last executing test programs: 5.462050284s ago: executing program 0 (id=900): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x20000886, &(0x7f0000000780)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) dup2(r1, r2) 4.493489605s ago: executing program 0 (id=910): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000a80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000640)={'trans=virtio,', {[{@dfltuid}]}}) (async) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x1818082, &(0x7f0000000000)={[{@uid={'uid', 0x3d, r2}}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 4.423474936s ago: executing program 0 (id=912): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) accept4$inet(r2, 0x0, &(0x7f0000000300), 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000600)="752d32a482ae6ce5f57a4dd002b394971ab0faea5dbbc585266a1a48358c06d7f447db723590d445e7c454eca6aae9258bc9d5268601bacdd1ee2c62710411efabebe049f98862bc1b6a62d63c0357f28eff980205562dbf54b81a47aeed94fccfe35c988d148ec2a5633d647cb556a06fc886e5da3c83", 0x77}, {&(0x7f0000000780)="82db38e87775549cd52a44b3b3eadd2437eb99d1baacad8c9d91cc247c4ed9c80beb0a173230ce53148a61c7cbddca9b15d914c3999e64d75ba92cc5b43b50e2cd96a45c4fc1", 0x46}, {&(0x7f0000000700)="aa7df2fe9e612f6ffe2288c7cfd9fd9145736848d9e8dbb2fda21f0d54f4060cac0ebd5b3cb894efbb6b1401b039ba1167de0256be70736719589aeeb781d50008f7b80acc66c7b6a3a107f6bb4977253e9bd16d9535dc43f7ac5fcce867f33390847e8411a8aa6838", 0x69}, {&(0x7f0000001100)="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", 0xff}, {&(0x7f0000000ac0)="b3e7771e6afa1df9f064fbcc842a2f88112c4bcde36e452bee320ddf6ed2123101e0c09ad203050569bf7ac06789a390f3cfa20823a79be8ca0f99b01204a54f28aab9a30d8dc3f7e56e4d763c0e4502ae8a1b614159a750488c4f0e22ecff96112e5f2654c887c44b69365a0176b04dba31a02e7037f5e72309abe1b15fcaf82c2cc75f8fc872e97f229d069ec6d7731ab4483ecb11eecdb3c4ccc0d0ab18af4d5a49754aeb59b9f460c4cdd00c26c09f", 0xb1}, {&(0x7f0000000f00)="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", 0x1c4}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f0000000b80)="a4665e568e8a08bb8c96e72489dba139a424f0e3f356764e28a69cca70102a3135d580e45f1ee5773475505a46a841d38d507a1fadaa16a1afde3fcf30d8a52e7870e0cedd7e8765550754216258767d2f0bd32998cf43", 0x57}, {&(0x7f0000000c80)="2998a7ae4df4b386d1f616233a173238f0df5d9fd5246b19bb9b4b736d9f6e54c5c5354ff2ea8a5e304178a462b3b5ff1bb52577c4fbda09c240b3d278a77fa91dfb0defe56c9f815b677faf917441fc3d35d8b62f3c33c01401430ca0e64177c6d00207535850acbc887a42c54759199257fa7deb48faa9a4be65d1a72ad23245bca521d629088af09fc33ea5a00e256f872cf10bf1ba0b85b7d29a7ecdbe0fcdc1517b66fd58c0a5b73fc56f0327a3", 0xb0}], 0x9}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @broadcast, @empty, @broadcast, @rand_addr=0x64010100}}}}, &(0x7f0000000200)={0x1, 0x2, [0x622, 0xf, 0x1ed, 0xc13]}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIGETBSZ(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) ioctl$FICLONE(r5, 0x40049409, r5) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010029bd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="1507000002000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) setreuid(0x0, 0xee00) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000280), &(0x7f0000000700)=r7}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) close(0x3) signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x4]}, 0x8, 0x80000) timer_create(0x0, 0x0, &(0x7f0000000000)) 3.989465414s ago: executing program 0 (id=915): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_usb_disconnect(r1) 3.192345088s ago: executing program 2 (id=925): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000180)={0x30}, 0x30) (async) write$UHID_INPUT(r2, &(0x7f0000001900)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b098b9b711b5d38101b080d29308f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x892}}, 0x1006) (async) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x10}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0xfffffffffffffe6d}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c811}, 0x20000000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000ed9f5cbc90c7468ed9c21e5e46cb410572d0e8afad2294413a0a7871639725a1faa53be4e12d86690843e1dc4ff4bd63aefc771db3540f46b31bf3", @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="08002600b4090000"], 0x24}}, 0x0) 2.91816166s ago: executing program 2 (id=928): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@deltfilter={0x34, 0x2d, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x10}, {0x14, 0xffff}, {0xa, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004010}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r7, 0x0, 0x14, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0xd7, 0x4, 0x2, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x20, 0xffff, 0x9}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x2f0, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x17c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '!/%!\\\xe1.-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7d5d7de4}]}, {0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '&\\&@2-^+]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '$!%)-.v\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_MASK={0x47, 0x5, "7ace58874f2d7446cbfbea55f6d64a612a5fb791c7a634fa84daf4e62ff56d26611df7fdb1fa457b71a820f2a8ed9f45943ffae342c601bca5d2e1619bdc18a51d0626"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xf8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0x68, 0x4, "c283e2add01cfa95a7cbbc262efa8f0e161a011ce9dd9eca1fd0d98f3f91d675b958cab503b9783579f8395a5c78e457ab45169e5eec429eb5afb06681b0b9d5c543149dda519576266127b152f37941ba42f51293ba84c22566b32ac8fa2fc53e18cb95"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2a, 0x4, "d19705f3832cfdb4c460123bcae3f918e540d9b71a08151321e27aad6a47e8771c5207ae0a8d"}, @ETHTOOL_A_BITSET_MASK={0x52, 0x5, "ade30ae998d5022da98dae8b5ac813d4580c8a5607ac9423f17f867ce3d86363c54466cb1fb89c9f4384a01c54dfb86c3c254e567943ca8d86da1670e06b98be9b0b2828caf440d93e9b29dd4a4e"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x40004}, 0x4040811) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) 2.917717048s ago: executing program 3 (id=929): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x204, &(0x7f0000000380)={0x0, 0xf67e, 0xd0, 0x0, 0x1df}, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="5a9a3882c17024d6f21ef0e9c452bc244abaf6c29c8a0715b60e5611ab0889ff6f607e8b92b6a8fc57433b7ee003294705f93d9cfe923657294329a59331ac16cf7905739ab4985d149101ebeaada4f3b230e5639adea1c8dff83e8a65bd095d1108beb3919ff995bd1bec54fbd6f940187e23bb6b5f07f9897c0874974554be0399574f07a58be8998fbfd360d28dfb637dec5e622673a1b01859086a154fe12c7a217976ee8cb2dd0b79732bae6ad2a768d4d600bc48f40d7b724a2787a0def170143befc4a4e3b50604bad93d4686"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) syz_io_uring_setup(0x204, &(0x7f0000000380)={0x0, 0xf67e, 0xd0, 0x0, 0x1df}, 0x0, 0x0) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="5a9a3882c17024d6f21ef0e9c452bc244abaf6c29c8a0715b60e5611ab0889ff6f607e8b92b6a8fc57433b7ee003294705f93d9cfe923657294329a59331ac16cf7905739ab4985d149101ebeaada4f3b230e5639adea1c8dff83e8a65bd095d1108beb3919ff995bd1bec54fbd6f940187e23bb6b5f07f9897c0874974554be0399574f07a58be8998fbfd360d28dfb637dec5e622673a1b01859086a154fe12c7a217976ee8cb2dd0b79732bae6ad2a768d4d600bc48f40d7b724a2787a0def170143befc4a4e3b50604bad93d4686"], 0x10) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) (async) 2.648005919s ago: executing program 3 (id=930): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x81901) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000001c0)={0x1, 0x3000, 0x6, 0x6, 0xd}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000140)={'nat\x00', 0x0, [0x5, 0x26, 0x7, 0x6, 0x800]}, &(0x7f0000000000)=0x54) 2.631795619s ago: executing program 2 (id=931): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="14419e5465f0006fc8afa8e488a8", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4, 0x0, @remote, 0xb}, 0x1c) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100020000000007010000f8ffffffb702000005000000b70300000000000085000000730000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'tunl0\x00', r2, 0x80, 0x20, 0x6, 0x9, {{0x16, 0x4, 0x2, 0x5, 0x58, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @loopback, {[@rr={0x7, 0x1f, 0x37, [@multicast1, @broadcast, @rand_addr=0x64010102, @local, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x39}]}, @timestamp={0x44, 0x8, 0x15, 0x0, 0x8, [0x1]}, @rr={0x7, 0x1b, 0xa9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000600)={&(0x7f0000000440), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040000}, 0x4006001) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r3, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000300)={'erspan0\x00', r2, 0x8000, 0x20, 0x7, 0x800, {{0x31, 0x4, 0x0, 0x15, 0xc4, 0x64, 0x0, 0x81, 0x29, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0x4c, 0x45, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x1}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@remote, 0x4}, {@loopback, 0x8}, {@rand_addr=0x64010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x738}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @rr={0x7, 0xf, 0xb0, [@loopback, @rand_addr=0x64010100, @broadcast]}, @generic={0x86, 0x11, "e71ce40b5350a1670dab0426fc8353"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x13, 0x1, [{0x0, 0x3, "98"}, {0x0, 0xa, "3d3a2a4d09172c90"}]}, @rr={0x7, 0x2b, 0x7d, [@dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010102, @broadcast, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2, @multicast1, @private=0xa010100, @private=0xa010101, @rand_addr=0x64010102]}]}}}}}) fchdir(r8) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xc0, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xebc}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xc546}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0xc0}, 0x1, 0x0, 0x0, 0x200040c1}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) 2.527088648s ago: executing program 2 (id=932): socket$kcm(0x10, 0x2, 0x0) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_TYPE={{0xee}, 0x2}}}, 0x7) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@any, 0x4}}}, 0xd) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000740)) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40286608, 0x0) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) setreuid(0xee01, 0x0) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setreuid(0x0, r2) write$binfmt_script(r1, &(0x7f0000020180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r3, &(0x7f0000000900)="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", 0x45c) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x45c], 0x0, 0x0, 0x1, 0x1, r0}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r5, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "060059", 0x2}}}, 0xd) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e0021001000000002800000121f", 0x2e}], 0x1}, 0x0) 2.41017916s ago: executing program 3 (id=933): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000000000000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000009000000000000000000000009000000000000000000000009010000"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x3, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.302684413s ago: executing program 3 (id=934): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00070d000000000000020007000000", @ANYRES32=r2, @ANYBLOB="800087000a00020001"], 0x28}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e21, 0x3ffffc, @ipv4={'\x00', '\xff\xff', @empty}, 0x4000}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0x0, 0x178, 0xffffffff, 0x0, 0x2a0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@unspec=@state={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00'}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@addrtype={{0x30}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) write(r4, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f0016040000", 0x24) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x2, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r10, {0xffff, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) readv(r4, &(0x7f0000000680)=[{&(0x7f0000000300)=""/215, 0xd7}], 0x1) sendto$inet6(r0, &(0x7f0000000180)="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", 0x178, 0x4000004, 0x0, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x1de, 0x0, 0x0) r12 = syz_usb_connect(0x2, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRESHEX], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r12) bind$bt_hci(r11, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) syz_usb_control_io$hid(r12, &(0x7f0000000b00)={0x24, &(0x7f0000000900)={0x40, 0x31, 0xd3, {0xd3, 0xd, "299617e3679173a8ff052ddc91ea930755f57736d9e84ddfc9f4f3b6663cede5e49005afb27981952ed82c10a581cb4d2d193d9b879c68a2250d08f36507cc43563c0e006e293b96d42f8d91b9034e2f2736e80485138c16c90b53eb260ec5f36de5aa1bc7531eb4a65ab5256d9048d17fce0a3c71671034115741790165d802535b48c3108f942a849a1d23250e99bd15d6dbb458a0929b2a7347219224e19cd032741a8d85394bbdd14937e83dfdf9c7f39b55d227415c10c5adc1ef3857337c2470eb499fb8065ad2aee2f8bb88988f"}}, &(0x7f0000000a00)={0x0, 0x3, 0x58, @string={0x58, 0x3, "a765bf8ce6c448db6b8a0ef186945845c4bc980a5bd7b76908b0de3741de3c65e52074dfc2cfeb95933dcb6a509cb92e6a434e6e48931560b37bf6666ad6b0e1d59c62ac472c748cbdb86c3ad24bfd24279b62797bb0"}}, &(0x7f0000000a80)=ANY=[@ANYBLOB="0022160000000720eb2aa19b8eaf9182c1f2c2ff5c8773c87459f5e6"], &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x10, 0x1, {0x22, 0x9ce}}}}, &(0x7f0000000d40)={0x2c, &(0x7f0000000b40)={0x40, 0x16, 0xd4, "1aab7e90706dd0b2c9292bc3bef5e0fce56b9bd8d4367d92b740f7a7dc441b444acd9ee3ba2f8a7688a34318fde9fa03587eb66e3867525be1eda076fdb5d126d7741946f2d8de6223fa5463fb4b94a0fa623aa2fb48de4328c4f06cf0e138aada4610ff2764f03f69ecfcb93243992134d991f0dda0b6547caba0cc555b13726a6f5851d7a6082026691c3816bac1183231bb7bb1052195807ffd890fac442961ae234dfed06dc03fa55e704e1bb7123f9bb5b39e5803284f91e6422caac3d51f52422584509e3a88eaef3c035b07f312979ceb"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d80)=ANY=[@ANYBLOB="200125000087569a0ba7eaf854b9af4146101c8721f3745bbf516499360053ec6cba00e30000000000000000000000000000857f7806b5716620fff448dcf1342dbfae2d809c855fcc92152c65c1e934e37d8e7d01886c10ed12b12fa144303556b4856bd492984baf4e994d3834395c6ba0b47dff16bd10648dcd6802d5a74608520e7077f67813bb61f94de988ad6847ed2365c79443c2dd923cabd5389b3cb86c53cb6e05f8010ca0973eb0446238931599860027df883098cbae15a8a7a93e2d52f037be384db63918b64d900e1a8a75fa4e4ebc2a51000009b303d5b743f2a773ec32e385959108bd793146c9a7"], &(0x7f0000000d00)={0x20, 0x3, 0x1, 0x4}}) write(r11, &(0x7f00000000c0)="4b0003000080", 0x6) 2.301926652s ago: executing program 2 (id=935): nanosleep(&(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000040)) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@ctrl_frame=@rts={{}, {0x6}}, 0x10) clock_nanosleep(0x6, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)) timer_delete(0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)={0x2, 'vcan0\x00', {0x10}, 0x9}) socket$packet(0x11, 0x2, 0x300) connect$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @short={0x2, 0x0, 0xfff3}}, 0x14) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x8c6, @rand_addr=' \x01\x00', 0xffffffff}, 0x1c) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1a, 0x2}, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000340)={{r2, r3+60000000}, {r4, r5+60000000}}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0xf}, @device_a, @device_b, @random="8eb1766554c7", {0x8, 0x43f}, @value=@ver_80211n={0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x1, @val={0x8c, 0x18, {0x433, "1ddbfce75375", @long="8ea6785f398682b1560745e3c1820fc8"}}}, 0x38) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) tkill(r7, 0x1b) r8 = epoll_create(0x9) epoll_pwait2(r8, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000500), &(0x7f0000000540)={[0x2]}, 0x8) r9 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580), 0x80, 0x0) syz_80211_inject_frame(&(0x7f00000005c0)=@broadcast, &(0x7f0000000600)=@mgmt_frame=@beacon={{{}, {0x2893}, @device_a, @device_a, @initial, {0x0, 0x8}}, 0x39, @default, 0x80, @val={0x0, 0xf, @random="7799347a961ab3563a4434b638d045"}, @val={0x1, 0x4, [{0x6c}, {0x5, 0x1}, {0x9}, {0x1b}]}, @val={0x3, 0x1, 0x4}, @val={0x4, 0x6, {0xa, 0x6, 0x976d, 0xd0a8}}, @val={0x6, 0x2, 0xf2}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xfb, 0x5, 0x8}}, @val={0x2d, 0x1a, {0x8000, 0x3, 0x0, 0x0, {0x9a, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x300, 0x4, 0x77}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x24}}, @val={0x76, 0x6, {0x6, 0xa, 0x15, 0xe}}, [{0xdd, 0x80, "89c73641ce71ad62d01988cfe1f504a41d5de0ffac324386666efc49471be506b663fe170981118885ad302cd399026816b49fee4eb8bc463dce9baf0f70969480d9783bc600dae76edaf65a7e2f363ae726e755bb5be5133da0f1f153b4008441d03bfb89757dd32de33ec8bb122469ec8c921e8dad1e70374b4937622eb447"}, {0xdd, 0x2f, "45c7c1ae046b3662d8ece91fd5dc053293034fc6053243e681157411d2859238193ddd7b4e9c778da1e571ba85283d"}, {0xdd, 0x1f, "c1c88569b3fefad45cb3cddf9b4d0bbe200a7afd0c7515310dc428e4a20e52"}, {0xdd, 