238370][ T5956] nbd4: partition table beyond EOD, truncated [ 117.241686][ T9826] SELinux: ebitmap: truncated map [ 117.246612][ T5956] ldm_validate_partition_table(): Disk read failed. [ 117.248006][ T9826] SELinux: failed to load policy [ 117.249482][ T5956] Dev nbd4: unable to read RDB block 0 [ 117.253343][ T5956] nbd4: unable to read partition table [ 117.255621][ T5956] nbd4: partition table beyond EOD, truncated [ 117.443290][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 117.573126][ T24] usb 5-1: device descriptor read/64, error -71 [ 117.736078][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1050'. [ 117.770336][ T40] audit: type=1400 audit(1751948003.010:697): avc: denied { ioctl } for pid=9835 comm="syz.2.1051" path="socket:[30968]" dev="sockfs" ino=30968 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 117.780692][ T40] audit: type=1400 audit(1751948003.020:698): avc: denied { setopt } for pid=9835 comm="syz.2.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 117.833163][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 117.963149][ T24] usb 5-1: device descriptor read/64, error -71 [ 118.073414][ T24] usb usb5-port1: attempt power cycle [ 118.423195][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 118.445434][ T24] usb 5-1: device descriptor read/8, error -71 [ 118.619810][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 118.619826][ T40] audit: type=1400 audit(1751948003.860:701): avc: denied { ioctl } for pid=9871 comm="syz.3.1061" path="net:[4026533179]" dev="nsfs" ino=4026533179 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 118.664310][ T9877] vxcan1: tx address claim with dlc 0 [ 118.683277][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 118.688577][ T9881] xt_policy: output policy not valid in PREROUTING and INPUT [ 118.703718][ T24] usb 5-1: device descriptor read/8, error -71 [ 118.758047][ T40] audit: type=1800 audit(1751948004.000:702): pid=9887 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1066" name="bus" dev="9p" ino=35913964 res=0 errno=0 [ 118.770582][ T40] audit: type=1400 audit(1751948004.010:703): avc: denied { ioctl } for pid=9880 comm="syz.3.1066" path="/294/file0/bus" dev="9p" ino=35913964 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.813987][ T24] usb usb5-port1: unable to enumerate USB device [ 119.318832][ T40] audit: type=1400 audit(1751948004.560:704): avc: denied { map } for pid=9918 comm="syz.3.1069" path="socket:[32467]" dev="sockfs" ino=32467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 119.448854][ T9956] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1074'. [ 119.566823][ T9962] netlink: 'syz.4.1075': attribute type 4 has an invalid length. [ 119.569289][ T9962] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1075'. [ 119.574404][ T9962] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 119.587679][ T9962] netlink: 'syz.4.1075': attribute type 1 has an invalid length. [ 119.627737][ T40] audit: type=1400 audit(1751948004.870:705): avc: denied { ioctl } for pid=9969 comm="syz.4.1078" path="socket:[33046]" dev="sockfs" ino=33046 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.672974][ T9975] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3354 [ 119.718875][ T9982] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.1081'. [ 119.749349][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1079'. [ 119.840132][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 120.078910][ T24] libceph: connect (1)[c::]:6789 error -22 [ 120.081186][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 120.121580][ T24] libceph: connect (1)[c::]:6789 error -22 [ 120.123837][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 120.283658][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 120.345257][ T24] libceph: connect (1)[c::]:6789 error -22 [ 120.347258][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 120.369373][T10025] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1092'. [ 120.378513][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'. [ 120.383417][ T24] libceph: connect (1)[c::]:6789 error -22 [ 120.385484][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 120.465360][ T10] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.468849][ T10] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 120.472202][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.475323][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.480025][T10002] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 120.483974][ T10] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.686695][T10002] 9pnet_fd: Insufficient options for proto=fd [ 120.692197][ T1025] usb 9-1: USB disconnect, device number 2 [ 120.758131][T10032] 9pnet_fd: Insufficient options for proto=fd [ 120.787113][ T40] audit: type=1400 audit(1751948006.030:706): avc: denied { ioctl } for pid=10033 comm="syz.2.1095" path="socket:[33076]" dev="sockfs" ino=33076 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 120.863352][ T53] libceph: connect (1)[c::]:6789 error -22 [ 120.865316][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 120.895930][ T53] libceph: connect (1)[c::]:6789 error -22 [ 120.897019][T10004] ceph: No mds server is up or the cluster is laggy [ 120.897846][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 120.902606][T10007] ceph: No mds server is up or the cluster is laggy [ 121.024546][T10049] cgroup: Unknown subsys name 'cpuset' [ 121.091252][ T40] audit: type=1400 audit(1751948006.330:707): avc: denied { create } for pid=10047 comm="syz.3.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 121.097756][ T40] audit: type=1400 audit(1751948006.330:708): avc: denied { ioctl } for pid=10047 comm="syz.3.1100" path="socket:[32646]" dev="sockfs" ino=32646 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 121.232325][T10054] syzkaller0: entered promiscuous mode [ 121.234357][T10054] syzkaller0: entered allmulticast mode [ 121.403183][ T53] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 121.443215][ T40] audit: type=1400 audit(1751948006.680:709): avc: denied { append } for pid=10058 comm="syz.4.1104" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.580252][ T40] audit: type=1400 audit(1751948006.820:710): avc: denied { create } for pid=10064 comm="syz.4.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 121.587699][ T53] usb 8-1: Using ep0 maxpacket: 16 [ 121.590561][ T53] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 121.593628][ T53] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 121.597027][ T53] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 121.600052][ T53] usb 8-1: config 0 interface 0 has no altsetting 0 [ 121.604730][ T53] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 121.607527][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.610035][ T53] usb 8-1: Product: syz [ 121.611454][ T53] usb 8-1: Manufacturer: syz [ 121.612929][ T53] usb 8-1: SerialNumber: syz [ 121.616059][ T53] usb 8-1: config 0 descriptor?? [ 121.711068][T10079] fuse: Bad value for 'user_id' [ 121.712740][T10079] fuse: Bad value for 'user_id' [ 121.760754][T10082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10082 comm=syz.4.1111 [ 121.870457][T10095] syz.2.1112 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 121.886306][T10084] __nla_validate_parse: 2 callbacks suppressed [ 121.886317][T10084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1112'. [ 121.906359][T10100] program syz.4.1116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.929024][ T53] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input22 [ 121.934777][ T5350] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 121.935335][T10105] syz_tun: entered allmulticast mode [ 121.942309][ T5350] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 121.947085][T10103] syz_tun: left allmulticast mode [ 121.959742][ T5350] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 121.969566][ T5350] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 121.992910][ T5969] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 121.997970][ T5350] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 122.007225][ T5350] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 122.012490][ T5350] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 122.068002][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 122.127483][T10102] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 122.130833][T10102] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.1101'. [ 122.333090][ T53] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 122.483129][ T53] usb 7-1: Using ep0 maxpacket: 16 [ 122.487252][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 122.489471][ T53] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 122.492298][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.496057][ T53] usb 7-1: config 0 descriptor?? [ 122.702289][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1121'. [ 122.710675][ T53] usbhid 7-1:0.0: can't add hid device: -71 [ 122.713926][ T53] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 122.720862][ T53] usb 7-1: USB disconnect, device number 26 [ 123.352555][T10151] netlink: 'syz.2.1122': attribute type 5 has an invalid length. [ 123.697469][T10186] tmpfs: Unknown parameter 'usrquota9e³Ä™—‡oèö—á x[ðΑgödUõÝùØM %ØÞ¶VÞþî º­È<>ÁÜÚ~ç¬Hd./file1' [ 123.756217][T10191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.758980][T10191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.003091][ T7469] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 124.155151][ T7469] usb 7-1: No LPM exit latency info found, disabling LPM. [ 124.159248][ T7469] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 124.163916][ T7469] usb 7-1: config 1 interface 0 altsetting 5 endpoint 0x2 has invalid maxpacket 1560, setting to 8 [ 124.168347][ T7469] usb 7-1: config 1 interface 0 has no altsetting 0 [ 124.173540][ T7469] usb 7-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.40 [ 124.177378][ T7469] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.180644][ T7469] usb 7-1: Product: ꘔ盛ëºí“¸å™ŠæŠ’㊒而㯓蹦귓뱩藹皜ﰖ禘ꡃ鶂ⱞ줯å§ì¹ªê®­è³æ€¼ï˜à¡®ß£æ±«å’틢䥞鴨庥ï‹â˜«â‹±ç•‚濤쩨嚕⮗䳽ﲱⅪ䮥é‹ïŒ¹ä¹é»¨à»ºë£·êƒ‘ï´ãº¸æœê˜·å†£ä¡©ê…Ÿç”„à«´ã·å¿¨ã­•ç§¼ë‰¯ê±‡ï½¼ï…«è¾ä½œæ¨¢å³³ê‚®îƒ¬ê‚‰ã´—趶 [ 124.190479][ T7469] usb 7-1: Manufacturer: ᗦ雧쮨ä î¡‹ïŽ‘å—’î‚㤗괖닜例簦ä•îµ—嫂烕 [ 124.191228][ T1025] usb 8-1: USB disconnect, device number 11 [ 124.194674][ T7469] usb 7-1: SerialNumber: ÑŒ [ 124.200894][T10190] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 124.213156][T10190] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 124.277054][T10199] block device autoloading is deprecated and will be removed. [ 124.279935][T10199] syz.3.1134: attempt to access beyond end of device [ 124.279935][T10199] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 124.422259][ T7469] usbhid 7-1:1.0: can't add hid device: -71 [ 124.424322][ T7469] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 124.430470][ T7469] usb 7-1: USB disconnect, device number 27 [ 124.557333][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1137'. [ 124.560681][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1137'. [ 124.622369][ T5951] bridge0: port 3(syz_tun) entered disabled state [ 124.632902][ T5951] syz_tun (unregistering): left allmulticast mode [ 124.635209][ T5951] syz_tun (unregistering): left promiscuous mode [ 124.638227][ T5951] bridge0: port 3(syz_tun) entered disabled state [ 124.945815][ T5967] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.949650][ T5967] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.952588][ T5967] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.957202][ T5967] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.959641][ T5967] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.051109][T10223] chnl_net:caif_netlink_parms(): no params data found [ 125.112640][T10223] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.114985][T10223] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.117275][T10223] bridge_slave_0: entered allmulticast mode [ 125.119881][T10223] bridge_slave_0: entered promiscuous mode [ 125.123360][T10223] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.125901][T10223] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.128140][T10223] bridge_slave_1: entered allmulticast mode [ 125.130682][T10223] bridge_slave_1: entered promiscuous mode [ 125.177892][T10223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.182376][T10223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.222103][T10223] team0: Port device team_slave_0 added [ 125.226789][T10223] team0: Port device team_slave_1 added [ 125.257497][T10223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.259713][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.268686][T10223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.272822][T10223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.275047][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.282918][T10223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.325939][T10223] hsr_slave_0: entered promiscuous mode [ 125.328259][T10223] hsr_slave_1: entered promiscuous mode [ 125.330319][T10223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.332708][T10223] Cannot create hsr debugfs directory [ 125.425824][T10223] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.541127][T10223] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.657297][T10223] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.726309][T10223] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.862897][T10223] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.876602][T10223] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 125.880791][T10223] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 125.885524][T10223] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.921294][T10223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.932835][T10223] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.938026][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.940280][ T8728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.948461][ T8728] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.950752][ T8728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.965399][T10247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1143'. [ 126.052829][T10223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.055451][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 126.055460][ T40] audit: type=1800 audit(1751948011.300:712): pid=10256 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1145" name="bus" dev="overlay" ino=1529 res=0 errno=0 [ 126.081259][T10223] veth0_vlan: entered promiscuous mode [ 126.087243][T10223] veth1_vlan: entered promiscuous mode [ 126.103157][T10223] veth0_macvtap: entered promiscuous mode [ 126.106833][T10223] veth1_macvtap: entered promiscuous mode [ 126.117825][T10223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.124293][T10223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.128826][T10223] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.131481][T10223] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.134219][T10223] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.136915][T10223] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.163650][ T40] audit: type=1400 audit(1751948011.410:713): avc: denied { write } for pid=10255 comm="syz.2.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 126.170439][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 126.176107][ T9482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.178578][ T9482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.191882][ T9484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.194694][ T9484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.234088][ T40] audit: type=1400 audit(1751948011.480:714): avc: denied { module_load } for pid=10259 comm="syz.3.1140" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 126.234852][T10260] kernel read not supported for file /policy (pid: 10260 comm: syz.3.1140) [ 126.287375][T10262] netlink: 'syz.3.1146': attribute type 1 has an invalid length. [ 126.289947][T10262] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1146'. [ 126.426247][T10271] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5) [ 126.574157][T10281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1151'. [ 126.742559][ T40] audit: type=1400 audit(1751948011.980:715): avc: denied { getopt } for pid=10284 comm="syz.3.