last executing test programs: 1m42.745193081s ago: executing program 1 (id=153): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010010", 0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r2, 0xc0105702, &(0x7f0000000100)) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b090c, 0x80, '\x00', @p_u32=0x0}}) 1m42.744185515s ago: executing program 1 (id=154): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453", 0xc0, 0xffffffffffffffff) (async) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="f9", 0x1, 0xfffffffffffffffe) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) (async) r3 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000740)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000500), &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, r3) (async) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000300)) (async) read(r2, &(0x7f0000000000)=""/192, 0xc0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x1611, &(0x7f0000000880)={0x0, 0x1d52, 0x400, 0x1, 0x2d8}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0xffffffffffffff07, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYRESDEC=r5], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000004) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000900)=""/225, 0xe1}, {&(0x7f0000000a00)=""/138, 0x8a}, {&(0x7f0000000140)=""/35, 0x23}, {&(0x7f0000000780)=""/91, 0x5b}, {&(0x7f0000000ac0)=""/35, 0x23}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/233, 0xe9}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)}, {&(0x7f0000000cc0)=""/161, 0xa1}], 0xa) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x9, 0x2) (async) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r0, r0}, &(0x7f0000001480)=""/83, 0x53, &(0x7f0000000400)={&(0x7f00000002c0)={'sha512-avx\x00'}}) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000002140)=0x20000, 0x4) (async) r7 = add_key$user(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000540)="4b2b4d39c6c6d2007fee60628b44d879ea9f748322b6e5aff9bdef23da", 0x1d, 0x0) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(r8) (async) accept4(r8, &(0x7f00000006c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000680)=0x80, 0x800) (async) setreuid(0x0, 0xee01) (async) r9 = syz_clone(0x10b00080, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) process_madvise(r10, 0x0, 0x0, 0x15, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r7, r0}, &(0x7f0000000440)=""/154, 0x9a, &(0x7f00000003c0)={&(0x7f0000000380)={'streebog512\x00'}, &(0x7f0000000580)="63eaa7f9aae7064eebb297201888eb942ceedc4982808d815214324d26d17e4d5d9adef389880735a1a868f9376fdbaa57d7d9baaa59723f984d4be268ac1f07d33141ddaa9c05e5d1255581fbf88cbb41292a4e00cf1fb5d4089780f5f8fdca271b6b20b4d84b5812607008031a64c83d", 0x71}) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockname$packet(r11, 0x0, &(0x7f0000000200)) 1m42.675990867s ago: executing program 1 (id=157): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000040)=@fd={0x8, 0x2, 0x4, 0x1, 0x5, {0x0, 0xea60}, {0x1, 0x1, 0x6, 0x1, 0x0, 0x0, "eaf5fdf0"}, 0xef}) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x5) (async) accept4(r3, 0x0, 0x0, 0x80800) (async) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000004c0)={0x2, @pix={0x6, 0x8, 0x32435750, 0x4, 0xa8, 0x6, 0x2, 0x97, 0x1, 0x2, 0x1, 0x5}}) (async) close(r3) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="88ced81dd9de9661e74e2df3bcd01264", @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf25130000000500030004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000000)={'wg2\x00'}) 1m42.626229556s ago: executing program 1 (id=160): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x86) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000200)=@keyring={'key_or_keyring:', r4}) keyctl$search(0xa, r2, &(0x7f0000000140)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, r3) acct(&(0x7f0000000240)='./file0\x00') acct(&(0x7f0000000600)='./file0\x00') 1m42.577321191s ago: executing program 1 (id=161): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x420800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="498374b2e74b97741b7dc6cac46de613dfd7d272c50cf9f15e07c6c3af99f77591f4999b99e508a64badb81d21acd92f5527fc4bbfbbf4abee9182c8548aa2715076b55c4212180c67ec27b2e5aba0c364dc5a7dc0b45058d6c74d70b61c227fc160cb3d5ab24ea4b70355134a46cd", @ANYBLOB, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB="362963388a8760", @ANYRES64=r0, @ANYRES64=r0, @ANYRES16=r0]) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000180)=0x4, 0x4) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0xd000, 0x8000}) 1m42.266598878s ago: executing program 1 (id=166): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$CDROMSUBCHNL(r3, 0x530b, &(0x7f0000000040)={0x1, 0xff, 0x8, 0x9, 0xa, 0xc, @msf={0x5, 0x8, 0x4}, @msf={0xa5, 0x3, 0x7}}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x7], [{0x600, 0xffffffff}, {0x2, 0xffffffff}, {0x8, 0xffff}, {0x6}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x2000}, {0x0, 0x200001}], 0x10}) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 1m42.250932885s ago: executing program 32 (id=166): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$CDROMSUBCHNL(r3, 0x530b, &(0x7f0000000040)={0x1, 0xff, 0x8, 0x9, 0xa, 0xc, @msf={0x5, 0x8, 0x4}, @msf={0xa5, 0x3, 0x7}}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x7], [{0x600, 0xffffffff}, {0x2, 0xffffffff}, {0x8, 0xffff}, {0x6}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x2000}, {0x0, 0x200001}], 0x10}) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 1m36.127349581s ago: executing program 4 (id=265): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x4000006, 0x37, 0xa, 0x0, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x0, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r3, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "95a5273d723192d78c86051af7"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "84646b58e50c4635587ebfb043"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f09dbca79a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1m36.126242946s ago: executing program 4 (id=266): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x514) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x514) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000280)=""/184, &(0x7f0000000180)=0xb8) (async) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000280)=""/184, &(0x7f0000000180)=0xb8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) listen(r0, 0x0) socket(0x1e, 0x4, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000200)=@req3={0xffffffff, 0x5, 0x1, 0xfffffff7, 0x200, 0xd, 0x5144}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r3, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (async) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r4 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x100000}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x4d10, 0x2, 0x2, 0x0, 0x0) accept$ax25(r0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa0000aaaa008100200086dd60e400ff00403a00fe8800000000000000e8ffffff000001fe80000000000000000000f9800000aa02009078000000006000000000801100fc02000000000000000000000000000000000000000000000000ffffac14140017c11d58674e624c1a146558aab57fff"], 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa0000aaaa008100200086dd60e400ff00403a00fe8800000000000000e8ffffff000001fe80000000000000000000f9800000aa02009078000000006000000000801100fc02000000000000000000000000000000000000000000000000ffffac14140017c11d58674e624c1a146558aab57fff"], 0x0) 1m36.046690422s ago: executing program 4 (id=268): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e1209002100fe000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e1209002100fe000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6bef11ae3d300"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1m36.045612961s ago: executing program 4 (id=269): timer_create(0x5, &(0x7f0000000180)={0x0, 0x221, 0x1, @thr={&(0x7f00000001c0)="9ef20f876cf77df2db6a66a10c539ebe80c0d4e3aae40f3e90f828f2313db1e305d916c61eab4dec50a7a2353b6121faa1a758b4ede3ecf322db999f3beead47a68b76afed87a38e86888850f2ec12d028892c2499b2442594f5b529661a218416d66678302a005a82622eafc7fa7f77b78d820447e5bb111dabe467", &(0x7f0000000240)="fed49ee4f9b48276de77620816f97b0d508142ffd82a4dc65da14bd33ea2ccc619943704565636ba7676ae84040baffde9bbc5d084bdd9ba9b76f8e5b05fd67837c6ac7432fe907aaf0b67ab55e4cd9dd1e0180ac61acad81a8653109d1e91745e20dd317e506a2f82bab7154edb337e291ed18fbd317898f48559a9b47b6e3e4ab81dc516580b5801a8284b8c7d0ed65ac89484d843c3f04eab70ba02594a"}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000080)={{0xf, 0x6}, 'port1\x00', 0x4a, 0x48, 0x4, 0x8c2b, 0x2, 0x0, 0x7fffffff, 0x0, 0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) r1 = socket(0x22, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c002) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000300)=""/88) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x2, 0x2, 0x2, 0x4}]}) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m35.076920674s ago: executing program 4 (id=274): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)=0x0) syz_open_procfs(r1, &(0x7f0000000180)='net/udp\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000000c0)="650f011b0f20c035000001000f22c0650f784d5cb9b3020000b800000000ba008000000f300f009d76c3d364c4c26da73866ba430066edc4e168c2dc1cb805000000b972fb00000f01d9c4c2f1af6f00", 0x50}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000002c0)={0x3, 0x3, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000240)={0x2, 0xe0f30797, 0x2}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) 1m34.927008606s ago: executing program 4 (id=276): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x15, 0x0, &(0x7f0000000100)) write(r3, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0xb, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x1d, 0x3, 0x24, 0xffffffff, 0xffffffff, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x3, 0x5, 0x3c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x80, 0x0, 0x5, 0xfffffff7, 0x8, 0x2, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x6, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8cf, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x61bfe431, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0x2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x7, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x104, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x10000000, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r5}}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 1m22.977029653s ago: executing program 0 (id=421): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000340)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x28f4, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000200)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x5}}, {{0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = socket$inet(0x2, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0xc008aec1, &(0x7f0000000240)=0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0x72f, 0x10000, 0x4, 0xffffffffffffffff, 0x1}) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800b0007"], 0xc4}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045800020006400000002907800000b00e000000211009078e00040020000fc010100000000000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r8, r1, 0x4, r1}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r9, 0x0, 0x4, &(0x7f0000000040)="440910bc996c301c8107070400", 0x28) getsockopt$inet_opts(r9, 0x0, 0x4, 0x0, &(0x7f0000000240)) syz_emit_ethernet(0x2a6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x1, 0x2, [0x15c, 0xf25, 0x3d2, 0xfc4]}) syz_io_uring_setup(0x20006, &(0x7f0000000400)={0x0, 0xa72d, 0x40, 0x0, 0x212}, &(0x7f0000000100), &(0x7f0000000000)) 1m22.767148643s ago: executing program 0 (id=424): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/warn_count', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000100)=""/169, 0xa9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x53, 0xe5159a72c536958f, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="e700ebb16528", 0xfffffffffffffffd, 0x0, 0x14, 0x0, 0x0}) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x1) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000340)=0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r4) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fddb2ab312796c02f0ec933088d3bd10000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) 1m20.637158288s ago: executing program 0 (id=434): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000002) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000002380)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/216, 0xd8}], 0x1, 0x3, 0x0, 0x0) 1m20.635606881s ago: executing program 0 (id=436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) r3 = dup(r1) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) ftruncate(r3, 0xfd) 1m20.506814202s ago: executing program 0 (id=437): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000080), 0x4) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="34003ccf", @ANYRES16=r2, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a80a0000060001000500000008000b0004000000"], 0x34}}, 0x3a) 1m20.506445279s ago: executing program 0 (id=438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), r2) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f0000000580)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r2, 0x0, 0xd, &(0x7f0000000000)='\x10\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="01032cbd7000fedbdf25000020001400020077673100"/34], 0x28}}, 0x4044000) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000d4446095000000652dc55c8981de7724810000000037b7af8815cc52b7a4431350d2ade8595b057b3acd376d815f8df763a83b52ca417b02924920417f296c6ac00c17427b34beb61418ddcfd24581db5bf6952b5c216b729d284a7540583b3a20d5a475fc001d4529c57edfa066cf488de1168f7ca5abc214364cc1fd990e76f17423", @ANYRESDEC=r4], &(0x7f0000000240)='syzkaller\x00', 0xbd, 0xb1, &(0x7f00000003c0)=""/177, 0x41000, 0x4, '\x00', 0x0, @sk_skb=0x4, r2, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x406, 0x7, 0xf490}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000500)=[r5], &(0x7f0000000040)=[{0x4, 0x5, 0x20000, 0x5}, {0x3, 0x3, 0x8, 0x9}], 0x10, 0x8, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT, @ANYRESHEX=r4], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000540), &(0x7f0000000540)=@udp6=r2}, 0x20) recvfrom$inet6(r6, &(0x7f00000001c0)=""/97, 0x61, 0x40010127, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) socket$nl_generic(0x10, 0x3, 0x10) 1m19.935890195s ago: executing program 33 (id=276): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x15, 0x0, &(0x7f0000000100)) write(r3, &(0x7f0000000300)='(', 0x1) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0xb, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x1d, 0x3, 0x24, 0xffffffff, 0xffffffff, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x3, 0x5, 0x3c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x80, 0x0, 0x5, 0xfffffff7, 0x8, 0x2, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x6, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8cf, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x61bfe431, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0x2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x7, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x104, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x10000000, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r5 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r5}}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 1m5.506596682s ago: executing program 34 (id=438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000014d564b00000000af"]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), r2) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r3, 0x4068aea3, &(0x7f0000000580)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r2, 0x0, 0xd, &(0x7f0000000000)='\x10\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="01032cbd7000fedbdf25000020001400020077673100"/34], 0x28}}, 0x4044000) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000d4446095000000652dc55c8981de7724810000000037b7af8815cc52b7a4431350d2ade8595b057b3acd376d815f8df763a83b52ca417b02924920417f296c6ac00c17427b34beb61418ddcfd24581db5bf6952b5c216b729d284a7540583b3a20d5a475fc001d4529c57edfa066cf488de1168f7ca5abc214364cc1fd990e76f17423", @ANYRESDEC=r4], &(0x7f0000000240)='syzkaller\x00', 0xbd, 0xb1, &(0x7f00000003c0)=""/177, 0x41000, 0x4, '\x00', 0x0, @sk_skb=0x4, r2, 0x8, &(0x7f0000000280)={0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x406, 0x7, 0xf490}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000500)=[r5], &(0x7f0000000040)=[{0x4, 0x5, 0x20000, 0x5}, {0x3, 0x3, 0x8, 0x9}], 0x10, 0x8, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT, @ANYRESHEX=r4], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r6, &(0x7f0000000540), &(0x7f0000000540)=@udp6=r2}, 0x20) recvfrom$inet6(r6, &(0x7f00000001c0)=""/97, 0x61, 0x40010127, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) socket$nl_generic(0x10, 0x3, 0x10) 37.318268423s ago: executing program 5 (id=1026): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x221, 0xc1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000001640)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @local}}, [0x0, 0xc, 0x400, 0x100000001, 0x2, 0x4, 0x3, 0x2, 0x7, 0x10, 0xf814, 0x0, 0x2, 0x0, 0x4]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r4, 0x4, 0x81, 0xffffffff}, &(0x7f00000002c0)=0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff010070", 0x7}], 0x2) listen(r0, 0x6) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote, 0x40000000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sendmmsg$alg(r5, &(0x7f0000000700)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}], 0x1, 0x0) 30.756442286s ago: executing program 5 (id=1026): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x221, 0xc1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000001640)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @local}}, [0x0, 0xc, 0x400, 0x100000001, 0x2, 0x4, 0x3, 0x2, 0x7, 0x10, 0xf814, 0x0, 0x2, 0x0, 0x4]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r4, 0x4, 0x81, 0xffffffff}, &(0x7f00000002c0)=0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff010070", 0x7}], 0x2) listen(r0, 0x6) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote, 0x40000000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sendmmsg$alg(r5, &(0x7f0000000700)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}], 0x1, 0x0) 23.717093656s ago: executing program 5 (id=1026): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x221, 0xc1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000001640)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @local}}, [0x0, 0xc, 0x400, 0x100000001, 0x2, 0x4, 0x3, 0x2, 0x7, 0x10, 0xf814, 0x0, 0x2, 0x0, 0x4]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r4, 0x4, 0x81, 0xffffffff}, &(0x7f00000002c0)=0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff010070", 0x7}], 0x2) listen(r0, 0x6) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote, 0x40000000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sendmmsg$alg(r5, &(0x7f0000000700)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}], 0x1, 0x0) 16.930092461s ago: executing program 5 (id=1026): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x221, 0xc1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000001640)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @local}}, [0x0, 0xc, 0x400, 0x100000001, 0x2, 0x4, 0x3, 0x2, 0x7, 0x10, 0xf814, 0x0, 0x2, 0x0, 0x4]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r4, 0x4, 0x81, 0xffffffff}, &(0x7f00000002c0)=0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff010070", 0x7}], 0x2) listen(r0, 0x6) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote, 0x40000000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sendmmsg$alg(r5, &(0x7f0000000700)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}], 0x1, 0x0) 9.888906803s ago: executing program 5 (id=1026): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x221, 0xc1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000001640)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @local}}, [0x0, 0xc, 0x400, 0x100000001, 0x2, 0x4, 0x3, 0x2, 0x7, 0x10, 0xf814, 0x0, 0x2, 0x0, 0x4]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r4, 0x4, 0x81, 0xffffffff}, &(0x7f00000002c0)=0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff010070", 0x7}], 0x2) listen(r0, 0x6) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote, 0x40000000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sendmmsg$alg(r5, &(0x7f0000000700)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}], 0x1, 0x0) 3.489076672s ago: executing program 6 (id=1377): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) socket(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000680)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000680)) ppoll(&(0x7f00000003c0)=[{r2, 0x80a0}], 0x1, 0x0, 0x0, 0x0) r3 = dup(r1) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f0000000140)={0x36, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000380)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x84, "9548095b63cdf1"}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000001380)={r5, 0x2}) setreuid(0x0, 0xee00) (async) setreuid(0x0, 0xee00) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) (async) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0xc0020000, 0x18000000, 0xffffffff}}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x7, 0x2, 0x6, {0xa8df, 0x0, 0x1ff, 0xf}}) 3.290579432s ago: executing program 6 (id=1378): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x80) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@fd={0x2, 0xb, 0x4, 0x1000, 0x7, {0x77359400}, {0x3, 0x8, 0x0, 0x8, 0x6, 0xca, "b99c358a"}, 0xf19, 0x4, {0xffffffffffffffff}, 0x6, 0x0, r1}) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000140)=0x28) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000180)={0x3, 0x1, @start={0x2, 0x1}}) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000200)={0x0, 0x2}) r4 = signalfd(r2, &(0x7f0000000240)={[0x200]}, 0x8) truncate(&(0x7f0000000280)='./file0\x00', 0x800) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ppoll(&(0x7f00000002c0)=[{r4, 0x428}, {r0, 0xa064}, {r0, 0x1001}, {r1, 0x2202}, {r2, 0x8097}, {r3, 0x4282}, {r3, 0x2032}], 0x7, &(0x7f0000000340)={r5, r6+60000000}, &(0x7f0000000380)={[0x8]}, 0x8) fcntl$setlease(r0, 0x400, 0x0) fchdir(r1) r7 = syz_clone(0x2000, &(0x7f00000003c0)="fa859844b14a7e8d7fcdc426fac61edb20f41c64", 0x14, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="ae686cd013974382324bded56e97dc42f6e2e16bb59486196a6f427943d824a8ab8d316543b241f0918ba72fbe85c78686b7d9c8c80bfe8eec8e6db11c37f3a097c79ee1b640dbe88c8d39108f33b42ec2afbc8483d8b1a16d781a1b13950b6e699b4606ef8289ed44bc71bee436b8dd93c9b2f839933940b4c332be1651d624f209e4dec852fa4713fe9b67ade7bf6ca939ead53a5d8531ceb5") ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000540)={r7}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x7, 0x82, 0xa, 0x6, {{0x16, 0x4, 0x0, 0x4, 0x58, 0x66, 0x0, 0x10, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@rr={0x7, 0x1b, 0xbc, [@broadcast, @local, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0x2f, 0x0, 0x5, [0x1]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @empty]}, @rr={0x7, 0x7, 0x59, [@local]}]}}}}}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r1, r8, 0x25, 0x0, @void}, 0x10) clock_gettime(0x2, &(0x7f0000000680)) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ftruncate(r3, 0xbd0b) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r1, 0x10, 0x0, 0xffffffff, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@ifindex=r8, r1, 0x27, 0x200a, r10, @value=r9, @void, @void, @void, r11}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000940)={'erspan0\x00', &(0x7f0000000880)={'ip_vti0\x00', r8, 0x7, 0x7, 0x4, 0x5, {{0x1e, 0x4, 0x1, 0x7, 0x78, 0x65, 0x0, 0x9, 0x2f, 0x0, @local, @broadcast, {[@lsrr={0x83, 0xb, 0x69, [@remote, @local]}, @timestamp_prespec={0x44, 0x14, 0x60, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x29}, 0x7}, {@broadcast, 0x4}]}, @rr={0x7, 0x1f, 0xf3, [@local, @broadcast, @private=0xa010100, @multicast2, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x42}]}, @ssrr={0x89, 0x1f, 0xf9, [@dev={0xac, 0x14, 0x14, 0x2b}, @empty, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}, @loopback, @multicast1]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000a40)={'sit0\x00', &(0x7f0000000980)={'gre0\x00', r12, 0x7800, 0x80, 0x3, 0x1928000, {{0x1f, 0x4, 0x3, 0x0, 0x7c, 0x66, 0x0, 0x2, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@rr={0x7, 0x17, 0x89, [@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}, @multicast2, @rand_addr=0x64010102]}, @cipso={0x86, 0x50, 0x3, [{0x7, 0xe, "49fe9129273fca85479c11a3"}, {0x2, 0x5, "6a97c0"}, {0x2, 0xf, "d1bfcbb83662faecd77f96b7fb"}, {0x5, 0x5, "a24216"}, {0x5, 0xb, "0b5a9009c13c0fc242"}, {0x2, 0x8, "4ec753be7367"}, {0x2, 0x10, "5ce3acbb71fff0df094a82076063"}]}]}}}}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000ac0)={&(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000b00)={r13}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) r15 = shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) shmat(r15, &(0x7f0000ffa000/0x4000)=nil, 0x7000) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000bc0)={0x43c, 0x3f4, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x20, [0xfffff025, 0x1fd, 0x1, 0x4, 0x0, 0x10000, 0x1, 0x0, 0x7, 0x80000001, 0xf353, 0x9, 0x3, 0x1, 0x2, 0xa, 0x97b2, 0x3, 0xfff, 0x80000000, 0x3, 0x7, 0x5, 0x2b4b, 0xffff, 0x7, 0x1, 0x0, 0x4, 0x1000, 0xffff, 0x5, 0x8001, 0x2, 0x4, 0x400, 0x3, 0x1, 0x8, 0x81, 0x800, 0x8, 0x2, 0x1, 0x400, 0x3ff, 0x0, 0x800, 0x7, 0x5ab9, 0x2, 0x9034, 0x9, 0x28, 0xffffd26c, 0x3, 0x0, 0x6, 0x3, 0x3, 0x0, 0x2, 0x9, 0xf7ad], [0x764, 0x6, 0x3, 0x7, 0x2, 0x6, 0x4, 0xc, 0x5, 0x8, 0xfffffffb, 0x7, 0xffffffff, 0xfffffffe, 0x14d, 0x9, 0xf161, 0xffff, 0x5, 0x101, 0xd, 0x800, 0x7, 0xd0e, 0x9, 0x24a, 0x8, 0xc, 0x5, 0x3bbbd51b, 0x6, 0x3, 0x787, 0x10001, 0xd, 0x3ff, 0x6, 0x37, 0x6, 0x8000, 0x1, 0x8, 0x5, 0x917, 0x8, 0x4, 0x8, 0x4, 0x1, 0x3, 0xde9b, 0xfffffffa, 0x101, 0x8, 0x7c, 0x5, 0x7f, 0x5, 0x848, 0x1, 0xe9, 0x5, 0xfff, 0xea], [0x2, 0x1, 0x5, 0x5, 0x5, 0xd, 0x81, 0x5, 0x9, 0x8, 0x101, 0x8, 0xc, 0x4, 0x400, 0x5, 0x0, 0x3, 0xfffffff6, 0xff, 0x6, 0x0, 0x1, 0x0, 0x200, 0x1, 0x101, 0x0, 0x9, 0xffff, 0x5, 0x3, 0x1, 0xa4, 0x1ff, 0x0, 0x7, 0xba9, 0x8, 0x1000, 0x2, 0xcf, 0xa, 0x200000, 0x40, 0xc3, 0x2, 0x6, 0xe73, 0x3, 0xb0a6, 0x52, 0x3, 0xffffffff, 0x3, 0x880, 0x6, 0xf8f, 0x81, 0x7, 0x3, 0xd8, 0x5, 0xff], [0x2, 0xb8, 0x2, 0x800, 0x5, 0x40, 0x7, 0x8001, 0x9, 0x0, 0x6, 0xfffffff8, 0x6, 0x700000, 0x6, 0x0, 0x7f, 0x3, 0xa0000, 0xfffffff8, 0x8c66, 0x83, 0x0, 0x3, 0x90e, 0x40, 0x6, 0x7fff, 0xffff, 0x7, 0xf, 0x2, 0x800, 0x4, 0xf, 0x1000, 0x78e, 0x7, 0x100, 0x0, 0xda, 0xa, 0x3, 0x6, 0x3, 0x7ff, 0xf096, 0xb, 0x101, 0xffffff34, 0xffffff9b, 0x0, 0xfffffffb, 0x0, 0xc, 0x100, 0x401, 0x6cb, 0x46c, 0x9, 0x1, 0x8000, 0x7fffffff, 0x7], 0x19, ['\x00', '/-,\x00', 'tunl0\x00', 'gre0\x00', '\x00', 'erspan0\x00']}, ["", "", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x44040}, 0xc024) ioctl$DRM_IOCTL_MODE_GET_LEASE(r14, 0xc01064c8, &(0x7f00000010c0)={0x3, 0x0, &(0x7f0000001080)=[0x0, 0x0, 0x0]}) 3.290198228s ago: executing program 6 (id=1379): socket$packet(0x11, 0x3, 0x300) socketpair(0x1e, 0xa, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) r5 = epoll_create(0x8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx2\x00'}, 0x58) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x40) r9 = dup(r8) r10 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r12, 0x1, 0x40, &(0x7f0000000a00)=0x101, 0x4) bind$inet(r12, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r12, 0x0, 0x0, 0x20008f29, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r12, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_elf64(r12, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_uid={'access', 0x3d, r11}}]}}) r13 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000010c0)="961fdadf", 0x4}, {&(0x7f0000000500)="0939bf28", 0x4}], 0x2}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0x14}) sendmmsg(r0, &(0x7f0000012840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000007e40)=[{&(0x7f0000006d00)="3e1aed9e55c3cdeee8c67499bf1348b9863f7b756cfa79e449223d4defacc740d79faaee01ee674abbae699f5be0b784d82a18d06c802c6fc9ac50e069db01a458353fd6392e644f340eac94565badc6788736847318f722e02a12d1811ff480096ce526a50068208b52f43e471ffe9801fb803d3e3256a718", 0x79}, {&(0x7f0000006d80)="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", 0x54c}], 0x2}}], 0x5, 0x0) 2.650541594s ago: executing program 3 (id=1380): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) listen(r0, 0x8) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffd}, 0x90) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x80, @empty, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0xfffffffffffffdc7}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0x7f, @mcast2, 0x200}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x33}}}}], 0x28}}], 0x2, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0xffffdf004002, 0xffffdf004000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 2.510711593s ago: executing program 2 (id=1381): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x1, 0x1, 0x7, 0xffff41f6}, {0x3, 0x6, 0x4, 0x81}]}) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = syz_usbip_server_init(0x2) write$usbip_server(r2, &(0x7f0000000600)=ANY=[], 0xf1d) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='c:::\x00', 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x20000001) recvfrom$inet6(r3, 0x0, 0x0, 0x12020, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 2.39078573s ago: executing program 6 (id=1382): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=0xffffffffffffffff, 0x12) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0}}], 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)=0x1) 2.290504952s ago: executing program 6 (id=1383): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d6500000000000065070000021c0000070700004c0000001f750000000000006154000000000000070400000400f9ffad4301000000000095000000000000000500000000000020950000000000000096669e8e4da2f09183bb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x8800) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x9, 0x4000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8000, 0x8, 0x1, 0xd, {{0x2d, 0x4, 0x0, 0x8, 0xb4, 0x64, 0x0, 0x3, 0x29, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x17, 0x9d, [@multicast2, @rand_addr=0x64010102, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x59, 0x2, [{0xe7cdc281907758c, 0x2}, {0x0, 0x4, ']i'}, {0x5, 0x3, "f2"}, {0x0, 0x10, "0739d481041437605ea7d9b33e75"}, {0x2, 0x11, "9bb41856dbd189cc796487145c7c12"}, {0x7, 0x2}, {0x0, 0xe, "1ae483655942378846c20ed5"}, {0x5, 0xc, "467744bf2e82b4bed918"}, {0x5, 0xd, "10dd5ac75a71ed354076ba"}]}, @ssrr={0x89, 0x7, 0xa7, [@remote]}, @cipso={0x86, 0x15, 0x0, [{0x5, 0x2}, {0x5, 0xd, "b0cf315c1b30884cca204f"}]}, @ssrr={0x89, 0x13, 0x6b, [@broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}}}) bind$packet(r1, &(0x7f0000002240)={0x11, 0xc, r3, 0x1, 0x2, 0x6, @random="4b86dd140bc9"}, 0x14) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349f7f2}) writev(r4, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c98864", 0xffbf}], 0x7) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcffff124e000000000000003700feff0400000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x28, 0x1c, 0x401, 0x4, 0x3, {0x2, 0x0, 0x0, 0x0, 0x4, 0x14, 0x8}, [@NDA_DST_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044801}, 0x0) getsockname$l2tp(r8, &(0x7f0000002280)={0x2, 0x0, @private}, &(0x7f00000022c0)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x80, 0xe43, 0x5, 0x28bc93a16f447d41, r2, 0x3, '\x00', r3, r7, 0x5, 0x5, 0x3, 0xd, @void, @value, @void, @value}, 0x50) 1.986833057s ago: executing program 5 (id=1026): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x221, 0xc1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000001640)={0x2020}, 0x2020) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @local}}, [0x0, 0xc, 0x400, 0x100000001, 0x2, 0x4, 0x3, 0x2, 0x7, 0x10, 0xf814, 0x0, 0x2, 0x0, 0x4]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={r4, 0x4, 0x81, 0xffffffff}, &(0x7f00000002c0)=0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff010070", 0x7}], 0x2) listen(r0, 0x6) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote, 0x40000000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) sendmmsg$alg(r5, &(0x7f0000000700)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}], 0x1, 0x0) 1.223966172s ago: executing program 6 (id=1384): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x81, 0x100c050, 0x5, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r2, 0x0}]) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, &(0x7f0000000080)="3c04f4663f3be95898e487c6fe0b2974df803e4c31873afaaacf73bdfcfa720c"}, 0x7d) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r4, 0x4) r5 = syz_open_dev$mouse(&(0x7f0000000100), 0x10, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000000), 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000140)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000001c0)='syzkaller\x00', 0x81, 0x0, &(0x7f0000000200), 0x41000, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x0, 0xe}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xee1, @void, @value}, 0x94) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x38, r11, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x57e}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x38}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac1414410c0002800500010000000000240002800c00028005000100000000001400018008000100e00000020800020000000002080007400000000014000580"], 0x78}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="00000000000000eeee619fc47b6745009500080000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.22376856s ago: executing program 3 (id=1385): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002540)=@newtclass={0x30, 0x28, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0xf, 0xa}, {0x7, 0xfff1}}, [@c_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000002e00)=""/4096, 0x1000}], 0x1}, 0x40002042) 1.079022648s ago: executing program 2 (id=1386): r0 = socket$nl_route(0x10, 0x3, 0x0) getdents64(0xffffffffffffff9c, &(0x7f0000000280)=""/209, 0xd1) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x501, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000080000000000000000e2cc07f20e81e4bb12e37dffc2117034914c8e5b4399756f55ab6ecb524c2aa33ec469d306d461aa5823903d852ac1"], 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r2, 0x0, 0x20000000}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 1.078827422s ago: executing program 3 (id=1387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="b805000000b918e40000440f20c03508000000440f22c036dbe366f2f20f350f00df66baf80cb838347388ef66bafc0c66b86e0066ef2e660f3880b70d00000066b823008ee8260fc768a60f01c2c4e25da7a5000000000f3235000100000f30", 0x60}], 0x1, 0x4, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x4, 0x0, [{0x335, 0x0, 0x40}, {0x270, 0x0, 0x3c9d89f9}, {0x942, 0x0, 0x9}, {0x9af}]}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.078030033s ago: executing program 2 (id=1388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0xc0}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x18142, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="400401fa080201"], 0x7) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x4c, 0x1a, 0x148, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x9000000, 0x2, 0x0, 0x6}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x2}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) 900.966064ms ago: executing program 3 (id=1389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x9, 0x88}, {0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711062000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x3, 0xffff7ffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f0000000100)={0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f0000000280)={0x1, 0x3}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 771.165195ms ago: executing program 2 (id=1390): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040), 0x10) close_range(r1, r1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @local}, &(0x7f00000000c0)=0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0x3000, 0x0, 0x1fc, 0x300}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300800001000010800000000deff000000000054", @ANYRES32=0x0, @ANYBLOB="000000000000000008000500", @ANYRES32=r2, @ANYBLOB="0800040001000080"], 0x30}}, 0x0) 765.820063ms ago: executing program 3 (id=1391): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 755.549594ms ago: executing program 2 (id=1392): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='pagemap\x00') syz_usb_disconnect(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1, 0x0, 0x1000) r3 = socket(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r5, 0x1, 0x0, 0x0, {0x30}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) getsockopt(r3, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) 640.857825ms ago: executing program 3 (id=1393): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000007080)=ANY=[@ANYRES32=0x0, @ANYBLOB="050001"], 0x9) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) poll(&(0x7f0000000140)=[{r2, 0x142}], 0x1, 0x7) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) r3 = syz_open_dev$audion(&(0x7f0000000140), 0x1400000000000, 0x200000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='qrtr_ns_message\x00', r3, 0x0, 0x8001}, 0x18) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) 0s ago: executing program 2 (id=1394): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 103.775222][ T30] usb 8-1: device descriptor read/8, error -71 [ 103.828667][ T9334] netlink: 'syz.2.872': attribute type 18 has an invalid length. [ 103.868048][ T39] audit: type=1400 audit(2000000031.121:652): avc: denied { create } for pid=9337 comm="syz.6.