0xba, "b5bd361a8b4b77823d9bbf52c3d36a8ec88cadaa0e31e79f592ca65e005081a6d45671a128125d7592973c1bb5de242efb2330921108cdadbcf614ee127eb172787b6f09a0d63563e7811954b5e2ffe302d2226da7e4704b2b75089e273179cbc8822fd4a96226cafe894ffee4a7af10f97ae8a7ed7e49e72fc9fa6f93ee1c3b1f1b2413c6a051d299926599083bc41c4b66f07b00a55abddee32b25cae9447409e0a7bb994b2a6f41a2cf5e1e29ca39159a130090cc9ab4abf3"}, {0xdd, 0xdd, "7dd2f4010098c4f7cc3e5be10e4705750849c7bd9095e5231b44ee50a5e7cf87947108b3e82a2aa9048eeec3dc6f40fbd893c94b5e4cc31f9041673a2daede2859dffd996476c0d8b35594c31595e4dc09f45e5264575fc6ea3792e189c6185f89f9f99c49b23d1114ab8c6a05c94ba6b653604dc40dea206c368e4faa767120fa0191da2c619ba60ecb3cbde0c63e1876198b03bc220c081de007b9d4a144ea448df9e1965f5f94aafa4efab57c1df6060f32783b74f2161ae181f2aae39270ddb149cbc626510ac9ece471f7003c3e049c7f0c38a4f4f4bca5f5eff6"}, {0xdd, 0x81, "3a7f4a82ba6339c21b8a607341e2432f4bfaccf9b710d38e334e9286f542beacd6e61076e435c20f00622f34856ccdad2c58b963dcf6f2422702794207f59dc1d1ee5c055d818739d71bc83020e1e259fd1245359726f3e6bc29f7da4f6e8ecea8f7030096a784254d44886fa8e1f4a5ea07e468d0c74facc2d22b71c84729e82c"}, {0xdd, 0xf0, "954ad8753afb091774c1e0563d05479513d6542283ce31b5a7eef578677ed9ca01c307be7c1f036debf8812f41057b8fe7a277ccb4d3f4215fef19f655bccf4839d6ae577f9f1da27927651854d355868e416d917b49547aa0137c6e78ace488e9dd9d04739073192fc69870950bad6dfb59375ad777a9db86e512baef7714fa7b4145ca291f8c76094a2747451d811da5270a1d3267b6d67cdf0a74a917c24f298bba36b4fe4c1bd6f426655ce7e08b5e8b234059e892f82ff4ffbcca6877d487f0bd9393f99b0ba8a0fed885ed39c3f5d8822c9394f9ac5b46abcb9d711c25dc52c03e102c6a9aaaae8cb799e10c9e"}]}, 0x469) syz_io_uring_setup(0x6d15, &(0x7f0000000a80)={0x0, 0xe62e, 0x8000, 0x2, 0xf3, 0x0, r9}, &(0x7f0000000b00), &(0x7f0000000b40)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000b80)={0x90000000}) r10 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r10, &(0x7f0000001200)=[{{&(0x7f0000000bc0)=@hci, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/239, 0xef}], 0x1, &(0x7f0000000d80)=""/159, 0x9f}, 0x401}, {{&(0x7f0000000e40)=@phonet, 0x80, &(0x7f0000001100)=[{&(0x7f0000000ec0)=""/250, 0xfa}, {&(0x7f0000000fc0)=""/212, 0xd4}, {&(0x7f00000010c0)=""/59, 0x3b}], 0x3, &(0x7f0000001140)=""/143, 0x8f}, 0xb}], 0x2, 0x40000122, 0x0) sendmsg$AUDIT_USER_TTY(r6, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0xc0, 0x464, 0x100, 0x70bd29, 0x25dfdbff, "95ec2d3d5989f86c3303584a74b0787ce47a3889e9927d0de63857d070f4262f9b9db7f4083b8e9e76f7c66a6ad435b0e1f38da2b35fdc695b639da957f1d3d5a738b4ef3675e8ce3e3ac93142e6dbf3d7e71e6460bb30568f8e208df9ea0cadb4450f83596c91e19d46870d7b5056b3243d81a84ce17cb2b791c50f3160df9bea2fdd88520212106f0be2f3a76fa855543cfc4eba5f51e02cf8f1e544a47e780fd6949829f5684ae8c5f459e383768d", ["", "", ""]}, 0xc0}, 0x1, 0x0, 0x0, 0x84}, 0x4004440) socket$isdn_base(0x22, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000001400), 0x802, 0x0) syz_80211_inject_frame(&(0x7f0000001440), &(0x7f0000001480)=@data_frame={@a_msdu=@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1}, {}, @broadcast, @device_a, @random="27237b6d44ef", {0x6, 0x5cc}, @device_a, @value={0x7, 0x1, 0x2, 0x1, 0x2}}, @a_msdu=[{@broadcast, @broadcast, 0x5, "6dca841b99"}, {@device_a, @device_b, 0x89, "b9935fefe795f1d9be895403ceb74a7d34b67cf616002146e7666ae78a08a24105cad699876be1ba70095c2e2f147b5a50efc38eda48da092fb5b33dad3bb7a33258a216f13569ec43f790096a5072d2ad44f717ecaa31ce0553922082e7ebecd8a80467713f5ab088742d0f125eec7d706b20ec6cc9ffe048283ab2bfb00bad89a3c2f7e6a048e27d"}, {@device_a, @broadcast, 0x1000, "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"}, {@device_b, @broadcast, 0xf9, "ddc22bcbdc7e4d3b9c7616dbd4733636f86a25cead382804e8975a5c89f86eae568fc7c4ae9826fe3dfe81a8981c2faeaebf7ccff903e4b8bce3e5aa410e8623bbf0527f53d9cb8894ce20bdbd63542c7a8d91b00b162bf7fed8322e54cf38588715c4a4c0dcbe1b1e6f8d948e569a884e62e40ec43fca077aae1ae306b9ca0257256828fb800f4b6b465b1a67537106a47b5c98e2563944dbbcc9fdffcce01590c37b834d4afc7a5e56a39288101d7dcfc720f587ee98406fe134dfb8693a55f24f5fcf64137573c9186c3c59d20d85a07f7082ff4083703fb4cf5510ca57be12a37a86e6dab4188f5cffd21facb1de7a3b50eb1fa4ddda57"}, {@device_a, @device_a, 0x45, "fddec0e454ef4d33f71134f273072c96d1b938fb421fcac5c0d8bcacbfc9232397c69af5ce8b9fa304517c729ffbcff09cdeb9c0391f4786b82a44351023338b082b42ec32"}, {@broadcast, @device_a, 0x2a, "c68160feaeb44ba75eac7c22abe2f1f6658bb693933765ec011d2e72ca6f3bde202789b64c33857e8ab4"}, {@device_a, @device_b, 0xc0, "dd6dc2d9a6441cc5954d6d879ed169ab128ae114cba8c020a816b78af90243d7ba62a0ad95e30b583f49263121d527199f6f96f04fe8516d1aed45f27122f586249da90142d63d94286329a1242d527e19b8c0b56a766de06120670b5da27469cd63ba793f81f4ef4d599a7fd280cf745d290cbc6906bb7e09ba0b9153b43c8a70b1753505f4a293b5bc7d3f3846e2cd3f0f4820782d81bbff07eb072a81d742838ac1703538f99c7ab5b3fb199f5301cf929be0f5f6c74d9cfb9c60902cbc35"}, {@broadcast, @device_b, 0xa7, "90813743c3486b2d60b0ad790c88f4003d205880778095f110c0d5ecf123aa2fc33a8ecc448520d747fe292f2d92dba19267066d9ce46b43fd2002973fc7b781e54044a234d41a7b272552e6dbabc05a4edc38f544fc2d036dca6c8fca46c4fa76eacea7cbd2a8dd78551da343f66ecd53a06fad6bc3b4c2d1e13d45966e6e227e3d20a573745ab716e2d14440bc198ed765942fb1b28b8532f2914820326fd04d7d26aa63788c"}]}, 0x13f8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000002880)={0x40000000}) 1.347688819s ago: executing program 1 (id=936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x20, 0x19, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x20000084) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='v7\x00', 0x208000, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000000c0)={0x8, 0x1, 0x3, "87229037025a4754aa9610c55ae1146151bb00", 0x38414762}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) mlockall(0x6) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x43, @mcast1}, 0x1c) recvmmsg(r5, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000280)=""/4096, 0x1000, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) 1.183096958s ago: executing program 1 (id=937): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'tunl0\x00', 0x1}, 0x18) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x204000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=0x1, 0xe, 0x1, 0x7fff, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r4, r5, 0x25, 0x0, @val=@tcx={@void, @value=r0, @void, @void, r6}}, 0x1c) 1.037914847s ago: executing program 1 (id=938): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0xf7fe, 0x7ff, {0x0, 0x1}, {0x61, 0x1000}, @cond=[{0x7, 0x218, 0x7, 0x0, 0x2, 0x3}, {0x8, 0x5, 0x1, 0x52, 0x9, 0xd}]}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x18, 0x8dffffff, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000002000000000000000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f005"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180610027628cf9ef083611c9f68e2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101800, 0xa0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@private0, 0x6e}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f0000000080)="77722889006a29aecf5bccd0d1296a375799648ee2f547e7f2c5ad9cd7cf14c761c82e62aa29063ee983a71945fee133d187837ff542d80f30f1eb1a8b331e56e909c17bfef45f9f3d44a96faf5d8c34f249740b9af69c1a4cc95d1bf7b87467e5454ea012c98ee269fa968321c29fb614fbbd53eb8edddc64ec6d7fb2876c00226010d3e51d036c60c578b517e7c19a7c407f3b0fc6d836955fbce2c65e7b521102c2a4ff5d4b78f1d8b21364792129c1721470993d9369973d9d4e9bfa4baa5eacefb8205862d12bcfd528e3", 0xcd) 940.600752ms ago: executing program 1 (id=939): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x4000}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000514842e2000000860000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000514842e2000000860000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='sys_enter\x00', r3}, 0x10) timer_gettime(0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) acct(&(0x7f00000001c0)='./file0\x00') (async) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 861.646211ms ago: executing program 0 (id=940): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000000000000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040008000c00018006000600800a0000100002800c001700050001"], 0x38}}, 0xc000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) 851.31473ms ago: executing program 2 (id=941): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000c00)="99e7ee2c7cda0800000000008864", 0xe}, {&(0x7f0000000540)="2442cee26868", 0x6}], 0x2) 542.960486ms ago: executing program 1 (id=942): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000a00)) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00003a00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0x5e, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) r3 = dup(r1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400dfff19000100000000000000000002000000000000000000000008000200ac1414aa"], 0x24}}, 0x2000c044) ioctl$KVM_SET_MSRS(r3, 0x4018aee2, &(0x7f0000000040)=ANY=[]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000a00)) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022e2731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181224175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329924b8b39e6dc4b2077a4b9645d8e0a445ae2c7be53d66007d491ab0f6851a2cc1cffeed15f586a035c1a2888c56f43"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00003a00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0x5e, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) (async) dup(r1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400dfff19000100000000000000000002000000000000000000000008000200ac1414aa"], 0x24}}, 0x2000c044) (async) ioctl$KVM_SET_MSRS(r3, 0x4018aee2, &(0x7f0000000040)=ANY=[]) (async) 542.422406ms ago: executing program 3 (id=943): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) r1 = dup(r0) (async) write$binfmt_script(r0, &(0x7f0000000280), 0xc7) (async) r2 = fanotify_init(0x200, 0x40400) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) fanotify_mark(r2, 0x1, 0x4800107b, r1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 308.641235ms ago: executing program 1 (id=944): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) clock_adjtime(0x0, &(0x7f0000000100)={0x7ff, 0x7a6, 0x7fff, 0x2, 0x0, 0x5, 0xfe, 0x2, 0x0, 0xa00, 0x3f, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc0f, 0x0, 0x0, 0x3fd, 0x2, 0x4000ea, 0x8000000000000001, 0x0, 0x200080000000}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000140), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000440)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487391e09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b042a753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e2d", 0xc1, r2) (async) r4 = add_key$user(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000340)='\x00', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r3, r4}, &(0x7f0000000240)=""/249, 0xf9, &(0x7f0000000400)={&(0x7f0000000100)={'sha224-ssse3\x00'}}) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xf8c4e}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x4c}}, 0x0) 306.471932ms ago: executing program 3 (id=945): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x7, 0xfe000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000580)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000200)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r6, 0x0, 0x3, 0x7ff, 0xffffffff, 0x800, {0xac7b, 0x1, 0x3, 0xf433, 0x4, 0x4, 0x1, 0x5, 0x412f, 0x2, 0x1000, 0x536b, 0xb2be, 0x2, "fe1d00003413000000000000000caa0000000900000000002db40979b54ed000"}}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9c}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r8 = accept$unix(r7, &(0x7f0000000640), &(0x7f00000006c0)=0x6e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000780)={0x2, 'syz_tun\x00', {0x3}, 0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c0000000206010100000000005b52000000000005000100070000000900020073797a30000000000c0007800500150003000000050005000a000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r10 = memfd_secret(0x0) unlinkat(r7, &(0x7f0000000000)='./file1\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000b00000007000000000000100c00000007000000000000080500000009000000200000050000000000610061302e5f61303000"], &(0x7f0000000240)=""/156, 0x47, 0x9c, 0x1, 0x9, 0x0, @void, @value}, 0x28) r11 = syz_io_uring_setup(0x6c94, &(0x7f0000000380)={0x0, 0x2000c, 0x13290, 0x1, 0x224, 0x0, r10}, &(0x7f0000000440)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) io_uring_enter(r11, 0x1, 0x0, 0x1, 0x0, 0x1000000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r7, &(0x7f0000000480)="4a171eb9b6ec840a27622986384651f562729d2f2990735bde148d4754868c4140a847ee27044388e5233cd288e2e1acb694ea6f9bc653e5ff6968db4cd261be394fb155977d52eaff", &(0x7f0000000500)=""/99}, 0x20) clock_nanosleep(0x2, 0x0, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r7, 0xc058534b, &(0x7f0000000000)={0xc, 0x8a, 0x0, 0x1, 0xe, 0x293}) 0s ago: executing program 0 (id=946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x4, 0x5) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) accept4$packet(r2, 0x0, &(0x7f0000000200), 0x95a78765a34e50c) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x38) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x600}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd3e, 0x4c, 0x209, 0x1, 0xffffffffffffffff, 0x9805, '\x00', 0x0, r3, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffe65) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) close(r0) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r9, 0x0) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344}, 0x46ce, 0x5) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, r10, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406df312c500000000000109022400010000a00009040000010300000009210000fd012281633f6581030004000000"], 0x0) (async) sendto(r0, &(0x7f00000003c0)="50cdb8016b6ed810c8f6cd2fd69dbef6b4d9037eb3fcdf7a68f70aa8d7eddc7d482dfe50caa12f7906c3e6a8a2d777ba027afdd587a3fe6ad334907089d93783e9e91a3e9ece42eb51167ba8958900994c7275d1a48007440f7d50cc39db161e866df9d89954ffc67ee382c41a25eb3b671a", 0x72, 0x800, &(0x7f0000000440)=@isdn={0x22, 0xa, 0x2, 0x9, 0x3}, 0x80) kernel console output (not intermixed with test programs): 50:50:50:50 [ 46.690007][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.706974][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.709307][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.717394][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.719753][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.742705][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.746267][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.772318][ T6025] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 46.804620][ T6028] Zero length message leads to an empty skb [ 46.823552][ T6030] fuse: Bad value for 'fd' [ 46.825791][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 46.939176][ T6044] trusted_key: syz.0.12 sent an empty control message without MSG_MORE. [ 46.951694][ T6050] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 46.992261][ T6054] syz.0.13: attempt to access beyond end of device [ 46.992261][ T6054] loop0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 46.997075][ T6054] MINIX-fs: unable to read superblock [ 47.023847][ T6058] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 47.054700][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 47.148725][ T6068] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.204398][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 47.210535][ T25] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 47.214970][ T25] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 47.218678][ T25] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 47.223303][ T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.226096][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.228553][ T25] usb 6-1: Product: Ñ… [ 47.229925][ T25] usb 6-1: Manufacturer: å§êº î„¼éµ“äºå¯±ã¢„鿱㿎ç·è¾¥ì›—â–⌮ꖥ褋땾澩餂窈å®çƒƒé™±ã€›æ¶¸è¶Œá¡ [ 47.233499][ T25] usb 6-1: SerialNumber: ᗺ鉊႒糲욻閛ì•å±–醅ïºê…»ç’®â©§àºå££î‡‹ï˜´é¥¼ï€™æ¡¨ì´²ã·–ášà æº–朋놮⅌ꩧ㙻䚴閹哅ꛛ媘픠ﳨǖ田픨젭ʽ᧑꙽å¡ã¡˜æ€˜é‘±â„®ì¹§ë“Ÿéƒ‚ì˜ç³¢ê¾®é¨Žï•’뾼鎗輊쥪崌薻䄸쪲焣ᚇ竸å½à¾¦ë€…ꓗ즌麸뇯ᔗÖ儑⨀䅑ꕬ礠哫酅蜜斀撔éŠãŸâŠ‘æˆ‚ï€ [ 47.241136][ T6071] ata1.00: invalid cdb length 6 [ 47.279897][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'. [ 47.361581][ T6079] netlink: 276 bytes leftover after parsing attributes in process `syz.2.20'. [ 47.486082][ T6084] mmap: syz.2.22 (6084) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.617526][ T6084] tmpfs: Cannot change global quota limit on remount [ 47.621907][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 47.805465][ T6088] netlink: 'syz.3.23': attribute type 1 has an invalid length. [ 47.883295][ T6064] overlayfs: statfs failed on './file0' [ 48.010950][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 48.023070][ T6100] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.26'. [ 48.315369][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 48.328917][ T6115] netlink: 64 bytes leftover after parsing attributes in process `syz.3.31'. [ 48.348528][ T64] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 48.377952][ T6118] can0: slcan on ptm0. [ 48.384906][ T6118] JFS: charset