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 126.993212][ T5961] Bluetooth: hci0: command tx timeout [ 127.013420][ T5970] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 127.153117][ T5970] usb 8-1: device descriptor read/64, error -71 [ 127.405228][ T5970] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 127.503256][ T837] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 127.533273][ T5970] usb 8-1: device descriptor read/64, error -71 [ 127.643370][ T5970] usb usb8-port1: attempt power cycle [ 127.674629][ T837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.678028][ T837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.680910][ T837] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.685910][ T837] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.688705][ T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.693425][ T837] usb 7-1: config 0 descriptor?? [ 127.993415][ T5970] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 128.013810][ T5970] usb 8-1: device descriptor read/8, error -71 [ 128.101147][T10299] ip6t_srh: unknown srh match flags 4000 [ 128.160765][ T837] usbhid 7-1:0.0: can't add hid device: -71 [ 128.160820][ T837] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 128.162510][ T837] usb 7-1: USB disconnect, device number 28 [ 128.274484][ T5970] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 128.303945][ T5970] usb 8-1: device descriptor read/8, error -71 [ 128.423595][ T5970] usb usb8-port1: unable to enumerate USB device [ 129.083277][ T5961] Bluetooth: hci0: command tx timeout [ 129.883287][T10321] overlayfs: failed to resolve './file0': -2 [ 129.915993][T10326] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1166'. [ 130.393107][ T837] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 130.544578][ T837] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 130.547952][ T837] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 130.552911][ T837] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.555898][ T837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.558425][ T837] usb 8-1: Product: syz [ 130.559813][ T837] usb 8-1: Manufacturer: syz [ 130.561346][ T837] usb 8-1: SerialNumber: syz [ 130.722193][T10333] trusted_key: encrypted_key: keylen parameter is missing [ 130.822083][ T837] cdc_ncm 8-1:1.0: bind() failure [ 130.828300][ T837] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 130.830455][ T837] cdc_ncm 8-1:1.1: bind() failure [ 130.834089][ T837] usb 8-1: USB disconnect, device number 16 [ 130.836291][T10340] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.853854][ T40] audit: type=1400 audit(1751948016.090:716): avc: denied { remove_name } for pid=10339 comm="syz.3.1169" name="control" dev="9p" ino=35913969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.861291][ T40] audit: type=1400 audit(1751948016.100:717): avc: denied { rmdir } for pid=10339 comm="syz.3.1169" name="control" dev="9p" ino=35913969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.948798][T10344] input: syz1 as /devices/virtual/input/input23 [ 130.956549][T10347] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 130.965433][T10344] input: failed to attach handler mousedev to device input23, error: -4 [ 130.980348][T10347] cramfs: wrong magic [ 131.143774][T10372] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1176'. [ 131.163686][ T5961] Bluetooth: hci0: command tx timeout [ 131.175278][ T40] audit: type=1804 audit(1751948016.420:718): pid=10374 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1177" name="/newroot/296/file0" dev="tmpfs" ino=1629 res=1 errno=0 [ 131.184203][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 131.401203][ T40] audit: type=1400 audit(1751948016.640:719): avc: denied { bind } for pid=10382 comm="syz.2.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.409443][ T40] audit: type=1400 audit(1751948016.640:720): avc: denied { write } for pid=10382 comm="syz.2.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.595861][T10394] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1183'. [ 131.599105][T10394] netlink: 'syz.2.1183': attribute type 4 has an invalid length. [ 131.601531][T10394] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1183'. [ 131.627734][T10396] i2c i2c-1: Invalid block write size 34 [ 131.656227][T10399] Bluetooth: MGMT ver 1.23 [ 131.869233][ T40] audit: type=1400 audit(1751948017.110:721): avc: denied { setopt } for pid=10402 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 131.882349][ T40] audit: type=1400 audit(1751948017.120:722): avc: denied { read } for pid=10402 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.901164][ T40] audit: type=1400 audit(1751948017.140:723): avc: denied { getopt } for pid=10407 comm="syz.2.1188" lport=52416 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 131.990997][T10414] tipc: Started in network mode [ 131.992586][T10414] tipc: Node identity 2, cluster identity 4711 [ 131.995837][T10414] tipc: Node number set to 2 [ 132.156353][T10417] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.309221][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 132.516369][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.519477][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.701754][T10442] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1198'. [ 133.243147][ T5961] Bluetooth: hci0: command tx timeout [ 133.312896][T10448] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.625193][T10466] input: syz1 as /devices/virtual/input/input24 [ 134.483539][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1206'. [ 134.539589][T10471] netlink: zone id is out of range [ 134.541658][T10471] netlink: zone id is out of range [ 134.544610][T10471] netlink: zone id is out of range [ 134.546777][T10471] netlink: zone id is out of range [ 134.548964][T10471] netlink: zone id is out of range [ 134.551140][T10471] netlink: zone id is out of range [ 134.553349][T10471] netlink: zone id is out of range [ 134.568140][T10471] netlink: set zone limit has 4 unknown bytes [ 135.029268][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'. [ 135.032336][T10475] syz_tun: entered allmulticast mode [ 135.034635][T10475] syz_tun: left allmulticast mode [ 135.089126][T10480] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.194441][T10486] 9pnet: Could not find request transport: t[cp [ 135.348756][T10490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 135.365066][ T40] audit: type=1400 audit(1751948020.610:724): avc: denied { execute } for pid=10489 comm="syz.2.1213" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 135.428698][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 135.437416][ T40] audit: type=1400 audit(1751948020.680:725): avc: denied { getopt } for pid=10499 comm="syz.3.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.446870][ T40] audit: type=1400 audit(1751948020.680:726): avc: denied { bind } for pid=10499 comm="syz.3.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 135.499393][T10509] rdma_op ffff888012bc49f0 conn xmit_rdma 0000000000000000 [ 135.500103][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1221'. [ 135.512380][T10510] team0: entered promiscuous mode [ 135.515100][T10510] team_slave_0: entered promiscuous mode [ 135.519174][T10510] team_slave_1: entered promiscuous mode [ 135.522572][T10510] batadv_slave_1: entered promiscuous mode [ 135.569550][ T5967] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.574021][ T5967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.576844][ T5967] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.580557][ T5967] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.583276][ T5967] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.604439][ T40] audit: type=1400 audit(1751948020.850:727): avc: denied { nlmsg_read } for pid=10514 comm="syz.3.