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.873384][ T39] audit: type=1400 audit(2000000031.121:653): avc: denied { setopt } for pid=9337 comm="syz.6.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.882002][ T39] audit: type=1400 audit(2000000031.121:654): avc: denied { bind } for pid=9337 comm="syz.6.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.884083][ T30] usb usb8-port1: unable to enumerate USB device [ 103.931648][ T39] audit: type=1400 audit(2000000031.181:655): avc: denied { write } for pid=9338 comm="syz.2.875" laddr=172.20.20.170 lport=49504 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 104.116552][ T9347] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 104.583785][ T2297] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 104.693868][ T30] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 104.733814][ T2297] usb 10-1: Using ep0 maxpacket: 8 [ 104.737554][ T2297] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 104.740264][ T2297] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.743459][ T2297] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.746650][ T2297] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.749113][ T2297] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.752529][ T2297] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.755056][ T2297] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.827366][ T9361] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 104.843805][ T30] usb 11-1: Using ep0 maxpacket: 8 [ 104.846788][ T30] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.850012][ T30] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 104.852979][ T30] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.859794][ T30] usb 11-1: config 0 descriptor?? [ 104.863333][ T30] iowarrior 11-1:0.0: no interrupt-in endpoint found [ 104.959129][ T2297] usb 10-1: usb_control_msg returned -32 [ 104.960681][ T2297] usbtmc 10-1:16.0: can't read capabilities [ 105.077222][ T5946] usb 11-1: USB disconnect, device number 5 [ 105.103817][ T35] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 105.234348][ T35] usb 7-1: device descriptor read/64, error -71 [ 105.269182][ T39] audit: type=1400 audit(2000000032.521:656): avc: denied { bind } for pid=9366 comm="syz.3.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.326985][ T39] audit: type=1400 audit(2000000032.581:657): avc: denied { listen } for pid=9366 comm="syz.3.883" laddr=127.0.0.1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 105.475945][ T35] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 105.603730][ T35] usb 7-1: device descriptor read/64, error -71 [ 105.657718][ T39] audit: type=1400 audit(2000000032.911:658): avc: denied { egress } for pid=29 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 105.665540][ T39] audit: type=1400 audit(2000000032.911:659): avc: denied { sendto } for pid=29 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=wpan1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 105.671136][ T9371] tmpfs: Unknown parameter 'mFu' [ 105.671156][ T9372] tmpfs: Unknown parameter 'mFu' [ 105.682281][ T64] usb 10-1: USB disconnect, device number 10 [ 105.714425][ T35] usb usb7-port1: attempt power cycle [ 105.746586][ T9384] __nla_validate_parse: 6 callbacks suppressed [ 105.746607][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.887'. [ 105.752617][ T9384] trusted_key: encrypted_key: keylen parameter is missing [ 105.764436][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.885'. [ 105.767730][ T9382] netlink: 20 bytes leftover after parsing attributes in process `syz.5.885'. [ 105.994801][ T9406] netlink: 112 bytes leftover after parsing attributes in process `syz.5.895'. [ 105.998250][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.895'. [ 106.053830][ T35] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 106.074250][ T35] usb 7-1: device descriptor read/8, error -71 [ 106.324537][ T35] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 106.344463][ T35] usb 7-1: device descriptor read/8, error -71 [ 106.454065][ T35] usb usb7-port1: unable to enumerate USB device [ 106.922200][ T9445] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 106.925062][ T9445] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.325987][ T25] hid-generic 0006:10001:0007.0004: unknown main item tag 0x3 [ 107.328857][ T25] hid-generic 0006:10001:0007.0004: item fetching failed at offset 3/4 [ 107.332143][ T25] hid-generic 0006:10001:0007.0004: probe with driver hid-generic failed with error -22 [ 107.341816][ T9469] random: crng reseeded on system resumption [ 107.433707][ T9473] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 107.609056][ T9469] Restarting kernel threads ... done. [ 107.617684][ T9469] binder_alloc: 9468: binder_alloc_buf, no vma [ 107.620532][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.910'. [ 108.758228][ T39] kauditd_printk_skb: 9 callbacks suppressed [ 108.758238][ T39] audit: type=1400 audit(2000000036.012:669): avc: denied { accept } for pid=9510 comm="syz.5.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 108.767943][ T9511] geneve2: entered promiscuous mode [ 108.769417][ T9511] geneve2: entered allmulticast mode [ 108.795151][ T9503] fuse: Invalid rootmode [ 108.798204][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.922'. [ 108.801646][ T9515] netlink: 256 bytes leftover after parsing attributes in process `syz.5.923'. [ 108.805765][ T9515] unsupported nlmsg_type 40 [ 108.887274][ T39] audit: type=1400 audit(2000000036.142:670): avc: denied { getopt } for pid=9522 comm="syz.5.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 109.083531][ T8] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 109.225432][ T9535] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 109.232455][ T9535] CIFS mount error: No usable UNC path provided in device string! [ 109.232455][ T9535] [ 109.235524][ T9535] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 109.235857][ T8] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 109.240897][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.243573][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.247424][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 109.250922][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.253357][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.257759][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 109.258341][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 109.260368][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.262709][ T9535] bridge_slave_1: left promiscuous mode [ 109.265108][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.265126][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 109.265938][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.267755][ T9535] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.269633][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.279083][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 109.281870][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.282133][ T9535] bridge_slave_0: left allmulticast mode [ 109.284387][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.284405][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 109.285213][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.286112][ T9535] bridge_slave_0: left promiscuous mode [ 109.289135][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.289163][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 109.289947][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.291264][ T9535] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.293971][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.310556][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 109.315502][ T8] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 109.318301][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 109.321475][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 109.325906][ T8] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 109.328812][ T8] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 109.331825][ T8] usb 7-1: Product: syz [ 109.333366][ T8] usb 7-1: Manufacturer: syz [ 109.335350][ T8] usb 7-1: SerialNumber: syz [ 109.341544][ T8] usb 7-1: config 0 descriptor?? [ 109.345544][ T8] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 109.483694][ T35] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 109.548787][ T9517] netlink: 'syz.2.924': attribute type 21 has an invalid length. [ 109.550906][ T9517] netlink: 128 bytes leftover after parsing attributes in process `syz.2.924'. [ 109.553567][ T9517] netlink: 'syz.2.924': attribute type 5 has an invalid length. [ 109.556160][ T9517] netlink: 'syz.2.924': attribute type 6 has an invalid length. [ 109.560632][ T8] usb 7-1: USB disconnect, device number 16 [ 109.570513][ T8] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 109.633336][ T9544] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 109.643505][ T35] usb 10-1: Using ep0 maxpacket: 32 [ 109.647226][ T35] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 109.650304][ T35] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 109.653724][ T35] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 109.657024][ T35] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.660567][ T35] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.665616][ T35] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.670684][ T35] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 109.670710][ T35] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.673733][ T35] usb 10-1: config 0 descriptor?? [ 109.720423][ T6428] Bluetooth: hci5: Frame reassembly failed (-84) [ 109.722857][ T6428] Bluetooth: hci5: Frame reassembly failed (-84) [ 109.856302][ T9558] usb usb1: check_ctrlrecip: process 9558 (syz.3.937) requesting ep 01 but needs 81 [ 109.859673][ T9558] usb usb1: usbfs: process 9558 (syz.3.937) did not claim interface 0 before use [ 109.881737][ T35] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 110.085538][ T39] audit: type=1400 audit(2000000037.342:671): avc: denied { read write } for pid=9536 comm="syz.5.931" name="lp0" dev="devtmpfs" ino=3085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 110.088004][ C3] usblp0: nonzero read bulk status received: -71 [ 110.088988][ T9562] net_ratelimit: 5 callbacks suppressed [ 110.088998][ T9562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.091620][ T39] audit: type=1400 audit(2000000037.342:672): avc: denied { open } for pid=9536 comm="syz.5.931" path="/dev/usb/lp0" dev="devtmpfs" ino=3085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 110.093852][ T35] usb 10-1: USB disconnect, device number 11 [ 110.126357][ T9567] program syz.2.939 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.282230][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.299693][ T9537] usblp0: removed [ 110.338019][ T9588] sch_fq: defrate 2 ignored. [ 110.454913][ T39] audit: type=1400 audit(2000000037.712:673): avc: denied { setopt } for pid=9587 comm="syz.2.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 110.515063][ T39] audit: type=1400 audit(2000000037.772:674): avc: denied { name_bind } for pid=9591 comm="syz.3.946" src=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 110.555805][ T9591] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 110.569707][ T39] audit: type=1400 audit(2000000037.822:675): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 110.783965][ T9601] nbd: socks must be embedded in a SOCK_ITEM attr [ 110.853221][ T39] audit: type=1400 audit(2000000038.102:676): avc: denied { associate } for pid=9605 comm="syz.5.950" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 110.856607][ T5949] Bluetooth: hci1: ACL packet for unknown connection handle 1525 [ 110.865436][ T39] audit: type=1400 audit(2000000038.102:677): avc: denied { unlink } for pid=9605 comm="syz.5.950" name="bus" dev="9p" ino=38928579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.886750][ T39] audit: type=1400 audit(2000000038.142:678): avc: denied { listen } for pid=9607 comm="syz.3.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 111.078483][ T9618] __nla_validate_parse: 3 callbacks suppressed [ 111.078494][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 111.082487][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 111.087099][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 111.089464][ T9622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 111.198157][ T9636] netlink: 256 bytes leftover after parsing attributes in process `syz.5.960'. [ 111.313990][ T9645] netlink: 40 bytes leftover after parsing attributes in process `syz.5.963'. [ 111.365974][ T9648] input: syz0 as /devices/virtual/input/input16 [ 111.368251][ T9648] input: failed to attach handler leds to device input16, error: -6 [ 111.371784][ T9644] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 111.455857][ T9657] netlink: 'syz.3.968': attribute type 21 has an invalid length. [ 111.459938][ T9657] bridge_slave_0: entered promiscuous mode [ 111.461468][ T9657] bridge_slave_0: entered allmulticast mode [ 111.493847][ T9662] netlink: 'syz.3.969': attribute type 1 has an invalid length. [ 111.727584][ T9673] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.972'. [ 111.733972][ T5949] Bluetooth: hci5: command 0x1003 tx timeout [ 111.735769][ T5940] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 111.737783][ T9673] netlink: 'syz.5.972': attribute type 3 has an invalid length. [ 111.740964][ T9673] netlink: 40 bytes leftover after parsing attributes in process `syz.5.972'. [ 111.754246][ T9673] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 111.757255][ T9673] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 111.760689][ T9673] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 111.776737][ T9673] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 111.875262][ T9692] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27412 sclass=netlink_xfrm_socket pid=9692 comm=syz.5.976 [ 111.920702][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 111.923029][ T9696] netlink: 'syz.3.977': attribute type 22 has an invalid length. [ 111.925261][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.977'. [ 112.191805][ T9710] syzkaller0: entered promiscuous mode [ 112.193473][ T9710] syzkaller0: entered allmulticast mode [ 112.223688][ T5940] Bluetooth: hci3: command 0x040f tx timeout [ 112.668814][ T5940] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 113.605939][ T9772] tmpfs: Bad value for 'mpol' [ 113.607175][ T9771] syzkaller1: entered promiscuous mode [ 113.608684][ T9771] syzkaller1: entered allmulticast mode [ 113.701864][ T9786] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 113.975464][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 113.975475][ T39] audit: type=1400 audit(2000000041.232:691): avc: denied { connect } for pid=9802 comm="syz.6.