not found [ 48.407688][ T6122] 9pnet_fd: p9_fd_create_tcp (6122): problem connecting socket to 127.0.0.1 [ 48.445195][ T6116] can0 (unregistered): slcan off ptm0. [ 48.584514][ T5950] Bluetooth: hci0: command tx timeout [ 48.584537][ T5950] Bluetooth: hci2: command tx timeout [ 48.584552][ T5950] Bluetooth: hci3: command tx timeout [ 48.584906][ T5950] Bluetooth: hci1: command tx timeout [ 48.676275][ T6144] tap0: tun_chr_ioctl cmd 1074025673 [ 48.678417][ T6143] tap0: tun_chr_ioctl cmd 1074025677 [ 48.680152][ T6143] tap0: linktype set to 772 [ 48.813279][ T6152] process 'syz.2.39' launched './file0' with NULL argv: empty string added [ 48.859673][ T5953] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 48.861317][ T6152] IPv6: sit1: Disabled Multicast RS [ 48.865373][ T6152] sit1: entered allmulticast mode [ 48.897743][ T6158] SELinux: Context system_u:object_r:tape_device_t:s0 is not valid (left unmapped). [ 48.917579][ T6162] mkiss: ax0: crc mode is auto. [ 48.940661][ T6165] syz_tun: entered promiscuous mode [ 48.966969][ T6168] syz_tun: left promiscuous mode [ 48.986297][ T6171] tmpfs: User quota inode hardlimit too large. [ 49.100055][ T6180] netlink: 68 bytes leftover after parsing attributes in process `syz.2.48'. [ 49.134978][ T6182] netlink: 140 bytes leftover after parsing attributes in process `syz.2.49'. [ 49.135449][ T39] kauditd_printk_skb: 153 callbacks suppressed [ 49.135462][ T39] audit: type=1400 audit(1738520624.015:268): avc: denied { create } for pid=6181 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.161251][ T39] audit: type=1400 audit(1738520624.035:269): avc: denied { unmount } for pid=5944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 49.274368][ T6006] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.381650][ T6196] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.415346][ T39] audit: type=1400 audit(1738520624.295:270): avc: denied { ioctl } for pid=6195 comm="syz.3.53" path="socket:[9087]" dev="sockfs" ino=9087 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.434357][ T6006] usb 5-1: Using ep0 maxpacket: 8 [ 49.437788][ T6006] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 49.440972][ T6006] usb 5-1: config 179 has no interface number 0 [ 49.443465][ T6006] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 49.447566][ T6006] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 49.451458][ T6006] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 49.455916][ T6006] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 49.460264][ T6006] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 49.466263][ T6006] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 49.470006][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.476513][ T6176] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 49.572774][ T39] audit: type=1400 audit(1738520624.445:271): avc: denied { create } for pid=6198 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.583212][ T6199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6199 comm=syz.3.54 [ 49.589463][ T39] audit: type=1400 audit(1738520624.465:272): avc: denied { getopt } for pid=6198 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.595214][ T39] audit: type=1400 audit(1738520624.465:273): avc: denied { bind } for pid=6198 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.636454][ T39] audit: type=1400 audit(1738520624.515:274): avc: denied { setopt } for pid=6204 comm="syz.3.55" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.642693][ T6205] syz_tun: entered allmulticast mode [ 49.646877][ T6204] syz_tun: left allmulticast mode [ 49.672636][ T39] audit: type=1400 audit(1738520624.545:275): avc: denied { read } for pid=6206 comm="syz.3.56" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.675632][ T6209] input: syz0 as /devices/virtual/input/input5 [ 49.679476][ T39] audit: type=1400 audit(1738520624.545:276): avc: denied { open } for pid=6206 comm="syz.3.56" path="/dev/uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.683807][ T6209] input: failed to attach handler leds to device input5, error: -6 [ 49.690195][ T39] audit: type=1400 audit(1738520624.545:277): avc: denied { write } for pid=6206 comm="syz.3.56" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.693872][ T6006] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input6 [ 49.752481][ T6211] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 49.826147][ T25] cdc_ncm 6-1:1.0: bind() failure [ 49.829541][ T25] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 49.831633][ T25] cdc_ncm 6-1:1.1: bind() failure [ 49.835105][ T25] usb 6-1: USB disconnect, device number 2 [ 49.999258][ T5986] usb 5-1: USB disconnect, device number 2 [ 49.999320][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 50.004347][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 50.004594][ T5986] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 50.104132][ T6242] netlink: 'syz.2.67': attribute type 1 has an invalid length. [ 50.142799][ T6247] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 50.345668][ T6261] netlink: zone id is out of range [ 50.347844][ T6261] netlink: zone id is out of range [ 50.533248][ T6288] program syz.2.83 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.644599][ T6307] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 50.649945][ T6309] No source specified [ 50.655251][ T6307] CIFS mount error: No usable UNC path provided in device string! [ 50.655251][ T6307] [ 50.657539][ T6309] No source specified [ 50.660254][ T6307] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 50.664358][ T5953] Bluetooth: hci1: command tx timeout [ 50.665216][ T5950] Bluetooth: hci3: command tx timeout [ 50.666344][ T5948] Bluetooth: hci2: command tx timeout [ 50.666374][ T5957] Bluetooth: hci0: command tx timeout [ 50.744619][ T57] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 50.806759][ T6063] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 50.894499][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 50.898328][ T57] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 50.901603][ T57] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 50.905591][ T57] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 50.909601][ T57] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 50.913561][ T57] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 50.918308][ T57] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 50.921882][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.954542][ T6063] usb 6-1: Using ep0 maxpacket: 16 [ 50.957695][ T6063] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.960645][ T6063] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 50.963209][ T6063] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.968669][ T6063] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.971314][ T6063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.973621][ T6063] usb 6-1: Product: syz [ 50.975372][ T6063] usb 6-1: Manufacturer: syz [ 50.976745][ T6063] usb 6-1: SerialNumber: syz [ 50.981046][ T6063] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 50.983050][ T6063] cdc_ncm 6-1:1.0: bind() failure [ 51.128363][ T57] usb 8-1: usb_control_msg returned -32 [ 51.130113][ T57] usbtmc 8-1:16.0: can't read capabilities [ 51.188025][ T1327] usb 6-1: USB disconnect, device number 3 [ 51.209166][ T6329] sp0: Synchronizing with TNC [ 51.354717][ T6336] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 51.874944][ T6376] netlink: 'syz.1.108': attribute type 16 has an invalid length. [ 51.877502][ T6376] netlink: 'syz.1.108': attribute type 17 has an invalid length. [ 51.887490][ T6376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.930206][ T6379] __nla_validate_parse: 9 callbacks suppressed [ 51.930217][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 51.937673][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 51.943123][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 51.950130][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 51.959333][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 51.964464][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 51.970014][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 51.976182][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 51.982504][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 51.991198][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 52.000718][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.004153][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.064824][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.072705][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.116872][ T6379] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.119619][ T6379] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.122319][ T6379] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.125506][ T6379] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.153681][ T6389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.531166][ T6398] syz.0.116 (6398) used greatest stack depth: 21008 bytes left [ 52.734595][ T5948] Bluetooth: hci3: command tx timeout [ 52.736284][ T5948] Bluetooth: hci1: command tx timeout [ 52.737893][ T5948] Bluetooth: hci0: command tx timeout [ 52.856762][ T6427] erspan0: entered promiscuous mode [ 52.859655][ T6427] gretap0: entered promiscuous mode [ 52.939279][ T6427] block device autoloading is deprecated and will be removed. [ 52.948338][ T6427] syz.0.126: attempt to access beyond end of device [ 52.948338][ T6427] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 52.992559][ T6431] xt_hashlimit: max too large, truncated to 1048576 [ 52.995750][ T6431] xt_bpf: check failed: parse error [ 53.190365][ T6442] xt_ipcomp: unknown flags 12 [ 53.353271][ T6453] kvm: pic: non byte write [ 53.516626][ T25] usb 8-1: USB disconnect, device number 3 [ 53.587449][ T6463] IPv6: addrconf: prefix option has invalid lifetime [ 53.593854][ T6463] tipc: Started in network mode [ 53.596273][ T6463] tipc: Node identity e0000002, cluster identity 4711 [ 53.598326][ T6463] tipc: Enabling of bearer rejected, failed to enable media [ 53.769183][ T6483] ======================================================= [ 53.769183][ T6483] WARNING: The mand mount option has been deprecated and [ 53.769183][ T6483] and is ignored by this kernel. Remove the mand [ 53.769183][ T6483] option from the mount to silence this warning. [ 53.769183][ T6483] ======================================================= [ 54.022249][ T6504] warning: `syz.3.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 54.032978][ T6501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6501 comm=syz.1.154 [ 54.110623][ T6509] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 54.146434][ T6509] netlink: 'syz.3.157': attribute type 10 has an invalid length. [ 54.148838][ T6509] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 54.148944][ T6513] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 54.153641][ T6509] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 54.158350][ T6513] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 54.185140][ T6515] qrtr: Invalid version 19 [ 54.185169][ T39] kauditd_printk_skb: 878 callbacks suppressed [ 54.185182][ T39] audit: type=1400 audit(1738520629.065:1156): avc: denied { write } for pid=6514 comm="syz.3.159" name="qrtr-tun" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.214764][ T39] audit: type=1400 audit(1738520629.085:1157): avc: denied { shutdown } for pid=6512 comm="syz.1.158" laddr=172.20.20.170 lport=48251 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.411802][ T6533] raw_sendmsg: syz.1.163 forgot to set AF_INET. Fix it! [ 54.418104][ T39] audit: type=1400 audit(1738520629.295:1158): avc: denied { bind } for pid=6529 comm="syz.2.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.480906][ T39] audit: type=1400 audit(1738520629.355:1159): avc: denied { read } for pid=6529 comm="syz.2.162" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.488828][ T39] audit: type=1400 audit(1738520629.365:1160): avc: denied { open } for pid=6529 comm="syz.2.162" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.498561][ T39] audit: type=1400 audit(1738520629.375:1161): avc: denied { ioctl } for pid=6529 comm="syz.2.162" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.684716][ T39] audit: type=1400 audit(1738520629.565:1162): avc: denied { write } for pid=6544 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 54.692175][ T6545] vxcan2: entered promiscuous mode [ 54.826909][ T39] audit: type=1400 audit(1738520629.705:1163): avc: denied { bind } for pid=6552 comm="syz.3.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.912694][ T39] audit: type=1400 audit(1738520629.785:1164): avc: denied { write } for pid=6555 comm="syz.0.170" path="socket:[13449]" dev="sockfs" ino=13449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.912881][ T6556] Bluetooth: MGMT ver 1.23 [ 54.985444][ T39] audit: type=1400 audit(1738520629.865:1165): avc: denied { write } for pid=6557 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.052154][ T6563] tipc: Started in network mode [ 55.052186][ T6563] tipc: Node identity ac1414bb, cluster identity 4711 [ 55.052468][ T6563] tipc: Enabling of bearer rejected, failed to enable media [ 55.197507][ T6574] syzkaller1: entered promiscuous mode [ 55.199188][ T6574] syzkaller1: entered allmulticast mode [ 55.202974][ T6580] ipt_REJECT: ECHOREPLY no longer supported. [ 55.776862][ T5950] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 55.780254][ T5950] Bluetooth: hci2: Injecting HCI hardware error event [ 55.782802][ T5950] Bluetooth: hci2: hardware error 0x00 [ 56.639974][ T6628] qnx6: unable to set blocksize [ 56.824938][ T5986] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 56.886809][ T6640] misc userio: Invalid payload size [ 56.917448][ T6642] use of bytesused == 0 is deprecated and will be removed in the future, [ 56.921048][ T6642] use the actual size instead. [ 56.944203][ T6642] batman_adv: batadv0: Adding interface: dummy0 [ 56.947726][ T6642] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.956108][ T6642] batman_adv: batadv0: Interface activated: dummy0 [ 56.964333][ T5986] usb 8-1: device descriptor read/64, error -71 [ 57.030886][ T6645] netlink: 'syz.2.196': attribute type 11 has an invalid length. [ 57.206917][ T5986] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 57.344604][ T5986] usb 8-1: device descriptor read/64, error -71 [ 57.454581][ T5986] usb usb8-port1: attempt power cycle [ 57.583239][ T6662] cgroup: No subsys list or none specified [ 57.806184][ T5986] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 57.827025][ T5986] usb 8-1: device descriptor read/8, error -71 [ 57.929027][ T6686] __nla_validate_parse: 68 callbacks suppressed [ 57.929037][ T6686] netlink: 44 bytes leftover after parsing attributes in process `syz.0.208'. [ 57.934834][ T6686] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551397) [ 57.939043][ T6686] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 57.983373][ T6688] netlink: 'syz.0.209': attribute type 64 has an invalid length. [ 57.985747][ T6688] netlink: 'syz.0.209': attribute type 4 has an invalid length. [ 57.988008][ T6688] netlink: 152 bytes leftover after parsing attributes in process `syz.0.209'. [ 58.012355][ T6688] netlink: 77 bytes leftover after parsing attributes in process `syz.0.209'. [ 58.047850][ T5987] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 58.064444][ T5986] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 58.082537][ T57] libceph: connect (1)[a::]:6789 error -101 [ 58.085108][ T57] libceph: mon0 (1)[a::]:6789 connect error [ 58.087178][ T5986] usb 8-1: device descriptor read/8, error -71 [ 58.195234][ T5986] usb usb8-port1: unable to enumerate USB device [ 58.206405][ T5987] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 58.209858][ T5987] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 58.213942][ T5987] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 58.218144][ T5987] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 58.222258][ T5987] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 58.228640][ T5987] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 58.231824][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 58.234784][ T5987] usb 6-1: Product: syz [ 58.236091][ T5987] usb 6-1: Manufacturer: syz [ 58.242235][ T5987] cdc_wdm 6-1:1.0: skipping garbage [ 58.243835][ T5987] cdc_wdm 6-1:1.0: skipping garbage [ 58.246383][ T5987] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 58.248162][ T5987] cdc_wdm 6-1:1.0: Unknown control protocol [ 58.346006][ T5987] libceph: connect (1)[a::]:6789 error -101 [ 58.348483][ T5987] libceph: mon0 (1)[a::]:6789 connect error [ 58.494349][ T5950] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 58.647656][ T9] usb 6-1: USB disconnect, device number 4 [ 58.825227][ T6690] ceph: No mds server is up or the cluster is laggy [ 58.874658][ T6694] openvswitch: netlink: IP tunnel dst address not specified [ 58.876421][ T6696] syz.0.210: attempt to access beyond end of device [ 58.876421][ T6696] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.880756][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 