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 135.645118][T10523] xt_hashlimit: size too large, truncated to 1048576 [ 135.702723][T10516] chnl_net:caif_netlink_parms(): no params data found [ 135.777822][T10516] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.780013][T10516] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.782121][T10516] bridge_slave_0: entered allmulticast mode [ 135.785259][T10516] bridge_slave_0: entered promiscuous mode [ 135.788379][T10516] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.790748][T10516] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.792971][T10516] bridge_slave_1: entered allmulticast mode [ 135.797756][T10516] bridge_slave_1: entered promiscuous mode [ 135.839259][T10516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.844251][T10516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.878957][T10516] team0: Port device team_slave_0 added [ 135.888686][T10516] team0: Port device team_slave_1 added [ 135.938320][T10516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.941081][T10516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.951280][T10516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.961316][T10516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.963690][T10516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.971774][T10516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.032902][T10516] hsr_slave_0: entered promiscuous mode [ 136.043853][T10516] hsr_slave_1: entered promiscuous mode [ 136.045952][T10516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.048311][T10516] Cannot create hsr debugfs directory [ 136.153178][ T1025] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 136.173388][T10516] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.187775][T10516] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.193363][T10516] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.198577][T10516] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.222680][T10516] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.225061][T10516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.227429][T10516] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.229753][T10516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.269974][T10516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.281981][ T9492] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.285832][ T9492] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.302635][T10516] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.308424][ T1025] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 136.311190][ T1025] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.313860][ T1025] usb 8-1: Product: syz [ 136.315602][ T1025] usb 8-1: Manufacturer: syz [ 136.317514][ T1025] usb 8-1: SerialNumber: syz [ 136.321290][ T9490] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.321706][ T1025] usb 8-1: config 0 descriptor?? [ 136.324174][ T9490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.332093][ T9478] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.334349][ T9478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.461247][T10516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.541453][T10536] overlayfs: failed to resolve './file0': -2 [ 136.552091][ T6001] usb 8-1: USB disconnect, device number 17 [ 136.602686][T10516] veth0_vlan: entered promiscuous mode [ 136.609370][T10516] veth1_vlan: entered promiscuous mode [ 136.626260][T10516] veth0_macvtap: entered promiscuous mode [ 136.630003][T10516] veth1_macvtap: entered promiscuous mode [ 136.638457][T10516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.645207][T10516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.649608][T10516] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.652200][T10516] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.654830][T10516] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.657438][T10516] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.695688][ T8728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.698071][ T8728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.713715][ T9478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.717156][ T9478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.132116][T10584] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 137.151123][T10584] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 137.155233][T10584] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 137.202844][T10587] gretap1: entered promiscuous mode [ 137.207467][T10587] bond1: (slave gretap1): making interface the new active one [ 137.210305][T10587] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 137.221441][T10584] macvlan3: entered promiscuous mode [ 137.223245][T10584] macvlan3: entered allmulticast mode [ 137.225308][T10584] bond1: entered promiscuous mode [ 137.227296][T10584] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 137.231072][T10584] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 137.235855][T10584] bond1: left promiscuous mode [ 137.414671][T10589] netlink: 696 bytes leftover after parsing attributes in process `syz.3.1239'. [ 137.469051][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'. [ 137.501927][ T40] audit: type=1400 audit(1751948022.740:728): avc: denied { accept } for pid=10598 comm="syz.3.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 137.602381][ T5967] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 137.644196][ T5967] Bluetooth: hci1: command tx timeout [ 137.662719][T10618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1246'. [ 137.680271][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1248'. [ 137.690095][T10624] bridge1: port 1(veth0_to_bond) entered blocking state [ 137.690142][T10624] bridge1: port 1(veth0_to_bond) entered disabled state [ 137.690209][T10624] veth0_to_bond: entered allmulticast mode [ 137.690941][T10624] veth0_to_bond: entered promiscuous mode [ 137.744344][T10578] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 137.747204][T10578] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 137.784411][T10578] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 137.786908][T10578] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 137.790750][T10627] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 137.841135][T10624] vlan2: entered allmulticast mode [ 137.842622][T10624] veth1: entered allmulticast mode [ 137.861871][T10578] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 137.864645][T10578] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 137.905715][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.910717][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.913816][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.916451][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.918714][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.933440][ T5961] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 137.937990][ T5961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 137.941215][ T5961] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 137.945221][ T5961] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 137.949743][ T5961] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.955411][T10632] nbd2: detected capacity change from 0 to 12 [ 138.000038][ T5956] block nbd2: Send control failed (result -89) [ 138.002343][ T5956] block nbd2: Request send failed, requeueing [ 138.006309][ T5967] block nbd2: Receive control failed (result -32) [ 138.006981][ T150] block nbd2: Dead connection, failed to find a fallback [ 138.013787][ T150] block nbd2: shutting down sockets [ 138.015258][ T150] blk_print_req_error: 25 callbacks suppressed [ 138.015266][ T150] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.019453][ T150] buffer_io_error: 25 callbacks suppressed [ 138.019460][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 138.023662][ T5956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.026098][ T5956] Buffer I/O error on dev nbd2, logical block 0, async page read [ 138.028285][ T5956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.030743][ T5956] Buffer I/O error on dev nbd2, logical block 0, async page read [ 138.033598][ T5956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.036768][ T5956] Buffer I/O error on dev nbd2, logical block 0, async page read [ 138.039905][ T5956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.046702][ T5956] Buffer I/O error on dev nbd2, logical block 0, async page read [ 138.049279][ T5956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.052158][ T5956] Buffer I/O error on dev nbd2, logical block 0, async page read [ 138.055791][ T5956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.058621][ T5956] Buffer I/O error on dev nbd2, logical block 0, async page read [ 138.061033][ T5956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.064181][ T5956] Buffer I/O error on dev nbd2, logical block 0, async page read [ 138.066604][ T5956] ldm_validate_partition_table(): Disk read failed. [ 138.068715][ T5956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.071467][ T5956] Buffer I/O error on dev nbd2, logical block 0, async page read [ 138.074573][ T5956] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 138.077356][ T5956] Buffer I/O error on dev nbd2, logical block 0, async page read [ 138.079948][ T5956] Dev nbd2: unable to read RDB block 0 [ 138.081860][ T5956] nbd2: unable to read partition table [ 138.084486][ T5956] nbd2: partition table beyond EOD, truncated [ 138.101426][ T5956] ldm_validate_partition_table(): Disk read failed. [ 138.104022][ T5956] Dev nbd2: unable to read RDB block 0 [ 138.105922][ T5956] nbd2: unable to read partition table [ 138.121165][ T5956] nbd2: partition table beyond EOD, truncated [ 138.166916][T10586] chnl_net:caif_netlink_parms(): no params data found [ 138.260509][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.262567][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.265023][T10586] bridge_slave_0: entered allmulticast mode [ 138.267519][T10586] bridge_slave_0: entered promiscuous mode [ 138.271582][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.274407][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.276663][T10586] bridge_slave_1: entered allmulticast mode [ 138.279152][T10586] bridge_slave_1: entered promiscuous mode [ 138.317025][T10586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.322043][T10586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.367204][ T40] audit: type=1400 audit(1751948023.610:729): avc: denied { getopt } for pid=10656 comm="syz.2.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.377365][T10586] team0: Port device team_slave_0 added [ 138.379996][ T6001] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 138.381498][T10586] team0: Port device team_slave_1 added [ 138.421221][T10586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.421233][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.421259][T10586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.422083][T10586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.422091][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.422110][T10586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.462887][T10586] hsr_slave_0: entered promiscuous mode [ 138.464588][T10586] hsr_slave_1: entered promiscuous mode [ 138.464904][T10586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.464917][T10586] Cannot create hsr debugfs directory [ 138.536356][ T6001] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.539448][ T6001] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.543628][ T6001] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.546318][ T6001] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.641774][T10586] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 138.647787][T10586] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 138.653985][T10586] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.659818][T10586] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 138.716068][T10586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.726753][T10586] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.731616][ T9484] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.733891][ T9484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.740925][ T9484] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.743926][ T9484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.757513][ T6001] usb 8-1: usb_control_msg returned -32 [ 138.759304][ T6001] usbtmc 8-1:16.0: can't read capabilities [ 138.852151][T10586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.874683][T10684] XFS (nbd5): no-recovery mounts must be read-only. [ 139.012471][T10586] veth0_vlan: entered promiscuous mode [ 139.022916][T10586] veth1_vlan: entered promiscuous mode [ 139.042369][T10586] veth0_macvtap: entered promiscuous mode [ 139.046876][T10586] veth1_macvtap: entered promiscuous mode [ 139.062883][T10586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.071915][T10586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.077421][T10586] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.080276][T10586] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.082966][T10586] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.086545][T10586] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.131236][ T9478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.142268][ T9478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.155847][ T9490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.161416][ T9490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.180489][ T40] audit: type=1400 audit(1751948024.420:730): avc: denied { write } for pid=10703 comm="syz.5.1266" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 139.200660][ T40] audit: type=1400 audit(1751948024.440:731): avc: denied { remount } for pid=10706 comm="syz.6.1236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 139.370922][T10720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38930 sclass=netlink_route_socket pid=10720 comm=syz.6.1269 [ 139.377051][T10720] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1269'. [ 139.429855][T10727] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1271'. [ 140.034098][ T5967] Bluetooth: hci4: command tx timeout [ 140.506450][T10727] veth0_to_team: entered allmulticast mode [ 140.514302][T10735] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1273'. [ 140.616120][T10745] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10745 comm=syz.6.1276 [ 140.620365][T10745] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10745 comm=syz.6.1276 [ 140.719305][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 140.764387][ T40] audit: type=1400 audit(1751948026.010:732): avc: denied { bind } for pid=10758 comm="syz.2.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 140.851405][T10767] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1282'. [ 140.871730][ T9479] Bluetooth: hci5: Frame reassembly failed (-84) [ 140.913266][ T40] audit: type=1400 audit(1751948026.150:733): avc: denied { watch_sb watch_reads } for pid=10771 comm="syz.6.1285" path="/9/file0" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 140.918008][T10772] can0: slcan on ptm1. [ 141.004359][T10771] can0 (unregistered): slcan off ptm1. [ 141.035884][ T40] audit: type=1400 audit(1751948026.280:734): avc: denied { getopt } for pid=10779 comm="syz.6.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 141.093807][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1286'. [ 141.113487][ T10] usb 8-1: USB disconnect, device number 18 [ 141.208227][T10788] netlink: 'syz.6.1287': attribute type 32 has an invalid length. [ 141.232835][ T40] audit: type=1400 audit(1751948026.470:735): avc: denied { ioctl } for pid=10787 comm="syz.6.1287" path="socket:[36516]" dev="sockfs" ino=36516 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 141.268484][ T40] audit: type=1400 audit(1751948026.510:736): avc: denied { accept } for pid=10793 comm="syz.6.