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.043235][ T30] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 114.209455][ T30] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 114.213285][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.216104][ T30] usb 8-1: Product: syz [ 114.217610][ T30] usb 8-1: Manufacturer: syz [ 114.219139][ T30] usb 8-1: SerialNumber: syz [ 114.225873][ T30] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 114.255019][ T30] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 114.387509][ T9815] binder: BC_ATTEMPT_ACQUIRE not supported [ 114.389160][ T9815] binder: 9811:9815 ioctl c0306201 20000580 returned -22 [ 114.391397][ T9814] syz.2.1014: attempt to access beyond end of device [ 114.391397][ T9814] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 114.395213][ T9814] efs: cannot read volume header [ 114.455342][ T39] audit: type=1400 audit(2000000041.712:692): avc: denied { ioctl } for pid=9818 comm="syz.6.1016" path="socket:[33340]" dev="sockfs" ino=33340 ioctlcmd=0x8b28 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.496868][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.587796][ T9816] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 114.745611][ T25] usb 8-1: USB disconnect, device number 16 [ 114.813274][ T5993] usb 11-1: new full-speed USB device number 6 using dummy_hcd [ 114.981231][ T5993] usb 11-1: config 1 interface 0 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 114.984148][ T5993] usb 11-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.987523][ T5993] usb 11-1: config 1 interface 0 has no altsetting 0 [ 114.991430][ T5993] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 114.993987][ T5993] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.996108][ T5993] usb 11-1: Product: syz [ 114.997225][ T5993] usb 11-1: Manufacturer: á°‰ [ 114.998580][ T5993] usb 11-1: SerialNumber: syz [ 115.001088][ T9824] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 115.004075][ T9824] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 115.013309][ T5975] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 115.167359][ T5975] usb 7-1: config index 0 descriptor too short (expected 62634, got 36) [ 115.169585][ T5975] usb 7-1: config 137 has too many interfaces: 97, using maximum allowed: 32 [ 115.171863][ T5975] usb 7-1: config 137 has an invalid descriptor of length 157, skipping remainder of the config [ 115.174784][ T5975] usb 7-1: config 137 has 0 interfaces, different from the descriptor's value: 97 [ 115.177250][ T5975] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 115.179606][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.215860][ T5993] usb 11-1: USB disconnect, device number 6 [ 115.361979][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.365795][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.369521][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.372928][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.375279][ T5949] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 115.377278][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.394751][ T5975] usb 7-1: string descriptor 0 read error: -71 [ 115.397916][ T5975] usb 7-1: USB disconnect, device number 17 [ 115.463498][ T9848] chnl_net:caif_netlink_parms(): no params data found [ 115.503664][ T30] usb 8-1: Service connection timeout for: 256 [ 115.505931][ T30] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 115.509579][ T30] ath9k_htc: Failed to initialize the device [ 115.512894][ T25] usb 8-1: ath9k_htc: USB layer deinitialized [ 115.525045][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.527415][ T9848] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.529857][ T9848] bridge_slave_0: entered allmulticast mode [ 115.532685][ T9848] bridge_slave_0: entered promiscuous mode [ 115.536655][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.538529][ T9848] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.540640][ T9848] bridge_slave_1: entered allmulticast mode [ 115.543715][ T9848] bridge_slave_1: entered promiscuous mode [ 115.579863][ T9848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.585237][ T9848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.619359][ T9848] team0: Port device team_slave_0 added [ 115.622560][ T9848] team0: Port device team_slave_1 added [ 115.652084][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.655465][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.663011][ T9848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.667440][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.669668][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.676896][ T9848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.702456][ T9848] hsr_slave_0: entered promiscuous mode [ 115.704722][ T9848] hsr_slave_1: entered promiscuous mode [ 115.706768][ T9848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.708749][ T9848] Cannot create hsr debugfs directory [ 115.785111][ T9848] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.849782][ T9848] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.934428][ T9848] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.935871][ T39] audit: type=1400 audit(2000000043.192:693): avc: denied { bind } for pid=9859 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 115.995597][ T9863] ata1.00: invalid cdb length 6 [ 115.997512][ T9863] ata1.00: invalid cdb length 6 [ 115.999007][ T9863] ata1.00: invalid cdb length 6 [ 116.041137][ T9848] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.059884][ T6427] Bluetooth: hci5: Frame reassembly failed (-84) [ 116.061728][ T6428] Bluetooth: hci5: Frame reassembly failed (-84) [ 116.062255][ T39] audit: type=1400 audit(2000000043.312:694): avc: denied { execute } for pid=9867 comm="syz.6.1030" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=32653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 116.070691][ T9868] Bluetooth: hci5: Frame reassembly failed (-84) [ 116.151076][ T9848] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.154520][ T9848] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.157881][ T9848] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.160912][ T9848] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.189407][ T9848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.212567][ T9848] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.218167][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.220045][ T6422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.224520][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.226357][ T6422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.266975][ T9876] IPVS: length: 4096 != 24 [ 116.268967][ T39] audit: type=1400 audit(2000000043.522:695): avc: denied { create } for pid=9875 comm="syz.3.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 116.273831][ T9876] binder: 9875:9876 ioctl c0185879 20000180 returned -22 [ 116.274743][ T39] audit: type=1400 audit(2000000043.532:696): avc: denied { ioctl } for pid=9875 comm="syz.3.1032" path="socket:[32666]" dev="sockfs" ino=32666 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 116.283650][ T39] audit: type=1400 audit(2000000043.532:697): avc: denied { accept } for pid=9875 comm="syz.3.1032" lport=51011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 116.309892][ T9848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.411520][ T9848] veth0_vlan: entered promiscuous mode [ 116.421298][ T9848] veth1_vlan: entered promiscuous mode [ 116.434170][ T9848] veth0_macvtap: entered promiscuous mode [ 116.437364][ T9848] veth1_macvtap: entered promiscuous mode [ 116.445757][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.448560][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.451109][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.454631][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.457313][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.460105][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.462653][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.465406][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.467918][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.470671][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.474432][ T9848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.486473][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.489216][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.491625][ T39] audit: type=1400 audit(2000000043.742:698): avc: denied { ioctl } for pid=9886 comm="syz.3.1034" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 116.491767][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.501001][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.503754][ T9848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.506486][ T9848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.511190][ T9848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.514832][ T9848] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.517105][ T9848] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.519505][ T9848] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.521820][ T9848] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.551250][ T6424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.553635][ T6424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.561736][ T6424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.564033][ T6424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.610188][ T9899] binder: BINDER_SET_CONTEXT_MGR already set [ 116.611782][ T9899] binder: 9897:9899 ioctl 4018620d 20000800 returned -16 [ 116.797078][ T39] audit: type=1400 audit(2000000044.052:699): avc: denied { create } for pid=9914 comm="syz.2.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 116.825868][ T39] audit: type=1400 audit(2000000044.082:700): avc: denied { read write } for pid=7224 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 116.924041][ T9922] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 117.019373][ T9927] kvm: Disabled LAPIC found during irq injection [ 117.207956][ T9932] __nla_validate_parse: 2 callbacks suppressed [ 117.207966][ T9932] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1046'. [ 117.212106][ T9932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.300181][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'. [ 117.302576][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1048'. [ 117.360063][ T9941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1049'. [ 117.718363][ T9959] Bluetooth: (null): Invalid header checksum [ 118.133245][ T5949] Bluetooth: hci5: command 0xfc11 tx timeout [ 118.133591][ T5940] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 118.137637][ T9980] x_tables: duplicate underflow at hook 3 [ 118.193540][ T9980] sp0: Synchronizing with TNC [ 118.373475][ T9985] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 118.528481][ T5940] Bluetooth: hci3: unexpected event for opcode 0x0407 [ 118.591791][ T6426] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.601428][T10008] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 118.750256][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.753012][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.756413][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.759275][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.761830][ T5949] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 118.763910][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.773597][ T834] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 118.830600][T10012] chnl_net:caif_netlink_parms(): no params data found [ 118.907892][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.910256][T10012] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.912691][T10012] bridge_slave_0: entered allmulticast mode [ 118.915613][T10012] bridge_slave_0: entered promiscuous mode [ 118.919081][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.921100][T10012] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.923734][T10012] bridge_slave_1: entered allmulticast mode [ 118.925756][T10012] bridge_slave_1: entered promiscuous mode [ 118.943115][ T834] usb 8-1: Using ep0 maxpacket: 8 [ 118.947841][T10012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.953240][T10012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.956775][ T834] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 118.959254][ T834] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 118.961511][ T834] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 118.970587][ T834] usb 8-1: config 250 has no interface number 0 [ 118.972305][ T834] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 118.975517][ T834] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 118.979269][ T834] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 118.983095][ T834] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 118.986568][ T834] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 118.990559][ T834] usb 8-1: config 250 interface 228 has no altsetting 0 [ 118.994416][ T834] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 118.996006][T10012] team0: Port device team_slave_0 added [ 118.997339][ T834] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 118.997358][ T834] usb 8-1: Product: syz [ 118.997370][ T834] usb 8-1: SerialNumber: syz [ 119.002098][T10012] team0: Port device team_slave_1 added [ 119.006821][ T834] hub 8-1:250.228: bad descriptor, ignoring hub [ 119.009265][ T834] hub 8-1:250.228: probe with driver hub failed with error -5 [ 119.026551][T10012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.028372][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.035160][T10012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.038867][T10012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.040680][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.047377][T10012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.082364][T10012] hsr_slave_0: entered promiscuous mode [ 119.085527][T10012] hsr_slave_1: entered promiscuous mode [ 119.087973][T10012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.090676][T10012] Cannot create hsr debugfs directory [ 119.218297][T10006] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 119.221576][ T834] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 17 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 119.786422][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 119.786433][ T39] audit: type=1400 audit(2000000047.042:708): avc: denied { bind } for pid=10040 comm="syz.6.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 119.794919][ T39] audit: type=1400 audit(2000000047.052:709): avc: denied { name_bind } for pid=10040 comm="syz.6.1073" src=544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 119.800245][ T39] audit: type=1400 audit(2000000047.052:710): avc: denied { node_bind } for pid=10040 comm="syz.6.1073" saddr=2020:2020:2020:2020:2020:2020:2020:2020 src=544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 119.807920][ T39] audit: type=1400 audit(2000000047.062:711): avc: denied { read } for pid=10040 comm="syz.6.1073" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 119.814364][ T39] audit: type=1400 audit(2000000047.062:712): avc: denied { open } for pid=10040 comm="syz.6.1073" path="/dev/ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 119.820412][ T39] audit: type=1400 audit(2000000047.062:713): avc: denied { ioctl } for pid=10040 comm="syz.6.1073" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.052403][T10051] block device autoloading is deprecated and will be removed. [ 120.144604][T10006] usb 8-1: reset high-speed USB device number 17 using dummy_hcd [ 120.150234][T10006] usb 8-1: device reset changed ep0 maxpacket size! [ 120.156548][ T1449] usb 8-1: USB disconnect, device number 17 [ 120.159180][ T1449] usblp0: removed [ 120.196775][ T6426] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.258252][ T6426] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.293085][ T1449] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 120.352775][ T6426] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.443735][ T1449] usb 8-1: Using ep0 maxpacket: 32 [ 120.449041][ T1449] usb 8-1: config index 0 descriptor too short (expected 35577, got 36) [ 120.450504][ T6426] bridge_slave_1: left allmulticast mode [ 120.451516][ T1449] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 120.452763][ T6426] bridge_slave_1: left promiscuous mode [ 120.456145][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.461021][ T6426] bridge_slave_0: left allmulticast mode [ 120.462650][ T6426] bridge_slave_0: left promiscuous mode [ 120.463702][ T1449] usb 8-1: config 1 has an invalid interface number: 228 but max is 91 [ 120.464758][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.467195][ T1449] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 120.471722][ T1449] usb 8-1: config 1 has no interface number 0 [ 120.474264][ T1449] usb 8-1: config 1 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 120.478363][ T1449] usb 8-1: config 1 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 120.481987][ T1449] usb 8-1: config 1 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.485789][ T1449] usb 8-1: config 1 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 120.488396][ T1449] usb 8-1: config 1 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 120.491794][ T1449] usb 8-1: config 1 interface 228 has no altsetting 0 [ 120.493856][ T1449] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 120.496957][ T1449] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.703717][ T1449] usblp 8-1:1.228: usblp0: USB Bidirectional printer dev 18 if 228 alt 255 proto 3 vid 0x0E41 pid 0x5051 [ 120.720440][ T1449] usb 8-1: USB disconnect, device number 18 [ 120.723394][ T1449] usblp0: removed [ 120.754996][T10078] netlink: 'syz.6.1083': attribute type 13 has an invalid length. [ 120.766576][ T6426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.771051][ T6426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.772913][ T5949] Bluetooth: hci1: command tx timeout [ 120.777799][ T6426] bond0 (unregistering): Released all slaves [ 120.798158][T10077] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 120.806341][T10078] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 120.806437][T10076] binder: 10075:10076 ioctl c018620c 20000000 returned -1 [ 120.813006][T10078] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 120.815092][T10078] gretap1: entered promiscuous mode [ 120.816454][T10078] gretap1: entered allmulticast mode [ 120.851522][T10081] overlayfs: failed to resolve './file0': -2 [ 120.896247][T10085] overlayfs: missing 'workdir' [ 121.105270][ T35] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 121.143722][ T6426] hsr_slave_0: left promiscuous mode [ 121.145543][ T6426] hsr_slave_1: left promiscuous mode [ 121.147306][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.149250][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.151546][ T6426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.153936][ T6426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.175524][ T6426] veth1_macvtap: left promiscuous mode [ 121.177032][ T6426] veth0_macvtap: left promiscuous mode [ 121.178509][ T6426] veth1_vlan: left promiscuous mode [ 121.179807][ T6426] veth0_vlan: left promiscuous mode [ 121.262922][ T35] usb 11-1: Using ep0 maxpacket: 16 [ 121.265617][ T35] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.268589][ T35] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.271259][ T35] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.274974][ T35] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.277325][ T35] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.280737][ T35] usb 11-1: config 0 descriptor?? [ 121.600272][ T39] audit: type=1400 audit(2000000048.852:714): avc: denied { map } for pid=10080 comm="syz.6.1084" path="/dev/swradio2" dev="devtmpfs" ino=1005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.657264][ T35] usbhid 11-1:0.0: can't add hid device: -71 [ 121.658969][ T35] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 121.666336][ T35] usb 11-1: USB disconnect, device number 7 [ 121.682807][ T39] audit: type=1400 audit(2000000048.932:715): avc: denied { map } for pid=10109 comm="syz.3.1089" path="socket:[37934]" dev="sockfs" ino=37934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.693769][ T39] audit: type=1400 audit(2000000048.942:716): avc: denied { read } for pid=10109 comm="syz.3.1089" path="socket:[37934]" dev="sockfs" ino=37934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.949053][ T6426] team0 (unregistering): Port device team_slave_1 removed [ 122.025530][ T6426] team0 (unregistering): Port device team_slave_0 removed [ 122.630837][ T39] audit: type=1400 audit(2000000049.882:717): avc: denied { setopt } for pid=10118 comm="syz.3.