58.882597][ T6696] unable to read squashfs_super_block [ 58.885185][ T6696] syz.0.210: attempt to access beyond end of device [ 58.885185][ T6696] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.888894][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 58.890695][ T6696] unable to read squashfs_super_block [ 58.894744][ T6696] syz.0.210: attempt to access beyond end of device [ 58.894744][ T6696] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.899676][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 58.902232][ T6696] unable to read squashfs_super_block [ 58.905824][ T6696] syz.0.210: attempt to access beyond end of device [ 58.905824][ T6696] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.909682][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 58.911512][ T6696] unable to read squashfs_super_block [ 58.914080][ T6696] syz.0.210: attempt to access beyond end of device [ 58.914080][ T6696] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.918041][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 58.919914][ T6696] unable to read squashfs_super_block [ 58.923260][ T6696] syz.0.210: attempt to access beyond end of device [ 58.923260][ T6696] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.928563][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 58.930532][ T6696] unable to read squashfs_super_block [ 58.933440][ T6696] syz.0.210: attempt to access beyond end of device [ 58.933440][ T6696] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.938306][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 58.940852][ T6696] unable to read squashfs_super_block [ 58.944908][ T6696] syz.0.210: attempt to access beyond end of device [ 58.944908][ T6696] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.949690][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 58.951840][ T6696] unable to read squashfs_super_block [ 58.958163][ T6696] syz.0.210: attempt to access beyond end of device [ 58.958163][ T6696] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.963181][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 58.965897][ T6696] unable to read squashfs_super_block [ 58.972939][ T6696] syz.0.210: attempt to access beyond end of device [ 58.972939][ T6696] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 58.978512][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 58.980881][ T6696] unable to read squashfs_super_block [ 58.985204][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 58.987452][ T6696] unable to read squashfs_super_block [ 58.994916][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 58.997225][ T6696] unable to read squashfs_super_block [ 59.005120][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.006935][ T6696] unable to read squashfs_super_block [ 59.014699][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.016549][ T6696] unable to read squashfs_super_block [ 59.026224][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.027896][ T6696] unable to read squashfs_super_block [ 59.035072][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.037723][ T6696] unable to read squashfs_super_block [ 59.040861][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.043305][ T6696] unable to read squashfs_super_block [ 59.047547][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.049272][ T6696] unable to read squashfs_super_block [ 59.054775][ T5950] Bluetooth: hci4: command 0x1003 tx timeout [ 59.054993][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 59.060070][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.062499][ T6696] unable to read squashfs_super_block [ 59.068061][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.070496][ T6696] unable to read squashfs_super_block [ 59.075401][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.077945][ T6696] unable to read squashfs_super_block [ 59.084918][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.087538][ T6696] unable to read squashfs_super_block [ 59.090228][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.092621][ T6696] unable to read squashfs_super_block [ 59.095887][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.097715][ T6696] unable to read squashfs_super_block [ 59.103866][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.106551][ T6696] unable to read squashfs_super_block [ 59.109125][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.110778][ T6696] unable to read squashfs_super_block [ 59.113920][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.114683][ T6698] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 59.116762][ T6696] unable to read squashfs_super_block [ 59.119233][ T6698] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 59.124114][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.126412][ T6698] vhci_hcd vhci_hcd.0: Device attached [ 59.126755][ T6696] unable to read squashfs_super_block [ 59.131618][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.133961][ T6696] unable to read squashfs_super_block [ 59.137596][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.140056][ T6696] unable to read squashfs_super_block [ 59.152099][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.155046][ T6696] unable to read squashfs_super_block [ 59.160899][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.163444][ T6696] unable to read squashfs_super_block [ 59.180964][ T6696] SQUASHFS error: Failed to read block 0x0: -5 [ 59.183357][ T6696] unable to read squashfs_super_block [ 59.306012][ T57] vhci_hcd: vhci_device speed not set [ 59.323667][ T6699] vhci_hcd: connection closed [ 59.325717][ T46] vhci_hcd: stop threads [ 59.329679][ T46] vhci_hcd: release socket [ 59.331625][ T46] vhci_hcd: disconnect device [ 59.347069][ T39] kauditd_printk_skb: 32 callbacks suppressed [ 59.347079][ T39] audit: type=1400 audit(1738520634.225:1198): avc: denied { append } for pid=6712 comm="syz.1.216" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.359211][ T39] audit: type=1400 audit(1738520634.225:1199): avc: denied { watch } for pid=6712 comm="syz.1.216" path="/50" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.365896][ T39] audit: type=1400 audit(1738520634.225:1200): avc: denied { watch_sb watch_reads } for pid=6712 comm="syz.1.216" path="/50" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.372408][ T39] audit: type=1400 audit(1738520634.225:1201): avc: denied { watch_mount } for pid=6712 comm="syz.1.216" path="/50" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.374796][ T57] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 59.381795][ T57] usb 41-1: enqueue for inactive port 0 [ 59.411317][ T39] audit: type=1400 audit(1738520634.285:1202): avc: denied { unmount } for pid=5956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.433207][ T39] audit: type=1400 audit(1738520634.305:1203): avc: denied { lock } for pid=6719 comm="syz.1.219" path="socket:[13128]" dev="sockfs" ino=13128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 59.454684][ T57] vhci_hcd: vhci_device speed not set [ 59.618947][ T39] audit: type=1400 audit(1738520634.495:1204): avc: denied { setattr } for pid=6727 comm="syz.0.222" path="/dev/hidraw0" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 59.619100][ T6728] netlink: 52 bytes leftover after parsing attributes in process `syz.0.222'. [ 59.635219][ T6728] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 59.694940][ T5948] Bluetooth: unknown link type 133 [ 59.697073][ T5948] Bluetooth: hci0: connection err: -111 [ 59.721848][ T39] audit: type=1400 audit(1738520634.595:1205): avc: denied { append } for pid=6740 comm="syz.3.226" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 59.749705][ T39] audit: type=1400 audit(1738520634.625:1206): avc: denied { create } for pid=6742 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 59.757199][ T39] audit: type=1400 audit(1738520634.625:1207): avc: denied { create } for pid=6742 comm="syz.0.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.774821][ T6746] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 59.860257][ T6743] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 59.969225][ T6763] gfs2: not a GFS2 filesystem [ 59.999939][ T6765] syz.3.235 (6765): attempted to duplicate a private mapping with mremap. This is not supported. [ 60.027709][ T6765] overlayfs: maximum fs stacking depth exceeded [ 60.323179][ T6802] netlink: 32 bytes leftover after parsing attributes in process `syz.0.244'. [ 60.447905][ T6814] xt_hashlimit: size too large, truncated to 1048576 [ 60.589327][ T6816] autofs: Unknown parameter 'tap0 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 60.589327][ T6816] ip_vti0 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 60.589327][ T6816] ip6_vti0 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 60.589327][ T6816] ip6tnl0 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 60.589327][ T6816] ip6gre0 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 60.589327][ T6816] ip6gretap0 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 60.589327][ T6816] erspan0 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 60.589327][ T6816] bond0 001414AC 00000000 0001 0 0 0 00FFFFFF 0 0 0 [ 60.747553][ T6845] random: crng reseeded on system resumption [ 60.876305][ T6849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.257'. [ 60.922864][ T6845] capability: warning: `syz.3.256' uses 32-bit capabilities (legacy support in use) [ 60.945766][ T6852] tmpfs: Unknown parameter 'm' [ 60.989369][ T6857] netlink: 'syz.2.260': attribute type 4 has an invalid length. [ 61.167373][ T6866] loop9: detected capacity change from 0 to 4 [ 61.172175][ T6866] Dev loop9: unable to read RDB block 4 [ 61.173932][ T6866] loop9: unable to read partition table [ 61.175786][ T6866] loop9: partition table beyond EOD, truncated [ 61.178321][ T6866] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 61.262177][ T6868] (syz.0.262,6868,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 61.265818][ T6868] (syz.0.262,6868,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 61.323050][ T6875] netlink: 80 bytes leftover after parsing attributes in process `syz.2.266'. [ 61.334202][ T6875] netlink: 80 bytes leftover after parsing attributes in process `syz.2.266'. [ 61.339031][ T6875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=6875 comm=syz.2.266 [ 61.341063][ T6877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'. [ 61.344179][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz.2.266'. [ 61.349982][ T6875] netlink: 'syz.2.266': attribute type 7 has an invalid length. [ 61.353288][ T6875] netlink: 'syz.2.266': attribute type 8 has an invalid length. [ 61.471994][ T6893] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 61.512787][ T6898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.517868][ T6898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.563209][ T6903] overlayfs: workdir and upperdir must reside under the same mount [ 61.814618][ T6920] capability: warning: `syz.1.284' uses deprecated v2 capabilities in a way that may be insecure [ 62.016653][ T6943] loop6: detected capacity change from 0 to 524287999 [ 62.027456][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.137123][ T6961] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 62.139161][ T6961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.141407][ T6961] vhci_hcd vhci_hcd.0: Device attached [ 62.147461][ T6961] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 62.149496][ T6961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.149529][ T6961] vhci_hcd vhci_hcd.0: Device attached [ 62.149666][ T6966] vhci_hcd: connection closed [ 62.149739][ T6962] vhci_hcd: connection closed [ 62.150863][ T42] vhci_hcd: stop threads [ 62.150885][ T42] vhci_hcd: release socket [ 62.150897][ T42] vhci_hcd: disconnect device [ 62.162025][ T42] vhci_hcd: stop threads [ 62.163802][ T42] vhci_hcd: release socket [ 62.166995][ T42] vhci_hcd: disconnect device [ 62.321665][ T6984] program syz.1.306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.578947][ T7012] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 62.585449][ T7012] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 62.589977][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.593194][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.600232][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.604100][ T7012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.608108][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.611117][ T7012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.616353][ T7012] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 62.623398][ T7012] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 62.655841][ T12] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 62.729659][ T7026] tipc: Started in network mode [ 62.734208][ T7026] tipc: Node identity 4, cluster identity 4711 [ 62.736498][ T7026] tipc: Node number set to 4 [ 62.772055][ T7036] futex_wake_op: syz.0.322 tries to shift op by 32; fix this program [ 62.795939][ T7034] evm: overlay not supported [ 62.999440][ T7048] tmpfs: Bad value for 'mpol' [ 63.427012][ T7051] syz.1.327 uses obsolete (PF_INET,SOCK_PACKET) [ 63.636659][ T7058] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 63.662397][ T7058] CUSE: unknown device info "" [ 63.664004][ T7058] CUSE: unknown device info "/dev/cuse" [ 63.666144][ T7058] CUSE: unknown device info "À" [ 63.674350][ T7058] CUSE: zero length info key specified [ 63.699538][ T7062] trusted_key: encrypted_key: master key parameter '' is invalid [ 63.704618][ T7063] trusted_key: encrypted_key: master key parameter '' is invalid [ 63.876489][ T7079] xt_hashlimit: invalid interval [ 64.031766][ T7091] __nla_validate_parse: 4 callbacks suppressed [ 64.031777][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 64.037122][ T7091] netlink: 'syz.0.337': attribute type 3 has an invalid length. [ 64.189901][ T7095] sctp: [Deprecated]: syz.0.339 (pid 7095) Use of int in max_burst socket option. [ 64.189901][ T7095] Use struct sctp_assoc_value instead [ 64.354726][ T39] kauditd_printk_skb: 28835 callbacks suppressed [ 64.354737][ T39] audit: type=1326 audit(64.246:30043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5582d8cda9 code=0x50000 [ 64.363406][ T39] audit: type=1326 audit(64.246:30044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5582d8cda9 code=0x50000 [ 64.370122][ T39] audit: type=1326 audit(64.246:30045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5582d8cda9 code=0x50000 [ 64.378479][ T39] audit: type=1326 audit(64.246:30046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5582d8cda9 code=0x50000 [ 64.386570][ T39] audit: type=1326 audit(64.246:30047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5582d8cda9 code=0x50000 [ 64.393278][ T39] audit: type=1326 audit(64.246:30048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5582d8cda9 code=0x50000 [ 64.400468][ T39] audit: type=1326 audit(64.246:30049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5582d8cda9 code=0x50000 [ 64.406978][ T39] audit: type=1326 audit(64.246:30050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5582d8cda9 code=0x50000 [ 64.414473][ T39] audit: type=1326 audit(64.246:30051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5582d8cda9 code=0x50000 [ 64.425802][ T39] audit: type=1326 audit(64.246:30052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz.3.308" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5582d8cda9 code=0x50000 [ 64.780729][ T7128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7128 comm=syz.2.351 [ 64.786514][ T7125] nfs4: Unknown parameter 'use' [ 64.864856][ T7132] XFS (nullb0): Invalid superblock magic number [ 64.999417][ T7157] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.359'. [ 65.002148][ T7157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.007278][ T7157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.045888][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 65.058200][ T7162] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 65.062311][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.065142][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.075992][ T42] bond0: (slave bridge0): link status definitely down, disabling slave [ 65.113171][ T7164] serio: Serial port ptm0 [ 65.178912][ T7169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.363'. [ 65.206944][ T7170] FAT-fs (nullb0): bogus number of reserved sectors [ 65.209234][ T7170] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 65.293660][ T7173] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 65.296189][ T7173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 65.397940][ T7180] overlay: Unknown parameter ' [ 65.397940][ T7180] time [ 65.397940][ T7180] string [ 65.397940][ T7180] statistic [ 65.397940][ T7180] state [ 65.397940][ T7180] realm [ 65.397940][ T7180] rateest [ 65.397940][ T7180] quota [ 65.397940][ T7180] pkttype [ 65.397940][ T7180] physdev [ 65.397940][ T7180] cgroup [ 65.397940][ T7180] cgroup [ 65.397940][ T7180] cgroup [ 65.397940][ T7180] owner [ 65.397940][ T7180] nfacct [ 65.397940][ T7180] nfacct [ 65.397940][ T7180] mac [ 65.397940][ T7180] limit [ 65.397940][ T7180] ipvs [ 65.397940][ T7180] helper [ 65.397940][ T7180] devgroup [ 65.397940][ T7180] cpu [ 65.397940][ T7180] conntrack [ 65.397940][ T7180] conntrack [ 65.397940][ T7180] conntrack [ 65.397940][ T7180] connlabel [ 65.397940][ T7180] connbytes [ 65.397940][ T7180] comment [ 65.397940][ T7180] bpf [ 65.397940][ T7180] bpf [ 65.397940][ T7180] connmark [ 65.397940][ T7180] mark [ 65.397940][ T7180] rpfilter [ 65.397940][ T7180] ah [ 65.397940][ T7180] tcpmss [ 65.397940][ T7180] socket [ 65.397940][ T7180] socket [ 65.397940][ T7180] socket [ 65.397940][ T7180] socket [ 65.397940][ T7180] sctp [ 65.397940][ T7180] recent [ 65.397940][ T7180] recent [ 65.397940][ T7180] policy [ 65.397940][ T7180] osf [ 65.397940][ T7180] multiport [ 65.397940][ T7180] length [ 65.397940][ T7180] l2tp [ 65.397940][ T7180] iprange [ 65.397940][ T7180] ipcomp [ 65.397940][ T7180] ttl [ 65.397940][ T7180] hashlimit [ 65.397940][ T7180] hashlimit [ 65.397940][ T7180] hashlimit [ 65.397940][ T7180] esp [ 65.397940][ T7180] ecn [ 65.397940][ T7180] tos [ 65.397940][ T7180] dscp [ 65.397940][ T7180] dccp [ 65.397940][ T7180] connlimit [ 65.397940][ T7180] cluster [ 65.397940][ T7180] addrtype [ 65.397940][ T7180] addrtype [ 65.397940][ T7180] set [ 65.397940][ T7180] set [ 65.397940][ T7180] set [ 65.397940][ T7180] set [ 65.397940][ T7180] set [ 65.397940][ T7180] icmp [ 65.404540][ T7181] overlay: Unknown parameter ' [ 65.404540][ T7181] time [ 65.404540][ T7181] string [ 65.404540][ T7181] statistic [ 65.404540][ T7181] state [ 65.404540][ T7181] realm [ 65.404540][ T7181] rateest [ 65.404540][ T7181] quota [ 65.404540][ T7181] pkttype [ 65.404540][ T7181] physdev [ 65.404540][ T7181] cgroup [ 65.404540][ T7181] cgroup [ 65.404540][ T7181] cgroup [ 65.404540][ T7181] owner [ 65.404540][ T7181] nfacct [ 65.404540][ T7181] nfacct [ 65.404540][ T7181] mac [ 65.404540][ T7181] limit [ 65.404540][ T7181] ipvs [ 65.404540][ T7181] helper [ 65.404540][ T7181] devgroup [ 65.404540][ T7181] cpu [ 65.404540][ T7181] conntrack [ 65.404540][ T7181] conntrack [ 65.404540][ T7181] conntrack [ 65.404540][ T7181] connlabel [ 65.404540][ T7181] connbytes [ 65.404540][ T7181] comment [ 65.404540][ T7181] bpf [ 65.404540][ T7181] bpf [ 65.404540][ T7181] connmark [ 65.404540][ T7181] mark [ 65.404540][ T7181] rpfilter [ 65.404540][ T7181] ah [ 65.404540][ T7181] tcpmss [ 65.404540][ T7181] socket [ 65.404540][ T7181] socket [ 65.404540][ T7181] socket [ 65.404540][ T7181] socket [ 65.404540][ T7181] sctp [ 65.404540][ T7181] recent [ 65.404540][ T7181] recent [ 65.404540][ T7181] policy [ 65.404540][ T7181] osf [ 65.404540][ T7181] multiport [ 65.404540][ T7181] length [ 65.404540][ T7181] l2tp [ 65.404540][ T7181] iprange [ 65.404540][ T7181] ipcomp [ 65.404540][ T7181] ttl [ 65.404540][ T7181] hashlimit [ 65.404540][ T7181] hashlimit [ 65.404540][ T7181] hashlimit [ 65.404540][ T7181] esp [ 65.404540][ T7181] ecn [ 65.404540][ T7181] tos [ 65.404540][ T7181] dscp [ 65.404540][ T7181] dccp [ 65.404540][ T7181] connlimit [ 65.404540][ T7181] cluster [ 65.404540][ T7181] addrtype [ 65.404540][ T7181] addrtype [ 65.404540][ T7181] set [ 65.404540][ T7181] set [ 65.404540][ T7181] set [ 65.404540][ T7181] set [ 65.404540][ T7181] set [ 65.404540][ T7181] icmp [ 65.419911][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'. [ 65.419925][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 65.574191][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 65.577256][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 65.580439][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 65.583458][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 65.729050][ T7207] program syz.3.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.792564][ T7211] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 65.959947][ T5948] Bluetooth: hci3: Unknown advertising packet type: 0x33 [ 65.959986][ T5948] Bluetooth: hci3: Malformed LE Event: 0x0d [ 66.320605][ T7250] netlink: 'syz.3.387': attribute type 12 has an invalid length. [ 66.341901][ T7253] cgroup: none used incorrectly [ 66.371310][ T7256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 66.374451][ T7256] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 66.377246][ T7256] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 66.377274][ T7256] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 66.540127][ T7280] tmpfs: Bad value for 'mpol' [ 66.631858][ T7285] netlink: 'syz.1.398': attribute type 3 has an invalid length. [ 66.638740][ T7285] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 66.642093][ T7285] nbd: couldn't find device at index 63 [ 67.003597][ T7315] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 67.265009][ T7354] syz_tun: entered allmulticast mode [ 67.304660][ T7360] tc_dump_action: action bad kind [ 67.309254][ T7360] netlink: 'syz.3.416': attribute type 3 has an invalid length. [ 67.609138][ T7373] netlink: 'syz.1.419': attribute type 21 has an invalid length. [ 67.611507][ T7373] netlink: 'syz.1.419': attribute type 5 has an invalid length. [ 67.613763][ T7373] netlink: 'syz.1.419': attribute type 6 has an invalid length. [ 67.623288][ T7373] netlink: 'syz.1.419': attribute type 21 has an invalid length. [ 67.626594][ T7373] netlink: 'syz.1.419': attribute type 5 has an invalid length. [ 67.925999][ C1] vkms_vblank_simulate: vblank timer overrun [ 68.141070][ T7409] tmpfs: Bad value for 'nr_inodes' [ 68.216173][ T7414] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 68.220621][ T7414] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 68.353454][ T7431] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 68.392134][ T7436] cgroup: Bad value for 'name' [ 68.464432][ T7434] kvm: pic: non byte write [ 68.687033][ T7458] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 68.760183][ T7470] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 68.768416][ T7470] fuse: Bad value for 'fd' [ 68.796672][ T7472] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 68.871883][ T7478] hfs: can't find a HFS filesystem on dev sr0 [ 69.442575][ T39] kauditd_printk_skb: 11760 callbacks suppressed [ 69.442588][ T39] audit: type=1400 audit(69.326:41813): avc: denied { setopt } for pid=7511 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.453256][ T39] audit: type=1326 audit(69.336:41814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.0.467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45c98cda9 code=0x7ffc0000 [ 69.462058][ T39] audit: type=1326 audit(69.336:41815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.0.467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45c98cda9 code=0x7ffc0000 [ 69.469240][ T39] audit: type=1326 audit(69.346:41816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.0.467" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa45c98b710 code=0x7ffc0000 [ 69.479096][ T39] audit: type=1326 audit(69.346:41817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.0.467" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa45c98b710 code=0x7ffc0000 [ 69.485740][ T39] audit: type=1326 audit(69.346:41818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.0.467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45c98cda9 code=0x7ffc0000 [ 69.494403][ T39] audit: type=1326 audit(69.346:41819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.0.467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45c98cda9 code=0x7ffc0000 [ 69.500657][ T39] audit: type=1326 audit(69.346:41821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.0.467" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa45c98cda9 code=0x7ffc0000 [ 69.507738][ T39] audit: type=1400 audit(69.346:41820): avc: denied { mount } for pid=7511 comm="syz.3.466" name="/" dev="autofs" ino=19580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 69.512785][ T7517] sctp: [Deprecated]: syz.3.468 (pid 7517) Use of int in max_burst socket option. [ 69.512785][ T7517] Use struct sctp_assoc_value instead [ 69.514949][ T39] audit: type=1326 audit(69.346:41822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.0.467" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45c98cda9 code=0x7ffc0000 [ 69.571243][ T5948] block nbd2: Receive control failed (result -32) [ 69.571255][ T5950] block nbd2: Receive control failed (result -32) [ 69.571258][ T5953] block nbd2: Receive control failed (result -32) [ 69.576999][ T7468] block nbd2: shutting down sockets [ 69.693313][ T7529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7529 comm=syz.0.471 [ 69.717664][ T7529] bond1: entered promiscuous mode [ 69.719713][ T7529] bond1: entered allmulticast mode [ 69.726699][ T7529] batadv1: entered allmulticast mode [ 69.729943][ T7529] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 69.733909][ T7529] bond1: (slave batadv1): making interface the new active one [ 69.737969][ T7529] batadv1: entered promiscuous mode [ 69.741117][ T7534] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 69.741434][ T7529] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 69.752113][ T7529] __nla_validate_parse: 19 callbacks suppressed [ 69.752126][ T7529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.471'. [ 69.760975][ T7529] bond1: left promiscuous mode [ 69.763129][ T7529] batadv1: left promiscuous mode [ 69.765638][ T7529] bond1: left allmulticast mode [ 69.768377][ T7529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.137368][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.140391][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.262892][ T1020] cfg80211: failed to load regulatory.db [ 84.479499][ T39] kauditd_printk_skb: 38 callbacks suppressed [ 84.479512][ T39] audit: type=1400 audit(84.366:41861): avc: denied { ioctl } for pid=7547 comm="syz.0.474" path="socket:[17931]" dev="sockfs" ino=17931 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 84.522837][ T39] audit: type=1400 audit(84.406:41862): avc: denied { setopt } for pid=7575 comm="syz.0.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 84.543327][ T39] audit: type=1400 audit(84.426:41863): avc: denied { create } for pid=7576 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 84.544800][ T7581] bridge_slave_0: left allmulticast mode [ 84.549261][ T39] audit: type=1400 audit(84.426:41864): avc: denied { write } for pid=7576 comm="syz.1.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 84.551527][ T7581] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.568726][ T7581] bridge_slave_1: left allmulticast mode [ 84.570805][ T7581] bridge_slave_1: left promiscuous mode [ 84.572772][ T7581] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.581744][ T7581] bond0: (slave bond_slave_0): Releasing backup interface [ 84.586475][ T7581] bond0: (slave bond_slave_1): Releasing backup interface [ 84.600777][ T7581] team0: Port device team_slave_0 removed [ 84.608410][ T7581] team0: Port device team_slave_1 removed [ 84.611256][ T7581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.614537][ T7581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.620256][ T7581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.622970][ T7581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.632801][ T7581] bond0: (slave wlan1): Releasing backup interface [ 84.652246][ T7581] vlan0: entered promiscuous mode [ 84.658797][ T7581] team0: Port device vlan0 added [ 84.662033][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 84.669266][ T7586] team0: No ports can be present during mode change [ 84.716274][ T39] audit: type=1400 audit(84.596:41865): avc: denied { map } for pid=7591 comm="syz.2.486" path="/dev/dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.724466][ T39] audit: type=1400 audit(84.596:41866): avc: denied { execute } for pid=7591 comm="syz.2.486" path="/dev/dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.762622][ T7596] 9pnet_fd: Insufficient options for proto=fd [ 84.774668][ T7581] team0 (unregistering): Port device vlan0 removed [ 84.967360][ T39] audit: type=1400 audit(84.856:41867): avc: denied { add_name } for pid=7609 comm="syz.1.492" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.980974][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.493'. [ 84.994395][ T39] audit: type=1400 audit(84.856:41868): avc: denied { create } for pid=7609 comm="syz.1.492" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 85.000877][ T39] audit: type=1400 audit(84.856:41869): avc: denied { associate } for pid=7609 comm="syz.1.492" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.046699][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 85.183025][ T7636] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 85.207597][ T7636] kvm: pic: non byte read [ 85.216345][ T39] audit: type=1400 audit(85.106:41870): avc: denied { module_request } for pid=7633 comm="syz.2.501" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.338149][ T7651] validate_nla: 5 callbacks suppressed [ 85.338159][ T7651] netlink: 'syz.1.505': attribute type 1 has an invalid length. [ 85.448727][ T7661] netlink: 36 bytes leftover after parsing attributes in process `syz.3.508'. [ 85.535592][ T7673] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 85.538331][ T7673] UDF-fs: Scanning with blocksize 2048 failed [ 85.542418][ T7673] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 85.546051][ T7673] UDF-fs: Scanning with blocksize 4096 failed [ 85.802705][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 85.852425][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 85.966610][ T7727] netlink: 'syz.1.527': attribute type 21 has an invalid length. [ 86.012464][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.3.529'. [ 86.756839][ T7781] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 86.834637][ T7792] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 86.837597][ T7792] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 87.040453][ T7795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.550'. [ 87.083943][ T7802] netlink: 100 bytes leftover after parsing attributes in process `syz.3.552'. [ 87.087189][ T7802] openvswitch: netlink: Flow key attr not present in new flow. [ 87.234027][ T7810] xt_CONNSECMARK: invalid mode: 0 [ 87.269108][ T7813] netlink: 'syz.2.555': attribute type 29 has an invalid length. [ 87.276933][ T7813] omfs: Invalid superblock (0) [ 87.404352][ T7819] mkiss: ax0: crc mode is auto. [ 87.411146][ T7821] 9pnet_fd: Insufficient options for proto=fd [ 87.553303][ T7828] overlayfs: workdir and upperdir must reside under the same mount [ 87.784374][ T6063] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 87.790816][ T7853] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 87.861001][ T7859] kvm: user requested TSC rate below hardware speed [ 87.914502][ T6063] usb 8-1: device descriptor read/64, error -71 [ 87.964026][ T7867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=7867 comm=syz.2.572 [ 87.970635][ T7869] tty tty1: ldisc open failed (-12), clearing slot 0 [ 88.015992][ T7875] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 88.078365][ T7885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.577'. [ 88.154431][ T6063] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 88.284485][ T6063] usb 8-1: device descriptor read/64, error -71 [ 88.398298][ T6063] usb usb8-port1: attempt power cycle [ 88.532811][ T7913] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 88.596839][ T7911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 88.601149][ T7911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.623460][ T25] hid (null): invalid report_count 1360709134 [ 88.626761][ T25] hid (null): unknown global tag 0xe [ 88.636009][ T25] hid-generic 00DD:0006:0008.0002: unknown main item tag 0x2 [ 88.639705][ T25] hid-generic 00DD:0006:0008.0002: invalid report_count 1360709134 [ 88.642857][ T25] hid-generic 00DD:0006:0008.0002: item 0 4 1 9 parsing failed [ 88.644640][ T7922] 9pnet_virtio: no channels available for device syz [ 88.646960][ T25] hid-generic 00DD:0006:0008.0002: probe with driver hid-generic failed with error -22 [ 88.658629][ T7924] ufs: You didn't specify the type of your ufs filesystem [ 88.658629][ T7924] [ 88.658629][ T7924] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 88.658629][ T7924] [ 88.658629][ T7924] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 88.670105][ T7924] ufs: ufstype=old is supported read-only [ 88.673035][ T7924] bio_check_eod: 23 callbacks suppressed [ 88.673053][ T7924] syz.1.590: attempt to access beyond end of device [ 88.673053][ T7924] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 88.709963][ T7926] IPVS: Error connecting to the multicast addr [ 88.734506][ T6063] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 88.758970][ T6063] usb 8-1: device descriptor read/8, error -71 [ 88.785136][ T7935] netlink: 'syz.1.594': attribute type 21 has an invalid length. [ 88.799477][ T7937] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 88.802048][ T7937] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 88.809329][ T7937] vhci_hcd vhci_hcd.0: Device attached [ 88.827009][ T7941] netlink: 'syz.1.596': attribute type 7 has an invalid length. [ 88.829861][ T7941] netlink: 'syz.1.596': attribute type 8 has an invalid length. [ 88.994386][ T6063] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 88.994449][ T8] vhci_hcd: vhci_device speed not set [ 89.014817][ T6063] usb 8-1: device descriptor read/8, error -71 [ 89.054388][ T6006] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 89.056902][ T8] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 89.128288][ T6063] usb usb8-port1: unable to enumerate USB device [ 89.194398][ T6006] usb 5-1: device descriptor read/64, error -71 [ 89.444376][ T6006] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 89.574430][ T6006] usb 5-1: device descriptor read/64, error -71 [ 89.694993][ T6006] usb usb5-port1: attempt power cycle [ 89.788618][ T7947] nbd: must specify at least one socket [ 89.791556][ T7947] __nla_validate_parse: 10 callbacks suppressed [ 89.791569][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 89.798455][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 89.798466][ T39] audit: type=1400 audit(89.686:41898): avc: denied { setopt } for pid=7946 comm="syz.1.