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 141.315829][T10795] nfs4: Bad value for 'source' [ 142.025597][ T40] audit: type=1800 audit(1751948027.270:737): pid=10808 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1293" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 142.028132][T10808] netlink: 'syz.5.1293': attribute type 12 has an invalid length. [ 142.034795][T10808] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1293'. [ 142.070328][T10810] fuse: Unknown parameter '00000000000000000004' [ 142.113751][ T5961] Bluetooth: hci4: command tx timeout [ 142.142546][T10817] syzkaller1: entered promiscuous mode [ 142.151760][T10817] syzkaller1: entered allmulticast mode [ 142.157250][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1296'. [ 142.157670][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1296'. [ 142.157999][ T837] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 142.160942][T10818] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 142.164400][ T837] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 142.166589][T10818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.170565][T10825] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 142.178380][T10825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.182788][T10818] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1296'. [ 142.186687][T10817] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1296'. [ 142.231073][T10828] tipc: Failed to obtain node identity [ 142.232929][T10828] tipc: Enabling of bearer rejected, failed to enable media [ 142.239951][T10829] sysfs: cannot create duplicate filename '/class/ieee80211/!å¯fIZEô¿¹ô,ô =©ÜÝ$)²% Ä‚LÜêñ' [ 142.245332][T10829] CPU: 0 UID: 0 PID: 10829 Comm: syz.5.1299 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 142.245347][T10829] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 142.245353][T10829] Call Trace: [ 142.245357][T10829] [ 142.245361][T10829] dump_stack_lvl+0x16c/0x1f0 [ 142.245397][T10829] sysfs_warn_dup+0x7f/0xa0 [ 142.245416][T10829] sysfs_do_create_link_sd+0x124/0x140 [ 142.245433][T10829] sysfs_create_link+0x61/0xc0 [ 142.245448][T10829] device_add+0x62c/0x1a70 [ 142.245460][T10829] ? __pfx_device_add+0x10/0x10 [ 142.245469][T10829] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.245483][T10829] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 142.245503][T10829] wiphy_register+0x1c9c/0x2850 [ 142.245514][T10829] ? netdev_run_todo+0x864/0x1320 [ 142.245534][T10829] ? __pfx_wiphy_register+0x10/0x10 [ 142.245550][T10829] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 142.245570][T10829] ieee80211_register_hw+0x24ac/0x4140 [ 142.245586][T10829] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 142.245599][T10829] ? trace_hrtimer_setup+0x194/0x220 [ 142.245612][T10829] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 142.245624][T10829] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 142.245636][T10829] ? __hrtimer_setup+0x176/0x280 [ 142.245649][T10829] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 142.245671][T10829] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 142.245689][T10829] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 142.245708][T10829] ? __asan_memcpy+0x3c/0x60 [ 142.245723][T10829] hwsim_new_radio_nl+0xb51/0x12c0 [ 142.245739][T10829] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 142.245758][T10829] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 142.245772][T10829] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 142.245788][T10829] genl_family_rcv_msg_doit+0x206/0x2f0 [ 142.245802][T10829] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 142.245819][T10829] ? bpf_lsm_capable+0x9/0x10 [ 142.245831][T10829] ? security_capable+0x7e/0x260 [ 142.245844][T10829] ? ns_capable+0xd7/0x110 [ 142.245858][T10829] genl_rcv_msg+0x55c/0x800 [ 142.245872][T10829] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.245884][T10829] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 142.245900][T10829] ? __lock_acquire+0x622/0x1c90 [ 142.245913][T10829] netlink_rcv_skb+0x155/0x420 [ 142.245923][T10829] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.245936][T10829] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.245952][T10829] ? netlink_deliver_tap+0x1ae/0xd30 [ 142.245968][T10829] ? is_vmalloc_addr+0x86/0xa0 [ 142.245984][T10829] genl_rcv+0x28/0x40 [ 142.245994][T10829] netlink_unicast+0x53a/0x7f0 [ 142.246006][T10829] ? __pfx_netlink_unicast+0x10/0x10 [ 142.246021][T10829] netlink_sendmsg+0x8d1/0xdd0 [ 142.246034][T10829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.246050][T10829] ____sys_sendmsg+0xa95/0xc70 [ 142.246061][T10829] ? copy_msghdr_from_user+0x10a/0x160 [ 142.246076][T10829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.246090][T10829] ? __pfx_futex_wake_mark+0x10/0x10 [ 142.246104][T10829] ___sys_sendmsg+0x134/0x1d0 [ 142.246119][T10829] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.246133][T10829] ? __lock_acquire+0x622/0x1c90 [ 142.246160][T10829] __sys_sendmsg+0x16d/0x220 [ 142.246175][T10829] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.246189][T10829] ? __x64_sys_futex+0x1e0/0x4c0 [ 142.246213][T10829] do_syscall_64+0xcd/0x4c0 [ 142.246231][T10829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.246242][T10829] RIP: 0033:0x7f0e5998e929 [ 142.246252][T10829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.246262][T10829] RSP: 002b:00007f0e5a8c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.246272][T10829] RAX: ffffffffffffffda RBX: 00007f0e59bb6080 RCX: 00007f0e5998e929 [ 142.246279][T10829] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 142.246285][T10829] RBP: 00007f0e59a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 142.246291][T10829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.246297][T10829] R13: 0000000000000000 R14: 00007f0e59bb6080 R15: 00007ffd9771acb8 [ 142.246311][T10829] [ 142.397221][T10835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1300'. [ 142.430979][T10840] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 142.433397][T10840] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 142.439588][T10840] vhci_hcd vhci_hcd.0: Device attached [ 142.444935][T10842] vhci_hcd: connection closed [ 142.450362][ T9479] vhci_hcd: stop threads [ 142.454977][ T9479] vhci_hcd: release socket [ 142.456374][ T9479] vhci_hcd: disconnect device [ 142.492495][T10848] netlink: 'syz.3.1302': attribute type 2 has an invalid length. [ 142.558494][T10858] macsec1: entered promiscuous mode [ 142.560196][T10858] macsec1: entered allmulticast mode [ 142.587245][T10861] ip6t_srh: unknown srh invflags 7863 [ 142.723257][T10869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.897099][ T40] audit: type=1400 audit(1751948028.140:738): avc: denied { mount } for pid=10878 comm="syz.3.1312" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 142.898269][T10879] netlink: 'syz.3.1312': attribute type 1 has an invalid length. [ 142.905802][ T40] audit: type=1400 audit(1751948028.140:739): avc: denied { unmount } for pid=10878 comm="syz.3.1312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 142.912741][ T40] audit: type=1400 audit(1751948028.140:740): avc: denied { unmount } for pid=10878 comm="syz.3.1312" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 142.915711][T10879] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.921082][ T5961] Bluetooth: hci5: command 0xfc11 tx timeout [ 142.923302][ T5967] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 142.930843][T10879] bond2: (slave gretap2): making interface the new active one [ 142.934956][T10879] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 143.113972][ T40] audit: type=1400 audit(1751948028.360:741): avc: denied { kexec_image_load } for pid=10901 comm="syz.2.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 143.159151][T10913] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 143.173365][T10913] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 143.387151][T10940] netlink: 'syz.5.1331': attribute type 23 has an invalid length. [ 143.480831][ T40] audit: type=1400 audit(1751948028.720:742): avc: denied { bind } for pid=10945 comm="syz.2.1333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 143.490846][ T40] audit: type=1400 audit(1751948028.720:743): avc: denied { name_bind } for pid=10945 comm="syz.2.1333" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 143.497485][ T40] audit: type=1400 audit(1751948028.720:744): avc: denied { node_bind } for pid=10945 comm="syz.2.1333" saddr=10.1.1.