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.643036][T10012] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.660357][T10012] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.680245][T10012] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.699430][T10012] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 122.730320][T10145] netlink: 'syz.6.1098': attribute type 1 has an invalid length. [ 122.744741][T10012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.756229][T10012] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.760470][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.762298][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.768820][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.770705][ T6427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.853651][ T5949] Bluetooth: hci1: command 0x041b tx timeout [ 122.870170][T10012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.971200][T10012] veth0_vlan: entered promiscuous mode [ 122.984569][T10012] veth1_vlan: entered promiscuous mode [ 123.003601][T10012] veth0_macvtap: entered promiscuous mode [ 123.011989][T10181] befs: (nullb0): No write support. Marking filesystem read-only [ 123.015707][T10181] befs: (nullb0): invalid magic header [ 123.016637][T10012] veth1_macvtap: entered promiscuous mode [ 123.024793][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.027562][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.030199][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.033139][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.035702][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.038606][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.041189][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.045661][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.049612][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.053303][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.056557][T10012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.060744][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.065189][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.067698][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.071226][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.074451][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.077183][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.080466][T10012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.087104][T10012] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.089929][T10012] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.093402][T10012] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.095900][T10012] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.130932][ T6428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.133239][ T6428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.215394][ T6427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.218203][ T6427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.253116][ T5974] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 123.404038][ T5974] usb 8-1: config 0 has no interfaces? [ 123.406901][ T5974] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 123.409294][ T5974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.411488][ T5974] usb 8-1: Product: syz [ 123.412906][ T5974] usb 8-1: Manufacturer: syz [ 123.414665][ T5974] usb 8-1: SerialNumber: syz [ 123.418043][ T5974] usb 8-1: config 0 descriptor?? [ 123.622037][ T5974] usb 8-1: USB disconnect, device number 19 [ 123.816435][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1111'. [ 123.819501][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1111'. [ 123.822080][T10208] netlink: 'syz.6.1111': attribute type 11 has an invalid length. [ 124.132304][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 124.176258][T10230] Unsupported ieee802154 address type: 0 [ 124.386401][T10247] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 124.393898][ T6427] Bluetooth: hci1: Frame reassembly failed (-84) [ 124.822375][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 124.822390][ T39] audit: type=1400 audit(2000000052.072:723): avc: denied { ioctl } for pid=10261 comm="syz.6.1129" path="socket:[39768]" dev="sockfs" ino=39768 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 124.824994][T10262] ieee802154 phy1 wpan1: encryption failed: -22 [ 124.880884][T10264] netlink: 'syz.6.1130': attribute type 29 has an invalid length. [ 124.883431][T10264] netlink: 'syz.6.1130': attribute type 29 has an invalid length. [ 124.885849][T10264] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1130'. [ 124.888263][T10264] unsupported nla_type 40 [ 125.062424][ T39] audit: type=1400 audit(2000000052.312:724): avc: denied { setattr } for pid=10274 comm="syz.3.1133" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.171395][T10277] sg_write: process 954 (syz.3.1133) changed security contexts after opening file descriptor, this is not allowed. [ 125.175944][T10277] program syz.3.1133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.322037][ T67] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.326523][ T67] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.329720][ T67] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.333384][ T67] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.338100][ T67] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 125.340074][ T67] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.387882][ T6422] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.442933][T10288] chnl_net:caif_netlink_parms(): no params data found [ 125.470203][T10297] netlink: 'syz.6.1137': attribute type 27 has an invalid length. [ 125.590656][ T39] audit: type=1400 audit(2000000052.842:725): avc: denied { remount } for pid=10301 comm="syz.3.1136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 125.600335][T10297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.613111][T10297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.694319][T10297] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.697415][T10297] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.700421][T10297] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.703720][T10297] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.766295][T10297] gretap1: left promiscuous mode [ 125.767577][T10297] gretap1: left allmulticast mode [ 125.796800][T10298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.799094][T10298] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.801621][T10298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.808734][T10288] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.811124][T10288] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.820831][T10288] bridge_slave_0: entered allmulticast mode [ 125.824011][T10288] bridge_slave_0: entered promiscuous mode [ 125.828637][T10288] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.830543][T10288] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.832489][T10288] bridge_slave_1: entered allmulticast mode [ 125.835030][T10288] bridge_slave_1: entered promiscuous mode [ 125.858407][T10288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.861829][T10288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.889200][T10288] team0: Port device team_slave_0 added [ 125.892845][T10288] team0: Port device team_slave_1 added [ 125.919004][T10288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.921498][T10288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.930174][T10288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.933867][T10288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.935746][T10288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.942372][T10288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.968240][T10288] hsr_slave_0: entered promiscuous mode [ 125.970283][T10288] hsr_slave_1: entered promiscuous mode [ 125.972154][T10288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.974743][T10288] Cannot create hsr debugfs directory [ 126.092701][ T1449] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 126.256768][ T1449] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.260459][ T1449] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.263748][ T1449] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.267543][ T1449] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.270322][ T1449] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.274025][ T1449] usb 11-1: config 0 descriptor?? [ 126.448218][T10307] netlink: 'syz.3.1139': attribute type 10 has an invalid length. [ 126.450328][T10307] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1139'. [ 126.452723][ T67] Bluetooth: hci1: command 0x1003 tx timeout [ 126.453039][ T5940] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 126.487737][T10309] syzkaller1: entered promiscuous mode [ 126.489103][T10309] syzkaller1: entered allmulticast mode [ 126.945409][ T1449] usbhid 11-1:0.0: can't add hid device: -71 [ 126.946897][ T1449] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 126.953422][ T1449] usb 11-1: USB disconnect, device number 8 [ 127.008531][ T6422] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.073296][ T6422] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.172354][T10346] MINIX-fs: blocksize too small for device [ 127.206727][ T6422] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.223127][T10346] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 127.255391][T10349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1151'. [ 127.311012][ T6422] bridge_slave_1: left allmulticast mode [ 127.312642][ T6422] bridge_slave_1: left promiscuous mode [ 127.314259][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.321459][ T6422] bridge_slave_0: left allmulticast mode [ 127.324184][ T6422] bridge_slave_0: left promiscuous mode [ 127.326073][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.373693][T10348] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 127.406120][ T39] audit: type=1400 audit(2000000054.663:726): avc: denied { write } for pid=10350 comm="syz.2.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.422785][ T5940] Bluetooth: hci5: command tx timeout [ 127.481228][ T39] audit: type=1400 audit(2000000054.733:727): avc: denied { write } for pid=10355 comm="syz.6.1153" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 127.560166][T10361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=10361 comm=syz.6.1154 [ 127.565155][T10361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=10361 comm=syz.6.1154 [ 127.588618][T10364] random: crng reseeded on system resumption [ 127.714318][ T6422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.719949][ T6422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.725601][ T6422] bond0 (unregistering): Released all slaves [ 127.755035][T10368] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.758307][T10368] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.761292][T10368] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.764393][T10368] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.767657][T10368] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 127.770157][T10368] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 127.782430][T10368] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 127.784764][T10368] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 127.787179][ T39] audit: type=1400 audit(2000000055.043:728): avc: denied { append } for pid=10363 comm="syz.3.1155" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.793312][T10368] geneve2: entered promiscuous mode [ 127.794780][T10368] geneve2: entered allmulticast mode [ 127.875832][ T39] audit: type=1400 audit(2000000055.133:729): avc: denied { map } for pid=10363 comm="syz.3.1155" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 127.947377][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1160'. [ 128.045817][ T6422] hsr_slave_0: left promiscuous mode [ 128.047672][ T6422] hsr_slave_1: left promiscuous mode [ 128.050275][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.050701][T10396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.052274][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.058225][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.060759][ T6422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.062261][T10396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.065921][T10396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.068563][T10396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.071698][T10396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.076181][T10396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.079026][T10396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.082149][T10396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.086009][T10396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.092106][ T6422] veth1_macvtap: left promiscuous mode [ 128.093918][ T6422] veth0_macvtap: left promiscuous mode [ 128.095578][ T6422] veth1_vlan: left promiscuous mode [ 128.097058][ T6422] veth0_vlan: left promiscuous mode [ 128.162513][ T1449] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 128.326965][ T1449] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.329923][ T1449] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.333473][ T1449] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 128.336910][ T1449] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.341300][ T1449] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.344620][ T1449] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.349849][ T1449] usb 7-1: config 0 descriptor?? [ 128.399017][T10407] program syz.6.1164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.419846][T10407] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1164'. [ 128.590798][T10413] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1164'. [ 128.593510][T10409] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 128.759664][ T1449] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 128.774906][ T1449] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 128.808507][ T1449] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 128.977646][ T6422] team0 (unregistering): Port device team_slave_1 removed [ 129.068124][ T6422] team0 (unregistering): Port device team_slave_0 removed [ 129.492466][ T5940] Bluetooth: hci5: command tx timeout [ 129.739899][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1164'. [ 129.767789][T10419] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 129.768210][T10420] SELinux: security_context_str_to_sid („) failed with errno=-22 [ 129.782116][T10288] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.785862][T10288] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.790095][T10288] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.801298][T10288] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.847575][T10428] overlayfs: missing 'workdir' [ 129.870733][T10288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.883651][T10288] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.889772][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.891757][ T6423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.900469][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.902420][ T6423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.933560][T10288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.995108][T10288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.110285][T10288] veth0_vlan: entered promiscuous mode [ 130.114544][T10288] veth1_vlan: entered promiscuous mode [ 130.126500][T10288] veth0_macvtap: entered promiscuous mode [ 130.129476][T10288] veth1_macvtap: entered promiscuous mode [ 130.135726][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.138473][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.141120][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.144017][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.146633][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.149300][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.151867][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.154663][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.157804][T10288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.163335][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.166076][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.168611][T10288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.171326][T10288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.174655][T10288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.180272][T10288] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.182689][T10288] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.184926][T10288] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.187269][T10288] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.248357][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.251124][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.265424][ T6423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.268889][ T6423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.493158][T10475] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 130.577520][T10484] nvme_fabrics: missing parameter 'transport=%s' [ 130.579768][T10484] nvme_fabrics: missing parameter 'nqn=%s' [ 130.606103][T10491] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 130.611161][T10491] tipc: Enabled bearer , priority 10 [ 130.666935][T10493] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1183'. [ 130.669397][T10493] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1183'. [ 130.841687][ T1449] usb 7-1: USB disconnect, device number 18 [ 130.964795][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1185'. [ 130.967233][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1185'. [ 131.024580][T10501] can: request_module (can-proto-4) failed. [ 131.028697][ T39] audit: type=1400 audit(2000000058.283:730): avc: denied { create } for pid=10500 comm="syz.6.