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.043013][ T7962] xt_policy: output policy not valid in PREROUTING and INPUT [ 90.044407][ T6006] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 90.074959][ T6006] usb 5-1: device descriptor read/8, error -71 [ 90.124630][ T57] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 90.284486][ T57] usb 6-1: Using ep0 maxpacket: 32 [ 90.288196][ T57] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 90.290380][ T57] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 90.292731][ T57] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 90.295164][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 90.297627][ T57] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 90.300026][ T57] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.303266][ T57] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 90.308105][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.311071][ T57] usb 6-1: config 0 descriptor?? [ 90.324401][ T6006] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 90.347947][ T6006] usb 5-1: device descriptor read/8, error -71 [ 90.351922][ T7980] tipc: Can't bind to reserved service type 2 [ 90.473381][ T6006] usb usb5-port1: unable to enumerate USB device [ 90.520871][ T57] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 90.646285][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.674211][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.724850][ T57] usb 6-1: USB disconnect, device number 5 [ 90.739974][ T57] usblp0: removed [ 91.524464][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.612226][ T8004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.612'. [ 91.616940][ T8004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.612'. [ 91.630233][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.679561][ C1] vkms_vblank_simulate: vblank timer overrun [ 91.789083][ T39] audit: type=1400 audit(91.676:41899): avc: denied { setopt } for pid=8012 comm="syz.3.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.852742][ T7938] vhci_hcd: connection reset by peer [ 91.901704][ T46] vhci_hcd: stop threads [ 91.912364][ T46] vhci_hcd: release socket [ 91.914196][ T46] vhci_hcd: disconnect device [ 91.943250][ T8025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.619'. [ 92.351696][ T39] audit: type=1400 audit(92.226:41900): avc: denied { create } for pid=8053 comm="syz.0.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 92.406623][ T1020] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 92.411909][ T8064] netlink: 56 bytes leftover after parsing attributes in process `syz.3.629'. [ 92.459296][ T8066] netlink: 165 bytes leftover after parsing attributes in process `syz.3.630'. [ 92.533555][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.631'. [ 92.562681][ T8069] openvswitch: netlink: Missing key (keys=40, expected=100) [ 92.592806][ T1020] usb 6-1: Using ep0 maxpacket: 8 [ 92.610771][ T1020] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 92.622187][ T1020] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 92.626797][ T1020] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.632404][ T1020] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.645111][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.665588][ T1020] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.682785][ T1020] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 92.689764][ T1020] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 92.708691][ T1020] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.716516][ T1020] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.721701][ T1020] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.730979][ T1020] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 92.737802][ T1020] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 92.744592][ T1020] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.750802][ T1020] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.759302][ T1020] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 92.770395][ T1020] usb 6-1: string descriptor 0 read error: -22 [ 92.774030][ T1020] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 92.781227][ T1020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.817586][ T1020] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 92.914385][ T39] audit: type=1400 audit(92.796:41901): avc: denied { ioctl } for pid=8073 comm="syz.3.633" path="socket:[20098]" dev="sockfs" ino=20098 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 92.971216][ T8075] tipc: Enabling not permitted [ 92.973591][ T8075] tipc: Enabling of bearer rejected, failed to enable media [ 92.983506][ T39] audit: type=1400 audit(92.866:41902): avc: denied { write } for pid=8073 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.206313][ T9] usb 6-1: USB disconnect, device number 6 [ 93.275705][ T39] audit: type=1400 audit(93.156:41903): avc: denied { getopt } for pid=8081 comm="syz.2.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 93.778421][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.824488][ T1327] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 94.035066][ T1327] usb 7-1: Using ep0 maxpacket: 8 [ 94.040764][ T1327] usb 7-1: config 0 has no interfaces? [ 94.081046][ T1327] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 94.087007][ T1327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.109861][ T1327] usb 7-1: Product: syz [ 94.112815][ T1327] usb 7-1: Manufacturer: syz [ 94.119095][ T1327] usb 7-1: SerialNumber: syz [ 94.134412][ T1327] usb 7-1: config 0 descriptor?? [ 94.198921][ T8] vhci_hcd: vhci_device speed not set [ 94.360648][ T39] audit: type=1400 audit(94.246:41904): avc: denied { getattr } for pid=8081 comm="syz.2.635" name="/" dev="9p" ino=36049861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 94.383566][ T8082] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 94.396952][ T8107] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.407375][ C1] vkms_vblank_simulate: vblank timer overrun [ 94.425086][ T57] usb 7-1: USB disconnect, device number 2 [ 94.774406][ T6063] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 94.986437][ T6063] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.007876][ T6063] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.012523][ T6063] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.023078][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.033686][ T6063] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.033710][ T6063] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.046172][ T6063] usb 6-1: config 0 descriptor?? [ 95.088564][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.126246][ C1] vkms_vblank_simulate: vblank timer overrun [ 95.466399][ T39] audit: type=1400 audit(95.326:41905): avc: denied { bind } for pid=8102 comm="syz.1.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.155920][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.207395][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.821925][ T39] audit: type=1400 audit(96.706:41906): avc: denied { read } for pid=8121 comm="syz.2.645" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.990182][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.148063][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'. [ 97.272765][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.394191][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.506922][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.598239][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.872977][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.206190][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.626133][ T8126] bridge0: port 3(macsec1) entered blocking state [ 99.628316][ T8126] bridge0: port 3(macsec1) entered disabled state [ 99.630768][ T8126] macsec1: entered allmulticast mode [ 99.638160][ T8126] macsec1: left allmulticast mode [ 99.704044][ T39] audit: type=1400 audit(99.586:41907): avc: denied { mounton } for pid=8127 comm="syz.3.647" path="/149/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=fifo_file permissive=1 [ 99.777409][ T6063] usbhid 6-1:0.0: can't add hid device: -71 [ 99.781455][ T6063] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 99.832890][ T6063] usb 6-1: USB disconnect, device number 7 [ 99.891028][ T39] audit: type=1400 audit(99.776:41908): avc: denied { getopt } for pid=8136 comm="syz.0.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.998813][ T8144] netlink: 228 bytes leftover after parsing attributes in process `syz.1.651'. [ 100.008550][ T39] audit: type=1400 audit(99.886:41909): avc: denied { getopt } for pid=8133 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 100.024868][ T39] audit: type=1400 audit(99.896:41910): avc: denied { setopt } for pid=8148 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 100.071446][ T8149] bond0: (slave bridge0): Releasing backup interface [ 100.084126][ T8149] bridge_slave_0: left allmulticast mode [ 100.087531][ T8149] bridge_slave_0: left promiscuous mode [ 100.093330][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.109934][ T8149] bridge_slave_1: left allmulticast mode [ 100.112266][ T8149] bridge_slave_1: left promiscuous mode [ 100.115023][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.136962][ T8149] bond0: (slave bond_slave_0): Releasing backup interface [ 100.155703][ T39] audit: type=1400 audit(100.046:41911): avc: denied { shutdown } for pid=8143 comm="syz.1.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 100.210468][ T8149] bond0: (slave bond_slave_1): Releasing backup interface [ 100.221825][ T8159] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 100.234690][ T8159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.337833][ T8149] team0: Port device team_slave_0 removed [ 100.376228][ T8149] team0: Port device team_slave_1 removed [ 100.379386][ T8149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.383334][ T8149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.399992][ T8149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.405126][ T8149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.444368][ T8149] bond1: (slave batadv1): Releasing active interface [ 100.770891][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 100.855490][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.955653][ T8183] hfsplus: unable to find HFS+ superblock [ 101.108792][ T8188] openvswitch: netlink: IPv4 frag type 224 is out of range max 2 [ 101.309926][ T8208] netlink: 504 bytes leftover after parsing attributes in process `syz.2.667'. [ 101.329596][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 101.337233][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'. [ 101.606160][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.702021][ T8227] netlink: 'syz.3.669': attribute type 1 has an invalid length. [ 101.798223][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.858926][ T8239] bond0: entered promiscuous mode [ 101.863235][ T8239] bond_slave_0: entered promiscuous mode [ 101.875447][ T8239] bond_slave_1: entered promiscuous mode [ 101.892061][ T8239] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.901627][ T8239] bond0: left promiscuous mode [ 101.904455][ T8239] bond_slave_0: left promiscuous mode [ 101.906505][ T8239] bond_slave_1: left promiscuous mode [ 101.955138][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.038126][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.041338][ T8246] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 102.044613][ T8246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.049281][ T8246] vhci_hcd vhci_hcd.0: Device attached [ 102.065464][ T8246] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 102.069301][ T8246] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 102.074136][ T8246] vhci_hcd vhci_hcd.0: Device attached [ 102.132519][ T8249] vhci_hcd: connection closed [ 102.132708][ T8247] vhci_hcd: connection closed [ 102.141323][ T46] vhci_hcd: stop threads [ 102.146319][ T46] vhci_hcd: release socket [ 102.148037][ T46] vhci_hcd: disconnect device [ 102.170510][ T42] vhci_hcd: stop threads [ 102.198341][ T42] vhci_hcd: release socket [ 102.200655][ T42] vhci_hcd: disconnect device [ 102.224407][ T58] vhci_hcd: vhci_device speed not set [ 102.285439][ T8258] 9pnet: Found fid 0 not clunked [ 102.422246][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.450900][ T39] audit: type=1400 audit(102.316:41912): avc: denied { connect } for pid=8262 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.462319][ T8263] x_tables: ip6_tables: TPROXY target: only valid in mangle table, not net/snmp6 [ 102.839798][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.980023][ T39] audit: type=1400 audit(102.866:41913): avc: denied { sqpoll } for pid=8305 comm="syz.0.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 103.221578][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 103.243489][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.387947][ T6063] hid-generic 0003:0000:000E.0003: hidraw1: USB HID v0.3d Device [syz1] on syz1 [ 103.472122][ T8334] netlink: 76 bytes leftover after parsing attributes in process `syz.0.696'. [ 103.734506][ T8348] sp0: Synchronizing with TNC [ 103.805977][ T1327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.866818][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.892640][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 104.012562][ T39] audit: type=1400 audit(103.896:41914): avc: denied { accept } for pid=8364 comm="syz.0.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.038540][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.190077][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.481190][ T8367] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 104.495096][ T8367] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 104.506830][ T8367] overlayfs: failed to set uuid (175/file1, err=-13); falling back to uuid=null. [ 104.755474][ T8377] 9pnet: p9_errstr2errno: server reported unknown error ÎL-åÅu¸×¥BãͨÉA•e‹&|Û£^î [ 104.905735][ T5986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.909549][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.920215][ T8385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.712'. [ 105.141505][ T8387] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 105.157595][ T8387] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.189099][ T8387] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 105.203213][ T39] audit: type=1400 audit(105.076:41915): avc: denied { write } for pid=8395 comm="syz.0.715" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 105.225062][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.247424][ T8387] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.250758][ T8387] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.256203][ T8387] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 105.261659][ T8387] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 105.270049][ T8387] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.294735][ T8387] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 105.389453][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.543708][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.586896][ T8408] vxcan2: entered promiscuous mode [ 105.671662][ T8407] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 105.672516][ T39] audit: type=1326 audit(105.566:41916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.0.721" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45c98cda9 code=0x7ffc0000 [ 105.716673][ T39] audit: type=1326 audit(105.566:41917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.0.721" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45c98cda9 code=0x7ffc0000 [ 105.737785][ T39] audit: type=1326 audit(105.566:41918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.0.721" exe="/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fa45c98cda9 code=0x7ffc0000 [ 105.751060][ T39] audit: type=1326 audit(105.576:41919): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.0.721" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45c98cda9 code=0x7ffc0000 [ 105.761307][ T39] audit: type=1326 audit(105.576:41920): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.0.721" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45c98cda9 code=0x7ffc0000 [ 105.772999][ T5948] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 105.776623][ T39] audit: type=1326 audit(105.576:41921): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.0.721" exe="/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fa45c98cda9 code=0x7ffc0000 [ 105.829591][ T8419] kvm: Disabled LAPIC found during irq injection [ 105.936308][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.002206][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.838158][ C1] vkms_vblank_simulate: vblank timer overrun [ 106.906241][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.001715][ T8459] Unknown status report in ack skb [ 107.143044][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.255222][ C1] vkms_vblank_simulate: vblank timer overrun [ 107.304809][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.306961][ T5950] Bluetooth: hci3: command 0x0405 tx timeout [ 107.592300][ T39] kauditd_printk_skb: 66 callbacks suppressed [ 107.592316][ T39] audit: type=1400 audit(107.476:41988): avc: denied { map } for pid=8494 comm="syz.2.747" path="socket:[23669]" dev="sockfs" ino=23669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.634339][ T39] audit: type=1400 audit(107.516:41989): avc: denied { accept } for pid=8490 comm="syz.0.