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 143.629468][T10952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.632984][T10952] IPv6: NLM_F_CREATE should be set when creating new route [ 143.644051][T10952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.983116][ T53] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 144.113178][ T53] usb 7-1: device descriptor read/64, error -71 [ 144.193711][ T5967] Bluetooth: hci4: command tx timeout [ 144.283458][ T835] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 144.319341][T10979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.353136][ T53] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 144.435175][ T835] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 144.437453][ T835] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 144.440632][ T835] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.442753][T10981] fuse: Unknown parameter '' [ 144.447120][ T835] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 144.450515][ T835] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 144.454788][ T835] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 144.457053][ T835] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 144.460229][ T835] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.465992][ T835] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 144.469509][ T835] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 144.474795][ T835] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 144.477108][ T835] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 144.480377][ T835] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.483322][ T53] usb 7-1: device descriptor read/64, error -71 [ 144.484159][ T835] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 144.489633][ T835] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 144.495109][ T835] usb 8-1: string descriptor 0 read error: -22 [ 144.497087][ T835] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 144.499855][ T835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.507308][ T835] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 144.593600][ T53] usb usb7-port1: attempt power cycle [ 144.943530][ T53] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 144.974237][ T53] usb 7-1: device descriptor read/8, error -71 [ 145.198806][T10994] program syz.6.1348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.215262][ T53] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 145.244867][ T53] usb 7-1: device descriptor read/8, error -71 [ 145.271124][ T40] audit: type=1326 audit(1751948030.510:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.5.1344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5998e929 code=0x7fc00000 [ 145.278420][ T40] audit: type=1326 audit(1751948030.510:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.5.1344" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e5998e929 code=0x7fc00000 [ 145.289232][ T40] audit: type=1326 audit(1751948030.510:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10980 comm="syz.5.1344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5998e929 code=0x7fc00000 [ 145.353730][ T53] usb usb7-port1: unable to enumerate USB device [ 145.532606][T11009] TCP: out of memory -- consider tuning tcp_mem [ 145.537682][T11009] ------------[ cut here ]------------ [ 145.539434][T11009] WARNING: CPU: 1 PID: 11009 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x684/0x830 [ 145.542344][T11009] Modules linked in: [ 145.544371][T11009] CPU: 1 UID: 0 PID: 11009 Comm: syz.6.1352 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 145.549319][T11009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.552793][T11009] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 145.555471][T11009] Code: 0f 0b 90 e9 12 fe ff ff e8 59 c1 b5 f7 90 0f 0b 90 e9 5e fe ff ff e8 4b c1 b5 f7 90 0f 0b 90 e9 94 fe ff ff e8 3d c1 b5 f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 9f 9c 1c f8 e9 d7 fc ff ff 4c 89 ff e8 [ 145.561455][T11009] RSP: 0018:ffffc90003937c70 EFLAGS: 00010293 [ 145.563669][T11009] RAX: 0000000000000000 RBX: ffff88802ac91980 RCX: ffffffff8a062447 [ 145.566121][T11009] RDX: ffff888113dc0000 RSI: ffffffff8a062573 RDI: 0000000000000005 [ 145.568650][T11009] RBP: 0000000080000000 R08: 0000000000000005 R09: 0000000000000000 [ 145.571116][T11009] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88802ac91980 [ 145.573899][T11009] R13: ffff88802ac91a10 R14: 0000000000000000 R15: ffff88803a7700c0 [ 145.576817][T11009] FS: 00007fcdab32b6c0(0000) GS:ffff8880d6818000(0000) knlGS:0000000000000000 [ 145.579614][T11009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.581677][T11009] CR2: 00007fcdab32af98 CR3: 000000010f633000 CR4: 0000000000352ef0 [ 145.584286][T11009] Call Trace: [ 145.585365][T11009] [ 145.586308][T11009] ? __pfx_inet_sock_destruct+0x10/0x10 [ 145.588719][T11009] __sk_destruct+0x81/0x980 [ 145.590161][T11009] sk_destruct+0xc2/0xf0 [ 145.591533][T11009] __sk_free+0xf4/0x3e0 [ 145.592896][T11009] sk_free+0x6a/0x90 [ 145.594419][T11009] tcp_close+0xd3/0x120 [ 145.595776][T11009] inet_release+0x13f/0x280 [ 145.597325][T11009] __sock_release+0xb0/0x270 [ 145.598789][T11009] ? __pfx_sock_close+0x10/0x10 [ 145.600332][T11009] sock_close+0x1c/0x30 [ 145.601670][T11009] __fput+0x3ff/0xb70 [ 145.603110][T11009] task_work_run+0x14d/0x240 [ 145.604604][T11009] ? __pfx_task_work_run+0x10/0x10 [ 145.606210][T11009] ? __pfx___do_sys_close_range+0x10/0x10 [ 145.608299][T11009] exit_to_user_mode_loop+0xeb/0x110 [ 145.609965][T11009] do_syscall_64+0x3f6/0x4c0 [ 145.611442][T11009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.613495][T11009] RIP: 0033:0x7fcdaa58e929 [ 145.614929][T11009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.621135][T11009] RSP: 002b:00007fcdab32b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 145.624070][T11009] RAX: 0000000000000000 RBX: 00007fcdaa7b6160 RCX: 00007fcdaa58e929 [ 145.626522][T11009] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 145.629060][T11009] RBP: 00007fcdaa610b39 R08: 0000000000000000 R09: 0000000000000000 [ 145.631437][T11009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.634176][T11009] R13: 0000000000000001 R14: 00007fcdaa7b6160 R15: 00007ffd83aa3448 [ 145.636704][T11009] [ 145.638028][T11009] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 145.640334][T11009] CPU: 1 UID: 0 PID: 11009 Comm: syz.6.1352 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 145.643450][T11009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 145.646842][T11009] Call Trace: [ 145.647953][T11009] [ 145.649001][T11009] dump_stack_lvl+0x3d/0x1f0 [ 145.650470][T11009] panic+0x71c/0x800 [ 145.651729][T11009] ? __pfx_panic+0x10/0x10 [ 145.653143][T11009] ? show_trace_log_lvl+0x29b/0x3e0 [ 145.654881][T11009] ? check_panic_on_warn+0x1f/0xb0 [ 145.656566][T11009] ? inet_sock_destruct+0x684/0x830 [ 145.658200][T11009] check_panic_on_warn+0xab/0xb0 [ 145.659858][T11009] __warn+0xf6/0x3c0 [ 145.661043][T11009] ? inet_sock_destruct+0x684/0x830 [ 145.662600][T11009] report_bug+0x3c3/0x580 [ 145.663906][T11009] ? inet_sock_destruct+0x684/0x830 [ 145.665528][T11009] handle_bug+0x184/0x210 [ 145.666974][T11009] exc_invalid_op+0x17/0x50 [ 145.668416][T11009] asm_exc_invalid_op+0x1a/0x20 [ 145.669961][T11009] RIP: 0010:inet_sock_destruct+0x684/0x830 [ 145.671747][T11009] Code: 0f 0b 90 e9 12 fe ff ff e8 59 c1 b5 f7 90 0f 0b 90 e9 5e fe ff ff e8 4b c1 b5 f7 90 0f 0b 90 e9 94 fe ff ff e8 3d c1 b5 f7 90 <0f> 0b 90 e9 d3 fe ff ff e8 9f 9c 1c f8 e9 d7 fc ff ff 4c 89 ff e8 [ 145.677523][T11009] RSP: 0018:ffffc90003937c70 EFLAGS: 00010293 [ 145.679382][T11009] RAX: 0000000000000000 RBX: ffff88802ac91980 RCX: ffffffff8a062447 [ 145.681875][T11009] RDX: ffff888113dc0000 RSI: ffffffff8a062573 RDI: 