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 131.339239][ T39] audit: type=1400 audit(2000000058.593:731): avc: denied { getopt } for pid=10520 comm="syz.2.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.360974][T10521] netlink: 'syz.3.1191': attribute type 1 has an invalid length. [ 131.563042][T10540] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1195'. [ 131.594876][T10542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.597599][T10542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30536 sclass=netlink_route_socket pid=10542 comm=syz.3.1196 [ 131.745974][ T39] audit: type=1400 audit(2000000059.003:732): avc: denied { getopt } for pid=10553 comm="syz.3.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 132.146652][T10566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1203'. [ 132.232090][ T6424] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.533978][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.714537][T10583] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 132.718745][T10583] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1208'. [ 132.723322][ T39] audit: type=1400 audit(2000000059.983:733): avc: denied { read append } for pid=10581 comm="syz.3.1208" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 132.731717][ T39] audit: type=1400 audit(2000000059.983:734): avc: denied { open } for pid=10581 comm="syz.3.1208" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 132.754644][T10582] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1207'. [ 132.755635][ T39] audit: type=1400 audit(2000000060.013:735): avc: denied { ioctl } for pid=10581 comm="syz.3.1208" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x64b8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 132.795628][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.799022][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.805528][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.809465][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.813478][ T67] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 132.816278][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.925740][T10586] chnl_net:caif_netlink_parms(): no params data found [ 132.971436][ T39] audit: type=1400 audit(2000000060.223:736): avc: denied { connect } for pid=10604 comm="syz.3.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 132.993214][T10597] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 133.011724][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.013898][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.015949][T10586] bridge_slave_0: entered allmulticast mode [ 133.018533][T10586] bridge_slave_0: entered promiscuous mode [ 133.021605][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.024332][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.026688][T10586] bridge_slave_1: entered allmulticast mode [ 133.029283][T10586] bridge_slave_1: entered promiscuous mode [ 133.056667][T10586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.061118][T10586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.099053][T10613] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 133.100901][T10586] team0: Port device team_slave_0 added [ 133.107234][T10586] team0: Port device team_slave_1 added [ 133.109700][ T39] audit: type=1400 audit(2000000060.363:737): avc: denied { connect } for pid=10612 comm="syz.3.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 133.143280][T10586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.145778][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.155308][T10586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.159694][T10616] netlink: 'syz.2.1214': attribute type 26 has an invalid length. [ 133.162298][T10586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.164816][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.175556][T10586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.226809][T10586] hsr_slave_0: entered promiscuous mode [ 133.229607][T10586] hsr_slave_1: entered promiscuous mode [ 133.231882][T10586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.234589][T10586] Cannot create hsr debugfs directory [ 133.510395][T10632] tty tty26: ldisc open failed (-12), clearing slot 25 [ 133.735835][ T6424] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.812907][ T6424] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.878032][ T6424] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.998625][ T6424] bridge_slave_1: left allmulticast mode [ 134.000700][ T6424] bridge_slave_1: left promiscuous mode [ 134.003102][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.007245][ T6424] bridge_slave_0: left allmulticast mode [ 134.009200][ T6424] bridge_slave_0: left promiscuous mode [ 134.011265][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.298503][ T6424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.304158][ T6424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.309185][ T6424] bond0 (unregistering): Released all slaves [ 134.336558][T10648] veth1_macvtap: left promiscuous mode [ 134.338521][T10648] macsec0: entered promiscuous mode [ 134.340229][T10648] macsec0: entered allmulticast mode [ 134.347538][T10649] veth1_macvtap: entered promiscuous mode [ 134.349672][T10649] veth1_macvtap: entered allmulticast mode [ 134.351931][T10649] macsec0: left promiscuous mode [ 134.353986][T10649] macsec0: left allmulticast mode [ 134.355947][T10649] veth1_macvtap: left allmulticast mode [ 134.487563][T10652] netlink: 'syz.2.1222': attribute type 21 has an invalid length. [ 134.489777][T10652] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1222'. [ 134.492441][T10652] netlink: 'syz.2.1222': attribute type 4 has an invalid length. [ 134.495257][T10652] netlink: 'syz.2.1222': attribute type 5 has an invalid length. [ 134.748184][ T6424] hsr_slave_0: left promiscuous mode [ 134.750694][ T6424] hsr_slave_1: left promiscuous mode [ 134.753930][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.756578][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.759542][ T6424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.761940][ T6424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.801407][ T6424] veth1_macvtap: left promiscuous mode [ 134.803327][ T6424] veth0_macvtap: left promiscuous mode [ 134.804823][ T6424] veth1_vlan: left promiscuous mode [ 134.806283][ T6424] veth0_vlan: left promiscuous mode [ 134.856260][ T5940] Bluetooth: hci1: command tx timeout [ 135.555620][ T6424] team0 (unregistering): Port device team_slave_1 removed [ 135.614335][ T39] audit: type=1400 audit(2000000062.873:738): avc: denied { create } for pid=10688 comm="syz.6.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 135.622076][ T39] audit: type=1400 audit(2000000062.873:739): avc: denied { ioctl } for pid=10688 comm="syz.6.1229" path="socket:[41545]" dev="sockfs" ino=41545 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 135.680071][ T6424] team0 (unregistering): Port device team_slave_0 removed [ 136.304018][T10686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 136.306668][T10686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.395339][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 136.395350][ T39] audit: type=1400 audit(2000000063.653:741): avc: denied { write } for pid=10698 comm="syz.2.1234" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.395542][T10586] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.406514][T10586] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.437404][T10586] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.449141][T10586] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.449497][T10706] dlm: Unknown command passed to DLM device : 8 [ 136.449497][T10706] [ 136.455879][ T39] audit: type=1400 audit(2000000063.713:742): avc: denied { map } for pid=10698 comm="syz.2.1234" path="socket:[41557]" dev="sockfs" ino=41557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.464152][ T39] audit: type=1400 audit(2000000063.713:743): avc: denied { read } for pid=10698 comm="syz.2.1234" path="socket:[41557]" dev="sockfs" ino=41557 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.553645][T10704] __nla_validate_parse: 4 callbacks suppressed [ 136.553657][T10704] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1235'. [ 136.559299][T10586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.572045][T10586] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.578423][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.580454][ T6426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.594395][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.596294][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.678275][ T39] audit: type=1326 audit(2000000063.933:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.6.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f10585d29 code=0x7ffc0000 [ 136.687444][ T39] audit: type=1326 audit(2000000063.953:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.6.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2f10585d29 code=0x7ffc0000 [ 136.691591][T10586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.696204][ T39] audit: type=1326 audit(2000000063.953:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.6.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f10585d29 code=0x7ffc0000 [ 136.707278][ T39] audit: type=1326 audit(2000000063.953:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.6.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f10585d29 code=0x7ffc0000 [ 136.715989][ T39] audit: type=1326 audit(2000000063.953:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.6.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2f10585d29 code=0x7ffc0000 [ 136.724484][ T39] audit: type=1326 audit(2000000063.953:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.6.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f10585d29 code=0x7ffc0000 [ 136.732881][ T39] audit: type=1326 audit(2000000063.953:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10722 comm="syz.6.1238" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f10585d29 code=0x7ffc0000 [ 136.815094][T10586] veth0_vlan: entered promiscuous mode [ 136.820157][T10586] veth1_vlan: entered promiscuous mode [ 136.832664][ T1449] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 136.837478][T10586] veth0_macvtap: entered promiscuous mode [ 136.846646][T10586] veth1_macvtap: entered promiscuous mode [ 136.854556][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.857255][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.859970][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.859982][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.859992][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.860000][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.860007][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.860014][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.860637][T10586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.885069][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.887750][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.890633][T10586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.893302][T10586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.896511][T10586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.901828][T10586] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.905305][T10586] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.908451][T10586] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.911413][T10586] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.932146][ T5940] Bluetooth: hci1: command tx timeout [ 136.955707][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.958164][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.971113][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.974097][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.989717][ T1449] usb 8-1: config 0 has no interfaces? [ 136.993559][ T1449] usb 8-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 136.996591][ T1449] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.999044][ T1449] usb 8-1: Product: syz [ 137.000241][ T1449] usb 8-1: Manufacturer: syz [ 137.001476][ T1449] usb 8-1: SerialNumber: syz [ 137.004242][ T1449] usb 8-1: config 0 descriptor?? [ 137.255710][T10741] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1240'. [ 137.273457][ T5975] usb 8-1: USB disconnect, device number 20 [ 137.296969][ T1332] hid-generic 0000:EBE2288:A7605A5F.0006: item fetching failed at offset 0/4 [ 137.299511][ T1332] hid-generic 0000:EBE2288:A7605A5F.0006: probe with driver hid-generic failed with error -22 [ 137.572665][T10755] program syz.6.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.821423][T10768] netlink: 'syz.3.1249': attribute type 1 has an invalid length. [ 137.824474][T10768] netlink: 'syz.3.1249': attribute type 4 has an invalid length. [ 137.827480][T10768] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1249'. [ 137.897539][T10774] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1250'. [ 137.900103][T10773] Driver unsupported XDP return value 0 on prog (id 158) dev N/A, expect packet loss! [ 138.168455][T10798] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1258'. [ 138.210111][T10806] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1260'. [ 138.214936][T10807] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1260'. [ 138.324980][T10816] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1263'. [ 138.327273][T10816] all: renamed from gretap0 (while UP) [ 138.338225][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1263'. [ 138.340451][T10816] bridge_slAve_0: renamed from lo (while UP) [ 138.391684][ T5940] Bluetooth: hci4: Malformed Event: 0x02 [ 138.393921][ T5940] Bluetooth: Unexpected continuation frame (len 10) [ 138.398455][ T67] Bluetooth: hci4: hardware error 0x09 [ 138.503714][T10830] 9pnet_virtio: no channels available for device mounts [ 138.989007][ T6423] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.541424][T10855] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 139.625778][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.628627][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.629301][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.632553][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.642017][ T5949] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.642264][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.759805][T10859] chnl_net:caif_netlink_parms(): no params data found [ 139.782071][ T1449] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 139.836741][T10859] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.839091][T10859] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.841673][T10859] bridge_slave_0: entered allmulticast mode [ 139.845487][T10859] bridge_slave_0: entered promiscuous mode [ 139.848015][T10859] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.849880][T10859] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.857045][T10859] bridge_slave_1: entered allmulticast mode [ 139.863097][T10859] bridge_slave_1: entered promiscuous mode [ 139.909475][T10859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.914052][T10859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.931803][ T1449] usb 7-1: Using ep0 maxpacket: 8 [ 139.939457][ T1449] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 