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.703005][ T39] audit: type=1400 audit(107.586:41990): avc: denied { ioctl } for pid=8490 comm="syz.0.746" path="socket:[23676]" dev="sockfs" ino=23676 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 107.726783][ T8503] overlayfs: conflicting options: metacopy=off,verity=on [ 107.760573][ T8499] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8499 comm=syz.0.746 [ 108.128338][ T8516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1296 sclass=netlink_route_socket pid=8516 comm=syz.1.753 [ 108.139333][ T8514] netlink: 'syz.3.751': attribute type 11 has an invalid length. [ 108.141457][ T8518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1296 sclass=netlink_route_socket pid=8518 comm=syz.1.753 [ 108.152709][ T8522] xt_l2tp: missing protocol rule (udp|l2tpip) [ 108.168374][ T8514] netlink: 132 bytes leftover after parsing attributes in process `syz.3.751'. [ 108.308033][ T8514] o2cb: This node has not been configured. [ 108.311644][ T8514] o2cb: Cluster check failed. Fix errors before retrying. [ 108.315608][ T8514] (syz.3.751,8514,0):user_dlm_register:674 ERROR: status = -22 [ 108.319526][ T8514] (syz.3.751,8514,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 108.324509][ T39] audit: type=1400 audit(108.186:41991): avc: denied { create } for pid=8513 comm="syz.3.751" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 108.373543][ T8529] netlink: 'syz.1.756': attribute type 4 has an invalid length. [ 108.388302][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 108.410509][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.756'. [ 108.420179][ T39] audit: type=1400 audit(108.276:41992): avc: denied { mount } for pid=8530 comm="syz.2.757" name="/" dev="configfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 108.439549][ T8529] netlink: 'syz.1.756': attribute type 7 has an invalid length. [ 108.502600][ T39] audit: type=1400 audit(108.376:41993): avc: denied { map } for pid=8532 comm="syz.0.758" path="/proc/632/net/ip_mr_cache" dev="proc" ino=4026533191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 108.600268][ T8538] netlink: 'syz.3.760': attribute type 1 has an invalid length. [ 108.600757][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.600757][ T8537] [ 108.605716][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.664869][ T39] audit: type=1400 audit(108.536:41994): avc: denied { watch_sb watch_reads } for pid=8530 comm="syz.2.757" path="/190/file0" dev="tmpfs" ino=1053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.675525][ T8537] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.686277][ T8543] netlink: 'syz.0.761': attribute type 2 has an invalid length. [ 108.695098][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.695098][ T8537] [ 108.695116][ T8537] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.695554][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.695554][ T8537] [ 108.695569][ T8537] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.696052][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.696052][ T8537] [ 108.696068][ T8537] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.696246][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.696246][ T8537] [ 108.696259][ T8537] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.696439][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.696439][ T8537] [ 108.696452][ T8537] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.696602][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.696602][ T8537] [ 108.696615][ T8537] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.696786][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.696786][ T8537] [ 108.696798][ T8537] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.696942][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.696942][ T8537] [ 108.696955][ T8537] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.697117][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.697117][ T8537] [ 108.697130][ T8537] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 108.697274][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.697274][ T8537] [ 108.697459][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.697459][ T8537] [ 108.697616][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.697616][ T8537] [ 108.697795][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.697795][ T8537] [ 108.697950][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.697950][ T8537] [ 108.698124][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.698124][ T8537] [ 108.698232][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.698232][ T8537] [ 108.698348][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.698348][ T8537] [ 108.698459][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.698459][ T8537] [ 108.698577][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.698577][ T8537] [ 108.698687][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.698687][ T8537] [ 108.698831][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.698831][ T8537] [ 108.698981][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.698981][ T8537] [ 108.699154][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.699154][ T8537] [ 108.699308][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.699308][ T8537] [ 108.699713][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.699713][ T8537] [ 108.699871][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.699871][ T8537] [ 108.700026][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.700026][ T8537] [ 108.700183][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.700183][ T8537] [ 108.700341][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.700341][ T8537] [ 108.700496][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.700496][ T8537] [ 108.700660][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.700660][ T8537] [ 108.700825][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.700825][ T8537] [ 108.700978][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.700978][ T8537] [ 108.701134][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.701134][ T8537] [ 108.701293][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.701293][ T8537] [ 108.701451][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.701451][ T8537] [ 108.701603][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.701603][ T8537] [ 108.701772][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.701772][ T8537] [ 108.701928][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.701928][ T8537] [ 108.702550][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.702550][ T8537] [ 108.702724][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.702724][ T8537] [ 108.702878][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.702878][ T8537] [ 108.703031][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.703031][ T8537] [ 108.703182][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.703182][ T8537] [ 108.703322][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.703322][ T8537] [ 108.703489][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.703489][ T8537] [ 108.703644][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.703644][ T8537] [ 108.703809][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.703809][ T8537] [ 108.703948][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.703948][ T8537] [ 108.704088][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.704088][ T8537] [ 108.704354][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.704354][ T8537] [ 108.704554][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.704554][ T8537] [ 108.704765][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.704765][ T8537] [ 108.704922][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.704922][ T8537] [ 108.705080][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.705080][ T8537] [ 108.705242][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.705242][ T8537] [ 108.705397][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.705397][ T8537] [ 108.705556][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.705556][ T8537] [ 108.705724][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.705724][ T8537] [ 108.706017][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.706017][ T8537] [ 108.706173][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.706173][ T8537] [ 108.822661][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.874311][ T39] audit: type=1400 audit(108.746:41995): avc: denied { getopt } for pid=8544 comm="syz.0.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.878250][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 108.878250][ T8537] [ 109.216015][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.219154][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 109.219154][ T8537] [ 109.335656][ T8537] CIFS mount error: No usable UNC path provided in device string! [ 109.335656][ T8537] [ 109.377880][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.390596][ T5950] Bluetooth: hci3: command 0x0405 tx timeout [ 109.400525][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'. [ 109.402082][ T39] audit: type=1400 audit(109.286:41996): avc: denied { append } for pid=8549 comm="syz.0.763" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 109.437708][ T39] audit: type=1400 audit(109.286:41997): avc: denied { shutdown } for pid=8549 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.610110][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.727903][ T8572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.770'. [ 109.873883][ T8572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8572 comm=syz.1.770 [ 109.887410][ T8576] Illegal XDP return value 4294967274 on prog (id 147) dev lo, expect packet loss! [ 110.031508][ T8584] fuse: Unknown parameter 'subnt_apíJ+é_{îvV¦©á´ñà' [ 110.396312][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 110.828062][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.307099][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.332160][ T8637] syz.1.786: attempt to access beyond end of device [ 111.332160][ T8637] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 111.333772][ T8650] loop6: detected capacity change from 0 to 524287999 [ 111.361352][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.366754][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.371258][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.393386][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.404387][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.423567][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.426091][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.442478][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.446134][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.451224][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.455645][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.458415][ T5950] Bluetooth: hci3: command 0x0405 tx timeout [ 111.461877][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.463094][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.468836][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.473390][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.478050][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.481646][ T8650] ldm_validate_partition_table(): Disk read failed. [ 111.482442][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.508702][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.524599][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.527495][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.530214][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 111.534771][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.539686][ T8650] Dev loop6: unable to read RDB block 0 [ 111.564392][ T8650] loop6: unable to read partition table [ 111.570039][ T8650] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 111.741405][ T8665] syzkaller0: entered allmulticast mode [ 111.790092][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.826115][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.888788][ T8665] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 111.903933][ T8665] cramfs: wrong magic [ 112.114604][ T5948] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 112.349640][ T8703] bridge_slave_1: entered promiscuous mode [ 112.429042][ T8710] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 113.076190][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.813'. [ 113.273719][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.816'. [ 113.301050][ T8738] overlay: ./file0 is not a directory [ 113.348286][ T8738] Unknown options in mask 5 [ 113.390664][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.816'. [ 113.437536][ T8746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.816'. [ 113.458439][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.474453][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.816'. [ 113.546800][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.698378][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 113.757788][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 113.757804][ T39] audit: type=1400 audit(113.647:42010): avc: denied { setopt } for pid=8761 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.814042][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.925194][ T39] audit: type=1400 audit(113.807:42011): avc: denied { write } for pid=8772 comm="syz.0.824" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 113.960571][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.825'. [ 113.964864][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.015621][ T8777] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x000000000000000b' [ 114.017992][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.102464][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 114.104881][ T39] audit: type=1400 audit(113.987:42012): avc: denied { bind } for pid=8778 comm="syz.0.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.142099][ T64] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 114.223566][ T8762] hsr_slave_1 (unregistering): left promiscuous mode [ 114.318647][ T64] usb 7-1: Using ep0 maxpacket: 8 [ 114.325477][ T64] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.404130][ T64] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.419106][ T64] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.422648][ T64] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.441471][ T64] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.462975][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.513704][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.827'. [ 114.544689][ T8784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.621513][ T8784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.644881][ T8784] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 114.661025][ T8784] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 114.701632][ T64] usb 7-1: usb_control_msg returned -32 [ 114.710704][ T64] usbtmc 7-1:16.0: can't read capabilities [ 114.877491][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 114.881114][ T8795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 114.912305][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 114.934243][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 114.937737][ T39] audit: type=1400 audit(114.817:42013): avc: denied { ioctl } for pid=8793 comm="syz.1.832" path="socket:[26702]" dev="sockfs" ino=26702 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 115.015653][ T8801] netlink: 'syz.0.833': attribute type 10 has an invalid length. [ 115.023638][ T8801] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 115.049068][ T8801] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 115.084109][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.282799][ T8804] infiniband syz1: set active [ 115.293177][ T8804] infiniband syz1: added syz_tun [ 115.335640][ T8804] RDS/IB: syz1: added [ 115.338062][ T8804] smc: adding ib device syz1 with port count 1 [ 115.340508][ T8804] smc: ib device syz1 port 1 has pnetid [ 115.758986][ T39] audit: type=1400 audit(115.647:42014): avc: denied { ioctl } for pid=8810 comm="syz.1.836" path="uts:[4026533164]" dev="nsfs" ino=4026533164 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 115.988589][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.053283][ T8816] input: syz0 as /devices/virtual/input/input9 [ 116.462009][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.534443][ T5948] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 116.760142][ T25] usb 7-1: USB disconnect, device number 3 [ 117.214580][ T8867] ebtables: ebtables: counters copy to user failed while replacing table [ 117.313110][ T8876] hsr0: entered allmulticast mode [ 117.322619][ T8876] hsr_slave_0: entered allmulticast mode [ 117.441043][ T39] audit: type=1400 audit(117.327:42015): avc: denied { ioctl } for pid=8881 comm="syz.1.851" path="socket:[26418]" dev="sockfs" ino=26418 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.572647][ T8894] input: syz0 as /devices/virtual/input/input10 [ 117.722009][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.808219][ T39] audit: type=1400 audit(117.687:42016): avc: denied { create } for pid=8906 comm="syz.2.