0000000000000005 [ 145.684284][T11009] RBP: 0000000080000000 R08: 0000000000000005 R09: 0000000000000000 [ 145.686736][T11009] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88802ac91980 [ 145.689159][T11009] R13: ffff88802ac91a10 R14: 0000000000000000 R15: ffff88803a7700c0 [ 145.691651][T11009] ? inet_sock_destruct+0x557/0x830 [ 145.693302][T11009] ? inet_sock_destruct+0x683/0x830 [ 145.694915][T11009] ? __pfx_inet_sock_destruct+0x10/0x10 [ 145.696787][T11009] __sk_destruct+0x81/0x980 [ 145.698233][T11009] sk_destruct+0xc2/0xf0 [ 145.699585][T11009] __sk_free+0xf4/0x3e0 [ 145.700989][T11009] sk_free+0x6a/0x90 [ 145.702232][T11009] tcp_close+0xd3/0x120 [ 145.703525][T11009] inet_release+0x13f/0x280 [ 145.705008][T11009] __sock_release+0xb0/0x270 [ 145.706433][T11009] ? __pfx_sock_close+0x10/0x10 [ 145.708008][T11009] sock_close+0x1c/0x30 [ 145.709277][T11009] __fput+0x3ff/0xb70 [ 145.710890][T11009] task_work_run+0x14d/0x240 [ 145.712800][T11009] ? __pfx_task_work_run+0x10/0x10 [ 145.714853][T11009] ? __pfx___do_sys_close_range+0x10/0x10 [ 145.717220][T11009] exit_to_user_mode_loop+0xeb/0x110 [ 145.719372][T11009] do_syscall_64+0x3f6/0x4c0 [ 145.721312][T11009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.723719][T11009] RIP: 0033:0x7fcdaa58e929 [ 145.725557][T11009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.733234][T11009] RSP: 002b:00007fcdab32b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 145.736603][T11009] RAX: 0000000000000000 RBX: 00007fcdaa7b6160 RCX: 00007fcdaa58e929 [ 145.739808][T11009] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 145.743057][T11009] RBP: 00007fcdaa610b39 R08: 0000000000000000 R09: 0000000000000000 [ 145.746259][T11009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.749487][T11009] R13: 0000000000000001 R14: 00007fcdaa7b6160 R15: 00007ffd83aa3448 [ 145.752495][T11009] [ 145.754138][T11009] Kernel Offset: disabled [ 145.755510][T11009] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:13:49 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff81a98a50 RBX=ffff88806a43acb0 RCX=0000000000000001 RDX=1ffff1100d4a4fac RSI=ffffffff8de0bba3 RDI=ffff88806a527d60 RBP=ffff88806a43a2c0 RSP=ffffc90000007b98 R8 =00000000000e265b R9 =ffffed100d484f90 R10=dffffc0000000000 R11=1ffff1100d487599 R12=ffffffff90a9a544 R13=000000221b93a574 R14=ffff88806a43ad04 R15=ffff88806a527d00 RIP=ffffffff81a98a50 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6718000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcdab32bd58 CR3=00000001111a3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006d65747379732f 706165685f616d64 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9259a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9259a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9259a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9259a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9259a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9259a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a7c21df2c9f8f39 7dd921d82ca27e0a f1e32cc73625c91c 174b2a8ea34b57bc ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69f3fc4227359ebd 93b8f2fdc0400a1a 9784a5219df79a5f c85f000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67c2a464a9ef27ca e3673d300a53fa85 8b9602e36c7bc1f9 ea2bdb677a46183c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a1a8a31a4da31cb7 0104612e04c74e1e 900b67c2a464a9ef 27cae3673d300a53 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fa858b9602e36c7b c1f9ea2bdb677a46 183c69f3fc422735 9ebd93b8f2fdc040 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a1a9784a5219df7 9a5fc85fa18fca59 81384a7c21df2c9f 8f397dd921d82ca2 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e0af1e32cc73625 c91c174b2a8ea34b 57bc5a8d5d4f35e0 12006e8a5bcc8278 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bb315 RDI=ffffffff9b0c22a0 RBP=ffffffff9b0c2260 RSP=ffffc900039375e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000050 R14=ffffffff9b0c2260 R15=ffffffff855bb2b0 RIP=ffffffff855bb33f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fcdab32b6c0 ffffffff 00c00000 GS =0000 ffff8880d6818000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcdab32af98 CR3=000000010f633000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdaa611b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdaa611b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdaa611b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdaa611b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdaa611bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdaa611c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdaa785488 00007fcdaa785480 00007fcdaa785478 00007fcdaa785450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdab2ed100 00007fcdaa785440 00007fcdaa785458 00007fcdaa7854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcdaa785498 00007fcdaa785490 00007fcdaa785488 00007fcdaa785480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c050b8333f9fa483 f2010b23f9edfadc 7c82e969e34d881d f9164fb9fb470036 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2417687600145f 9ab1734911c63449 a82d0c000f0eadfe c050b8333f9fa483 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f2010b23f9edfadc 7c82e969e34d881d f9164fb9fb470036 cc5456a147f7844f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 660634a62ae38458 30150dc48d53819e c367bf5805b64ecf b727499635742311 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e88537570ef673fb b79401ec2259d5cc 736361aa6bd55d19 42f3bfb55aed342e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000013eff9 RBX=0000000000000002 RCX=ffffffff8b881c69 RDX=0000000000000000 RSI=ffffffff8de31064 RDI=ffffffff8c158660 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90a97350 R15=0000000000000000 RIP=ffffffff8b8807cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6918000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=00000000347eb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000001 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ff7fffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff82d6cacb 00007fff82d6cacb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff82d6cfd0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff82d6cfd0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3433343933352e35 343120205b3e343c 002d2d2d2d2d2d2d 2d2d2d2d2d5d2000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3433343333352435 3431202051343436 0027272727272727 2727272727572000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e36312e362064 65746e6961742074 6f4e20323533312e 362e7a7973203a6d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 632030383930313d 64697020745f6d64 617379733a725f6d 64617379733a746f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030303030636637 78303d65646f6320 3932396538393935 6530663778303d70 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6920303d7461706d 6f63203230323d6c 6c61637379732065 333030303030633d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6863726120303d67 69732022726f7475 636578652d7a7973 2f223d6578652022 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343433312e352e7a 7973223d6d6d6f63 2030383930313d64 697020745f6d6461 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff822e658f RDX=ffff888023282440 RSI=ffffffff822e6752 RDI=0000000000000005 RBP=ffff88807ffd6520 RSP=ffffc90003da7510 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=0000000000000008 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff81bbe6f1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a18000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f057f3dee9c CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff5ed503b0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9259a11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9259a11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9259a11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9259a11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9259a11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9259a11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000