139.941443][ T1449] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 139.949423][ T25] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 139.951608][ T1449] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.956010][T10859] team0: Port device team_slave_0 added [ 139.959265][ T1449] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.962485][T10859] team0: Port device team_slave_1 added [ 139.962921][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1278'. [ 139.963379][ T1449] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 139.964243][ T1449] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 139.971625][ T1449] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 139.975609][ T1449] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.978882][ T1449] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.979470][T10882] vlan0: entered allmulticast mode [ 139.981541][ T1449] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 139.983187][T10882] macsec0: entered allmulticast mode [ 139.986785][ T1449] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 139.989414][ T1449] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 139.992451][ T1449] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.995743][ T1449] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.998693][ T1449] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.004251][ T1449] usb 7-1: string descriptor 0 read error: -22 [ 140.006024][ T1449] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 140.008561][ T1449] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.011678][T10859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.013613][T10859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.020033][T10859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.028862][ T1449] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 140.041203][T10859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.043117][T10859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.050283][T10859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.076796][T10886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=10886 comm=syz.6.1279 [ 140.077709][T10859] hsr_slave_0: entered promiscuous mode [ 140.082407][ T25] usb 8-1: device descriptor read/64, error -71 [ 140.084765][T10859] hsr_slave_1: entered promiscuous mode [ 140.086662][T10859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.088759][T10859] Cannot create hsr debugfs directory [ 140.284490][ T64] usb 7-1: USB disconnect, device number 19 [ 140.321931][ T25] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 140.451850][ T25] usb 8-1: device descriptor read/64, error -71 [ 140.451864][ T67] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 140.455775][ T67] Bluetooth: hci4: hardware error 0x09 [ 140.528804][T10903] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 140.562155][ T25] usb usb8-port1: attempt power cycle [ 140.633442][ T6423] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.695551][ T6423] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.758013][ T6423] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.876680][ T6423] bridge_slave_1: left allmulticast mode [ 140.878422][ T6423] bridge_slave_1: left promiscuous mode [ 140.880698][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.884361][ T6423] bridge_slave_0: left allmulticast mode [ 140.885953][ T6423] bridge_slave_0: left promiscuous mode [ 140.887556][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.902332][ T25] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 140.925950][ T25] usb 8-1: device descriptor read/8, error -71 [ 141.163329][ T25] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 141.192144][ T25] usb 8-1: device descriptor read/8, error -71 [ 141.195296][ T6423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.200759][ T6423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.208536][ T6423] bond0 (unregistering): Released all slaves [ 141.311867][ T25] usb usb8-port1: unable to enumerate USB device [ 141.517746][ T6423] hsr_slave_0: left promiscuous mode [ 141.520644][ T6423] hsr_slave_1: left promiscuous mode [ 141.530123][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.535515][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.545351][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.547562][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.584000][ T6423] veth1_macvtap: left promiscuous mode [ 141.585531][ T6423] veth0_macvtap: left promiscuous mode [ 141.587023][ T6423] veth1_vlan: left promiscuous mode [ 141.588471][ T6423] veth0_vlan: left promiscuous mode [ 141.745938][ T5949] Bluetooth: hci1: command tx timeout [ 142.337330][ T6423] team0 (unregistering): Port device team_slave_1 removed [ 142.434922][ T6423] team0 (unregistering): Port device team_slave_0 removed [ 142.541761][ T67] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 142.736441][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 142.736451][ T39] audit: type=1400 audit(2000000069.993:774): avc: denied { map } for pid=10927 comm="syz.3.1290" path="socket:[43456]" dev="sockfs" ino=43456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.744898][ T39] audit: type=1400 audit(2000000070.003:775): avc: denied { read } for pid=10927 comm="syz.3.1290" path="socket:[43456]" dev="sockfs" ino=43456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.882408][T10937] misc userio: The device must be registered before sending interrupts [ 142.886163][T10938] misc userio: The device must be registered before sending interrupts [ 143.237606][T10859] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.252739][T10859] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 143.257786][T10859] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.273228][T10859] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.307084][T10966] __nla_validate_parse: 1 callbacks suppressed [ 143.307095][T10966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1297'. [ 143.312262][T10966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1297'. [ 143.343210][T10859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.361667][T10859] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.366686][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.368466][ T6428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.377201][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.378972][ T6428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.480294][T10859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.551769][ T25] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 143.581012][T10859] veth0_vlan: entered promiscuous mode [ 143.584904][T10859] veth1_vlan: entered promiscuous mode [ 143.595652][T10859] veth0_macvtap: entered promiscuous mode [ 143.598563][T10859] veth1_macvtap: entered promiscuous mode [ 143.604102][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.606855][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.609405][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.612470][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.615011][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.617685][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.620221][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.621712][ T30] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 143.623204][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.628433][T10859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.634958][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.637673][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.640321][T10859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.643693][T10859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.647848][T10859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.652085][T10859] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.654396][T10859] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.656662][T10859] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.658900][T10859] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.691927][ T25] usb 11-1: device descriptor read/64, error -71 [ 143.696123][ T6423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.698042][ T6423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.714991][ T6423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.717730][ T6423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.787571][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 143.794073][ T30] usb 8-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.798044][ T30] usb 8-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.802758][ T30] usb 8-1: config 1 interface 0 has no altsetting 0 [ 143.808236][ T30] usb 8-1: New USB device found, idVendor=056a, idProduct=00f6, bcdDevice= 0.40 [ 143.811415][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.814344][ T30] usb 8-1: Product: syz [ 143.815893][ T30] usb 8-1: Manufacturer: syz [ 143.817547][ T30] usb 8-1: SerialNumber: syz [ 143.931621][ T25] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 144.034086][ T30] usbhid 8-1:1.0: can't add hid device: -71 [ 144.035987][ T30] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 144.038992][ T30] usb 8-1: USB disconnect, device number 25 [ 144.043428][ T6092] udevd[6092]: setting mode of /dev/bus/usb/008/025 to 020664 failed: No such file or directory [ 144.046229][ T6092] udevd[6092]: setting owner of /dev/bus/usb/008/025 to uid=0, gid=0 failed: No such file or directory [ 144.061754][ T25] usb 11-1: device descriptor read/64, error -71 [ 144.171911][ T25] usb usb11-port1: attempt power cycle [ 144.293913][T10983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1299'. [ 144.299226][T10983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.531712][ T25] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 144.552276][ T25] usb 11-1: device descriptor read/8, error -71 [ 144.811598][ T25] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 144.842158][ T25] usb 11-1: device descriptor read/8, error -71 [ 144.903002][T11008] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 144.903225][T11007] program syz.3.1306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.913111][T11005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=11005 comm=syz.2.1305 [ 144.962249][ T25] usb usb11-port1: unable to enumerate USB device [ 145.179198][T11026] syz.2.1311 (11026): drop_caches: 2 [ 145.521708][ T25] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 145.672624][ T25] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.675575][ T25] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.678142][ T25] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.680480][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.684022][T11034] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 145.689343][ T25] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.942347][T11034] xt_TCPMSS: Only works on TCP SYN packets [ 145.996592][ T25] usb 8-1: USB disconnect, device number 26 [ 146.048682][ T6423] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.810631][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.813804][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.820877][T11068] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=101 sclass=netlink_xfrm_socket pid=11068 comm=syz.3.1319 [ 146.821096][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.827727][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.832939][ T5949] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.835102][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.913030][T11074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=11074 comm=syz.6.1320 [ 146.946944][T11070] chnl_net:caif_netlink_parms(): no params data found [ 147.000176][T11070] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.002983][T11070] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.004874][T11070] bridge_slave_0: entered allmulticast mode [ 147.006863][T11070] bridge_slave_0: entered promiscuous mode [ 147.010021][T11083] macsec0: left allmulticast mode [ 147.031070][T11070] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.033176][T11070] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.035690][T11070] bridge_slave_1: entered allmulticast mode [ 147.042581][T11070] bridge_slave_1: entered promiscuous mode [ 147.049973][T11085] tls_set_device_offload_rx: netdev not found [ 147.071708][T11070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.075373][T11070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.096652][T11070] team0: Port device team_slave_0 added [ 147.100551][T11070] team0: Port device team_slave_1 added [ 147.118464][T11070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.120314][T11070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.127707][T11070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.131706][T11070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.133517][T11070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.140537][T11070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.165613][T11070] hsr_slave_0: entered promiscuous mode [ 147.168082][T11070] hsr_slave_1: entered promiscuous mode [ 147.170560][T11070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.172887][T11070] Cannot create hsr debugfs directory [ 147.466931][T11111] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 147.470326][T11110] netlink: 'syz.6.1330': attribute type 6 has an invalid length. [ 147.483538][T11110] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.617131][ T6423] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.621629][ T25] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 147.634154][T11116] netlink: 'syz.2.1331': attribute type 2 has an invalid length. [ 147.686820][ T6423] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.761391][ T25] usb 8-1: device descriptor read/64, error -71 [ 147.786873][ T6423] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.878631][ T6423] bridge_slave_1: left allmulticast mode [ 147.880309][ T6423] bridge_slave_1: left promiscuous mode [ 147.881980][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.885935][ T6423] bridge_slave_0: left allmulticast mode [ 147.887396][ T6423] bridge_slave_0: left promiscuous mode [ 147.888932][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.900108][ T39] audit: type=1400 audit(2000000075.154:776): avc: denied { write } for pid=11131 comm="syz.2.1336" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 147.935371][T11134] overlayfs: conflicting options: verity=on,redirect_dir=nofollow [ 148.031395][ T25] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 148.085535][ T39] audit: type=1400 audit(2000000075.344:777): avc: denied { map } for pid=11135 comm="syz.2.1338" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 148.161461][ T25] usb 8-1: device descriptor read/64, error -71 [ 148.186052][ T6423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.271530][ T25] usb usb8-port1: attempt power cycle [ 148.621337][ T25] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 148.651845][ T25] usb 8-1: device descriptor read/8, error -71 [ 148.921305][ T25] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 148.947088][ T67] Bluetooth: hci1: command tx timeout [ 148.961652][ T25] usb 8-1: device descriptor read/8, error -71 [ 149.081596][ T25] usb usb8-port1: unable to enumerate USB device [ 149.411838][ T6423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.419102][ T6423] bond0 (unregistering): Released all slaves [ 149.460807][T11143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1339'. [ 149.558716][T11160] binder: 11150:11160 ioctl c0306201 20000180 returned -14 [ 149.624730][T11167] hfs: can't find a HFS filesystem on dev sr0 [ 149.677180][T11167] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 149.733080][ T39] audit: type=1400 audit(2000000076.994:778): avc: denied { map } for pid=11176 comm="syz.2.1346" path="socket:[47622]" dev="sockfs" ino=47622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.739221][ T39] audit: type=1400 audit(2000000076.994:779): avc: denied { read accept } for pid=11176 comm="syz.2.1346" path="socket:[47622]" dev="sockfs" ino=47622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.739292][ T6423] hsr_slave_0: left promiscuous mode [ 149.760978][ T6423] hsr_slave_1: left promiscuous mode [ 149.770856][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.774141][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.781888][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.784039][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.832440][ T6423] veth1_macvtap: left promiscuous mode [ 149.834641][ T6423] veth0_macvtap: left promiscuous mode [ 149.836713][ T6423] veth1_vlan: left promiscuous mode [ 149.838910][ T6423] veth0_vlan: left promiscuous mode [ 149.951794][ T39] audit: type=1400 audit(2000000077.204:780): avc: denied { setattr } for pid=11193 comm="syz.2.1350" path="pipe:[46265]" dev="pipefs" ino=46265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 150.015315][T11201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11201 comm=syz.6.1348 [ 150.104003][T11204] netlink: 'syz.6.1348': attribute type 3 has an invalid length. [ 150.106108][T11204] netlink: 'syz.6.1348': attribute type 1 has an invalid length. [ 150.108347][T11204] netlink: 216 bytes leftover after parsing attributes in process `syz.6.1348'. [ 150.145376][T11204] net_ratelimit: 56 callbacks suppressed [ 150.145393][T11204] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 150.150387][T11204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.417873][ T39] audit: type=1326 audit(2000000077.674:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11209 comm="syz.3.1353" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99bd585d29 code=0x0 [ 150.624387][ T6423] team0 (unregistering): Port device team_slave_1 removed [ 150.710179][ T6423] team0 (unregistering): Port device team_slave_0 removed [ 151.011240][ T67] Bluetooth: hci1: command tx timeout [ 151.390239][T11221] virtio-fs: tag rejected, already enabled [ 152.381427][ T5975] usb 7-1: Using ep0 maxpacket: 32 [ 152.383988][ T5975] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 152.390054][ T5975] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 152.392661][ T5975] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 152.394775][ T5975] usb 7-1: Product: syz [ 152.395864][ T5975] usb 7-1: Manufacturer: syz [ 152.397069][ T5975] usb 7-1: SerialNumber: syz [ 152.399893][T11333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=11333 comm=syz.3.1375 [ 152.400316][ T5975] usb 7-1: config 0 descriptor?? [ 152.406732][T11292] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 152.408933][T11333] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 152.616380][ T35] usb 7-1: USB disconnect, device number 20 [ 152.783854][T11349] 9p: Unknown uid 00000000004294967295 [ 153.378913][ T5975] libceph: connect (1)[c::]:6789 error -101 [ 153.380914][ T5975] libceph: mon0 (1)[c::]:6789 connect error [ 153.452724][T11360] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 153.454498][T11360] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 153.456595][T11360] vhci_hcd vhci_hcd.0: Device attached [ 153.459257][T11361] usbip_core: unknown command [ 153.460723][T11361] vhci_hcd: unknown pdu 0 [ 153.461964][T11361] usbip_core: unknown command [ 153.464740][ T45] vhci_hcd: stop threads [ 153.466472][ T45] vhci_hcd: release socket [ 153.467695][ T45] vhci_hcd: disconnect device [ 153.478397][ T35] libceph: connect (1)[c::]:6789 error -101 [ 153.480442][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 153.644750][ T834] libceph: connect (1)[c::]:6789 error -101 [ 153.646434][ T834] libceph: mon0 (1)[c::]:6789 connect error [ 153.741855][ T35] libceph: connect (1)[c::]:6789 error -101 [ 153.744051][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 153.932860][ T45] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.151654][ T834] libceph: connect (1)[c::]:6789 error -101 [ 154.153393][ T834] libceph: mon0 (1)[c::]:6789 connect error [ 154.261775][ T35] libceph: connect (1)[c::]:6789 error -101 [ 154.263989][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 154.463215][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 154.463227][ T39] audit: type=1326 audit(2000000081.724:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11367 comm="syz.6.1383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f10585d29 code=0x7fc00000 [ 154.681986][T11356] ceph: No mds server is up or the cluster is laggy [ 154.682440][T11360] ceph: No mds server is up or the cluster is laggy [ 154.777941][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 154.781343][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 154.784476][T11380] netlink: 'syz.2.1386': attribute type 11 has an invalid length. [ 154.843081][ T5949] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.847271][ T5949] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.854208][ T5949] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.856764][ T5949] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.860022][ T5949] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.863077][ T5949] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.954930][T11384] chnl_net:caif_netlink_parms(): no params data found [ 154.967818][T11401] xt_l2tp: v2 sid > 0xffff: 150994944 [ 155.016490][T11384] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.018459][T11384] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.020432][T11384] bridge_slave_0: entered allmulticast mode [ 155.023010][T11384] bridge_slave_0: entered promiscuous mode [ 155.025473][T11384] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.027452][T11384] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.029405][T11384] bridge_slave_1: entered allmulticast mode [ 155.031657][T11384] bridge_slave_1: entered promiscuous mode [ 155.066033][T11384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.069534][T11384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.122874][T11384] team0: Port device team_slave_0 added [ 155.130134][T11384] team0: Port device team_slave_1 added [ 155.156585][T11384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.158429][T11384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.165968][T11384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.170189][T11384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.173253][T11384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.180112][T11384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.204050][T11384] hsr_slave_0: entered promiscuous mode [ 155.206011][T11384] hsr_slave_1: entered promiscuous mode [ 155.208341][T11384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.210413][T11384] Cannot create hsr debugfs directory [ 155.915984][ T45] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.918091][T11421] netlink: 'syz.2.1394': attribute type 10 has an invalid length. [ 155.929020][T11421] veth0_vlan: left promiscuous mode [ 155.932168][T11421] veth0_vlan: entered promiscuous mode [ 155.934012][T11421] [ 155.934681][T11421] ============================================ [ 155.936289][T11421] WARNING: possible recursive locking detected [ 155.937911][T11421] 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 Not tainted [ 155.940288][T11421] -------------------------------------------- [ 155.942653][T11421] syz.2.1394/11421 is trying to acquire lock: [ 155.944220][T11421] ffff8880240f8e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_device_event+0x2c7/0x770 [ 155.946778][T11421] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 155.946778][T11421] but task is already holding lock: [ 155.948925][T11421] ffff8880240f8e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_add_slave+0x9c/0x20e0 [ 155.951567][T11421] [ 155.951567][T11421] other info that might help us debug this: [ 155.953612][T11421] Possible unsafe locking scenario: [ 155.953612][T11421] [ 155.955521][T11421] CPU0 [ 155.956387][T11421] ---- [ 155.957203][T11421] lock(team->team_lock_key#6); [ 155.958506][T11421] lock(team->team_lock_key#6); [ 155.959799][T11421] [ 155.959799][T11421] *** DEADLOCK *** [ 155.959799][T11421] [ 155.961913][T11421] May be due to missing lock nesting notation [ 155.961913][T11421] [ 155.964019][T11421] 2 locks held by syz.2.1394/11421: [ 155.965350][T11421] #0: ffffffff8fedc488 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5d9/0x1d60 [ 155.967682][T11421] #1: ffff8880240f8e00 (team->team_lock_key#6){+.+.}-{4:4}, at: team_add_slave+0x9c/0x20e0 [ 155.970309][T11421] [ 155.970309][T11421] stack backtrace: [ 155.971825][T11421] CPU: 3 UID: 0 PID: 11421 Comm: syz.2.1394 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 155.974712][T11421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.977474][T11421] Call Trace: [ 155.978360][T11421] [ 155.979152][T11421] dump_stack_lvl+0x116/0x1f0 [ 155.980406][T11421] print_deadlock_bug+0x2e3/0x410 [ 155.981753][T11421] __lock_acquire+0x2117/0x3c40 [ 155.983027][T11421] ? __pfx___lock_acquire+0x10/0x10 [ 155.984393][T11421] ? find_held_lock+0x2d/0x110 [ 155.985659][T11421] lock_acquire.part.0+0x11b/0x380 [ 155.986976][T11421] ? team_device_event+0x2c7/0x770 [ 155.988353][T11421] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 155.989839][T11421] ? rcu_is_watching+0x12/0xc0 [ 155.991118][T11421] ? trace_lock_acquire+0x14e/0x1f0 [ 155.992503][T11421] ? team_device_event+0x2c7/0x770 [ 155.993861][T11421] ? lock_acquire+0x2f/0xb0 [ 155.995065][T11421] ? team_device_event+0x2c7/0x770 [ 155.996413][T11421] __mutex_lock+0x19b/0xa60 [ 155.997620][T11421] ? team_device_event+0x2c7/0x770 [ 155.999022][T11421] ? team_device_event+0x2c7/0x770 [ 156.000401][T11421] ? __pfx___mutex_lock+0x10/0x10 [ 156.001754][T11421] ? team_device_event+0x2c7/0x770 [ 156.003123][T11421] team_device_event+0x2c7/0x770 [ 156.004447][T11421] notifier_call_chain+0xb7/0x410 [ 156.005803][T11421] ? __pfx_team_device_event+0x10/0x10 [ 156.007241][T11421] call_netdevice_notifiers_info+0xbe/0x140 [ 156.008817][T11421] __dev_notify_flags+0x12d/0x2e0 [ 156.010155][T11421] ? __pfx___dev_notify_flags+0x10/0x10 [ 156.011641][T11421] ? __pfx___dev_change_flags+0x10/0x10 [ 156.013083][T11421] ? __nla_put+0x27/0x40 [ 156.014198][T11421] dev_change_flags+0x10c/0x160 [ 156.015495][T11421] vlan_device_event+0xdfc/0x2120 [ 156.016822][T11421] ? __pfx_phonet_device_notify+0x10/0x10 [ 156.018329][T11421] ? __pfx_vlan_device_event+0x10/0x10 [ 156.019759][T11421] ? __pfx_br_device_event+0x10/0x10 [ 156.021168][T11421] ? raw_notifier+0xa4/0x860 [ 156.022374][T11421] ? isotp_notifier+0xa4/0x6d0 [ 156.023617][T11421] ? bcm_notifier+0xa8/0x820 [ 156.024827][T11421] ? cgw_notifier+0xa2/0x390 [ 156.026033][T11421] notifier_call_chain+0xb7/0x410 [ 156.027360][T11421] ? __pfx_vlan_device_event+0x10/0x10 [ 156.028778][T11421] call_netdevice_notifiers_info+0xbe/0x140 [ 156.030287][T11421] dev_open+0x144/0x160 [ 156.031335][T11421] ? __pfx_dev_open+0x10/0x10 [ 156.032554][T11421] ? __kmalloc_noprof+0x23b/0x510 [ 156.033849][T11421] team_add_slave+0xacd/0x20e0 [ 156.035067][T11421] ? __pfx_team_add_slave+0x10/0x10 [ 156.036396][T11421] ? __pfx_validate_linkmsg+0x10/0x10 [ 156.037750][T11421] ? __pfx_team_add_slave+0x10/0x10 [ 156.039058][T11421] do_set_master+0x1bc/0x230 [ 156.040230][T11421] do_setlink.constprop.0+0xb60/0x3f70 [ 156.041629][T11421] ? __pfx_mark_lock+0x10/0x10 [ 156.042857][T11421] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 156.044353][T11421] ? find_held_lock+0x2d/0x110 [ 156.045583][T11421] ? __mutex_lock+0x2c6/0xa60 [ 156.046787][T11421] ? __pfx_lock_release+0x10/0x10 [ 156.048054][T11421] ? mark_held_locks+0x9f/0xe0 [ 156.049305][T11421] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 156.050808][T11421] ? lockdep_hardirqs_on+0x7c/0x110 [ 156.052098][T11421] ? __mutex_lock+0x1cc/0xa60 [ 156.053280][T11421] ? rtnl_newlink+0x5d9/0x1d60 [ 156.054518][T11421] ? __pfx___mutex_lock+0x10/0x10 [ 156.055775][T11421] ? __pfx___nla_validate_parse+0x10/0x10 [ 156.057213][T11421] ? cap_capable+0x1cf/0x240 [ 156.058387][T11421] rtnl_newlink+0x1303/0x1d60 [ 156.059615][T11421] ? __pfx_rtnl_newlink+0x10/0x10 [ 156.060939][T11421] ? __pfx___lock_acquire+0x10/0x10 [ 156.062269][T11421] ? cred_has_capability.isra.0+0x192/0x2f0 [ 156.063806][T11421] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 156.065444][T11421] ? find_held_lock+0x2d/0x110 [ 156.066729][T11421] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 156.068077][T11421] ? __pfx_lock_release+0x10/0x10 [ 156.069408][T11421] ? trace_lock_acquire+0x14e/0x1f0 [ 156.070828][T11421] ? __pfx_rtnl_newlink+0x10/0x10 [ 156.072171][T11421] rtnetlink_rcv_msg+0x95b/0xea0 [ 156.073472][T11421] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.074919][T11421] netlink_rcv_skb+0x16b/0x440 [ 156.076170][T11421] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 156.077607][T11421] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 156.079008][T11421] ? netlink_deliver_tap+0x1ae/0xd30 [ 156.080426][T11421] netlink_unicast+0x53c/0x7f0 [ 156.081708][T11421] ? __pfx_netlink_unicast+0x10/0x10 [ 156.083114][T11421] netlink_sendmsg+0x8b8/0xd70 [ 156.084389][T11421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.085804][T11421] ____sys_sendmsg+0xaaf/0xc90 [ 156.087108][T11421] ? copy_msghdr_from_user+0x10b/0x160 [ 156.088572][T11421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.089981][T11421] ___sys_sendmsg+0x135/0x1e0 [ 156.091248][T11421] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.092617][T11421] ? __pfx_lock_release+0x10/0x10 [ 156.093951][T11421] ? trace_lock_acquire+0x14e/0x1f0 [ 156.095345][T11421] ? __fget_files+0x206/0x3a0 [ 156.096615][T11421] __sys_sendmsg+0x16e/0x220 [ 156.097846][T11421] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.099198][T11421] ? __x64_sys_futex+0x1e1/0x4c0 [ 156.100537][T11421] do_syscall_64+0xcd/0x250 [ 156.101749][T11421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.103305][T11421] RIP: 0033:0x7fe2f6f85d29 [ 156.104486][T11421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.109510][T11421] RSP: 002b:00007fe2f7e1c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.111701][T11421] RAX: ffffffffffffffda RBX: 00007fe2f7176080 RCX: 00007fe2f6f85d29 [ 156.113776][T11421] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000005 [ 156.115828][T11421] RBP: 00007fe2f7001a20 R08: 0000000000000000 R09: 0000000000000000 [ 156.117891][T11421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.119942][T11421] R13: 0000000000000000 R14: 00007fe2f7176080 R15: 00007ffe90ae2068 [ 156.122014][T11421] [ 156.931005][ T5949] Bluetooth: hci1: command tx timeout [ 159.010950][ T5949] Bluetooth: hci1: command tx timeout [ 161.090917][ T5949] Bluetooth: hci1: command tx timeout [ 163.170563][ T5949] Bluetooth: hci1: command tx timeout VM DIAGNOSIS: 05:03:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000000145e14 RBX=0000000000000000 RCX=ffffffff8b2936e9 RDX=ffffed100d4c6fee RSI=ffffffff8bd1e7e0 RDI=ffffffff817095a9 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f3090 R15=0000000000000000 RIP=ffffffff8b294acf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe2f7e1cd58 CR3=0000000053ad0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe90ae2400 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2f70029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2f70029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2f70029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2f70029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2f7002a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe2f7002b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000080 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000000 RBX=ffffc90004d47130 RCX=ffffffff90fe2182 RDX=1ffff920009a8e28 RSI=ffffc90004d47bc8 RDI=ffffc90004d47130 RBP=ffffc90004d47bc8 RSP=ffffc90004d47080 R8 =0000000000000001 R9 =ffffffff90fe2186 R10=ffffc90004d47130 R11=000000000000e3cd R12=0000000000000008 R13=ffffc90004d47140 R14=ffffc90004d47138 R15=ffffc90004d40000 RIP=ffffffff81493d63 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe1a42a7d60 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe1a374b6a3 00007fe1a374b6a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef38c9f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556465ba5e 0000555564656130 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555645d1a0c 00005555645d1620 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01800301800418a0 0300080018900303 ffffffff04188003 0008000410002010 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100018800401 0000040806060154 8e00080018e00300 100018d00303ffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0418c0030210 0018b0035c100001 9003941200008002 00000010000a000e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000206145e 0000003648f8a10b 9fcc723fa72ab6e6 888100100000002e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c08000300040180 0301800418a00300 080018900303ffff ffff041880030008 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff88806a83ebc0 RCX=1ffff1100d507f12 RDX=000000244ed0c850 RSI=ffffffff8bd1e7e0 RDI=ffff88806a83f890 RBP=ffff88806a83f880 RSP=ffffc90000658d10 R8 =0000000000000000 R9 =fffffbfff20be612 R10=ffffffff905f3097 R11=ffffffff816bc3ce R12=000000244ecceb5e R13=ffff888030a5c8e8 R14=ffffc90000658da0 R15=0000000000000007 RIP=ffffffff816a6bbf RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe2f7ca56c0 CR3=0000000052800000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99bd6029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99bd6029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99bd6029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99bd6029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99bd602a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99bd602b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99bd74b488 00007f99bd74b480 00007f99bd74b478 00007f99bd74b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99be2ad100 00007f99bd74b440 00007f99bd740004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99bd74b498 00007f99bd74b490 00007f99bd74b488 00007f99bd74b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851b91a5 RDI=ffffffff9ab0ec20 RBP=ffffffff9ab0ebe0 RSP=ffffc900038f63a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff851b9140 R15=0000000000000000 RIP=ffffffff851b91cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe2f7e1c6c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c33a3ee CR3=00000000525d0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5bc5eb049ab7a099 b3755d3f8966e0cc ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7b83e5485087979 3d32caa31c844a88 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3982302fc83058a0 af16bbce47e33a04 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cb625afb874b523c 96e326d022915c6a ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000028c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a02081a380bec44a 0000005f0000005f ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 033c137c81c39c54 8b58bcce89496218 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 802c1ed20000005f 2e6f69cf6ed7eb11 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000005f 006a9f6100000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b3ea35be6e0b080b 10c7c5eb5add2886 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c1ea49a27df85cbd 5439997a1e2adf55 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99bd74b488 00007f99bd74b480 00007f99bd74b478 00007f99bd74b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99be2ad100 00007f99bd74b440 00007f99bd74b458 00007f99bd74b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f99bd74b498 00007f99bd74b490 00007f99bd74b488 00007f99bd74b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000