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 117.843616][ T39] audit: type=1400 audit(117.687:42017): avc: denied { getopt } for pid=8906 comm="syz.2.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 118.364039][ T39] audit: type=1400 audit(118.247:42018): avc: denied { read append } for pid=8933 comm="syz.0.863" path="/230/file0/cpuset.effective_cpus" dev="9p" ino=36050061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.476865][ T8941] overlayfs: conflicting options: nfs_export=on,index=off [ 118.543266][ T39] audit: type=1400 audit(118.427:42019): avc: denied { accept } for pid=8940 comm="syz.3.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 118.575277][ T6063] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 118.584087][ T5950] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.595399][ T6063] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 118.673268][ T8945] xt_cgroup: invalid path, errno=-2 [ 119.094146][ T8950] __nla_validate_parse: 2 callbacks suppressed [ 119.094169][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 119.413735][ T8959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8959 comm=syz.0.871 [ 119.418834][ T8959] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8959 comm=syz.0.871 [ 119.566781][ T8962] ubi0: attaching mtd0 [ 119.570348][ T39] audit: type=1400 audit(119.447:42020): avc: denied { mount } for pid=8961 comm="syz.1.875" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 119.571055][ T8962] ubi0: scanning is finished [ 119.610935][ T8962] ubi0: empty MTD device detected [ 119.639374][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.649927][ T8964] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 119.687090][ T39] audit: type=1400 audit(119.557:42021): avc: denied { write } for pid=8963 comm="syz.0.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 119.810519][ T39] audit: type=1400 audit(119.697:42022): avc: denied { mounton } for pid=8961 comm="syz.1.875" path="/224/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 119.939778][ T8962] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 119.962922][ T8962] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 119.969348][ T8962] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 119.975342][ T8962] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 119.979920][ T8962] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 119.988808][ T8962] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 119.994833][ T8975] : renamed from bond0 (while UP) [ 120.003903][ T8962] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 201715928 [ 120.007794][ T8962] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 120.012586][ T8976] ubi0: background thread "ubi_bgt0d" started, PID 8976 [ 120.066081][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.128182][ T8983] No control pipe specified [ 120.151636][ T39] audit: type=1400 audit(120.027:42023): avc: denied { unmount } for pid=5956 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 120.288390][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 120.374030][ T39] audit: type=1400 audit(120.257:42024): avc: denied { read } for pid=8979 comm="syz.2.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.457630][ T8980] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.603331][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.636759][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.654173][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.657229][ T6063] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 120.660929][ T6063] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 120.911809][ T39] audit: type=1400 audit(120.797:42025): avc: denied { connect } for pid=9003 comm="syz.2.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.938064][ T39] audit: type=1400 audit(120.797:42026): avc: denied { read } for pid=9003 comm="syz.2.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 121.075039][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.083932][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 121.246859][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 121.255838][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 121.262411][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 121.266113][ T9] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 121.272615][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.278631][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.282041][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.407986][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.497718][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.892'. [ 121.598182][ T9038] 9pnet_fd: p9_fd_create_unix (9038): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 121.631527][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.710398][ T5950] Bluetooth: hci0: command tx timeout [ 121.822053][ T9042] tmpfs: Unknown parameter 'usrquota_inode_hardl)mit' [ 121.848476][ T9042] netlink: 'syz.2.896': attribute type 10 has an invalid length. [ 121.855560][ T9042] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 121.879790][ T9042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9042 comm=syz.2.896 [ 121.884084][ T57] usb 8-1: USB disconnect, device number 12 [ 121.886757][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 121.970720][ T9048] loop2: detected capacity change from 0 to 7 [ 121.978907][ T9048] Dev loop2: unable to read RDB block 7 [ 121.981064][ T9048] loop2: AHDI p1 p2 [ 121.982780][ T9048] loop2: partition table partially beyond EOD, truncated [ 121.992704][ T9048] loop2: p1 start 14286848 is beyond EOD, truncated [ 122.137458][ T9055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.901'. [ 122.142182][ T9055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.901'. [ 122.145999][ T9055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.901'. [ 122.154822][ T9055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.901'. [ 122.161786][ T9055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.901'. [ 122.310305][ T8912] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 122.320296][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.488010][ T8912] usb 7-1: Using ep0 maxpacket: 8 [ 122.494878][ T8912] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.530756][ T8912] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.534859][ T8912] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.550523][ T8912] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.555743][ T8912] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.568045][ T8912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.605080][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.706380][ T39] audit: type=1326 audit(122.587:42027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9067 comm="syz.1.906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38cda9 code=0x7ffc0000 [ 122.731933][ T39] audit: type=1326 audit(122.587:42028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9067 comm="syz.1.906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59f38cda9 code=0x7ffc0000 [ 122.734251][ T6063] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 122.738014][ T5950] Bluetooth: hci3: command 0x0405 tx timeout [ 122.753237][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.753581][ T39] audit: type=1326 audit(122.587:42029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9067 comm="syz.1.906" exe="/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7ff59f38cda9 code=0x7ffc0000 [ 122.755808][ T9068] netlink: 'syz.3.907': attribute type 1 has an invalid length. [ 122.760935][ T6063] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 122.895189][ T8912] usb 7-1: GET_CAPABILITIES returned 0 [ 122.898755][ T8912] usbtmc 7-1:16.0: can't read capabilities [ 122.929931][ T9078] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 122.970115][ T9078] UDF-fs: Scanning with blocksize 2048 failed [ 122.975066][ T9078] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 122.978911][ T9078] UDF-fs: Scanning with blocksize 4096 failed [ 123.121623][ T9] usb 7-1: USB disconnect, device number 4 [ 123.211239][ T9093] ip6t_REJECT: ECHOREPLY is not supported [ 123.288551][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.347884][ T9098] fuse: Bad value for 'user_id' [ 123.351267][ T9098] fuse: Bad value for 'user_id' [ 123.621948][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.720746][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.998312][ T9123] netlink: 'syz.1.919': attribute type 64 has an invalid length. [ 124.017767][ T9123] netlink: 'syz.1.919': attribute type 4 has an invalid length. [ 124.120772][ T9126] __nla_validate_parse: 57 callbacks suppressed [ 124.120790][ T9126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.920'. [ 124.125607][ T9126] : renamed from hsr0 (while UP) [ 124.220966][ T9136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.923'. [ 124.283905][ T9136] ./file0: Can't lookup blockdev [ 124.306877][ T9139] TCP: out of memory -- consider tuning tcp_mem [ 124.525382][ T9150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.927'. [ 124.747928][ T5986] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 124.901476][ T5986] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 124.940277][ T5986] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.944039][ T5986] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.960196][ T5986] usb 6-1: config 0 interface 0 has no altsetting 0 [ 124.969898][ T5986] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.979448][ T5986] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.987221][ T5986] usb 6-1: config 0 interface 0 has no altsetting 0 [ 124.996486][ T5986] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.002100][ T5986] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.010072][ T5986] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.018183][ T5986] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.024317][ T5986] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.030018][ T5986] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.035049][ T5986] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.041472][ T5986] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.048005][ T5986] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.053274][ T5986] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.060486][ T5986] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.070322][ T5986] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.076397][ T5986] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.080593][ T5986] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.087199][ T5986] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.092219][ T5986] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.098586][ T5986] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.106035][ T5986] usb 6-1: config 0 interface 0 has no altsetting 0 [ 125.112880][ T5986] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 125.120573][ T5986] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 125.126302][ T5986] usb 6-1: Product: syz [ 125.129218][ T5986] usb 6-1: Manufacturer: syz [ 125.132271][ T5986] usb 6-1: SerialNumber: syz [ 125.138328][ T5986] usb 6-1: config 0 descriptor?? [ 125.149048][ T5986] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 125.265234][ T9178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.278414][ T9178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.285619][ T9178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.346323][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 125.346339][ T39] audit: type=1400 audit(125.237:42050): avc: denied { write } for pid=9177 comm="syz.2.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 125.361794][ T6063] usb 6-1: USB disconnect, device number 8 [ 125.369785][ T6063] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 125.487501][ T1327] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 125.640479][ T1327] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 125.666062][ T1327] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 125.672484][ T1327] usb 8-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.703054][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.735341][ T1327] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 125.750668][ T1327] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 125.777385][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.799235][ T1327] usb 8-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.831398][ T1327] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 125.834556][ T1327] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 125.838673][ T1327] usb 8-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 125.859998][ T1327] usb 8-1: string descriptor 0 read error: -22 [ 125.863723][ T1327] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 125.868704][ T1327] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.883876][ T1327] adutux 8-1:168.0: interrupt endpoints not found [ 126.084421][ T58] usb 8-1: USB disconnect, device number 13 [ 126.192806][ T9181] syz.1.936: attempt to access beyond end of device [ 126.192806][ T9181] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 126.201246][ T9181] VFS: could not find a valid V7 on nbd1. [ 126.222010][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.936'. [ 126.261943][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.352240][ T9184] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 1, id = 0 [ 126.649286][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.676112][ T39] audit: type=1400 audit(126.547:42051): avc: denied { mounton } for pid=9187 comm="syz.1.939" path="/244/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 127.065889][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.068851][ T39] audit: type=1400 audit(126.947:42052): avc: denied { watch } for pid=9198 comm="syz.3.943" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 127.125528][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.338069][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.368879][ T9206] could not allocate digest TFM handle  [ 127.531576][ T9215] [ 127.532704][ T9215] ====================================================== [ 127.535594][ T9215] WARNING: possible circular locking dependency detected [ 127.540171][ T9215] 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 Not tainted [ 127.552606][ T9215] ------------------------------------------------------ [ 127.557729][ T9215] syz.0.946/9215 is trying to acquire lock: [ 127.560485][ T9215] ffff888020f79868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 127.564133][ T9215] [ 127.564133][ T9215] but task is already holding lock: [ 127.570829][ T9215] ffff8880278fa420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x327/0x360 [ 127.575066][ T9215] [ 127.575066][ T9215] which lock already depends on the new lock. [ 127.575066][ T9215] [ 127.580315][ T9215] [ 127.580315][ T9215] the existing dependency chain (in reverse order) is: [ 127.585472][ T9215] [ 127.585472][ T9215] -> #3 (sb_writers#6){.+.+}-{0:0}: [ 127.590004][ T9215] mnt_want_write+0x6f/0x450 [ 127.592701][ T9215] ovl_create_object+0x12e/0x300 [ 127.596070][ T9215] lookup_open.isra.0+0x11d2/0x1580 [ 127.599740][ T9215] path_openat+0x904/0x2d80 [ 127.602845][ T9215] do_filp_open+0x20c/0x470 [ 127.609040][ T9215] do_sys_openat2+0x17a/0x1e0 [ 127.613022][ T9215] __x64_sys_open+0x154/0x1e0 [ 127.616354][ T9215] do_syscall_64+0xcd/0x250 [ 127.619685][ T9215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.625583][ T9215] [ 127.625583][ T9215] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 127.630752][ T9215] down_read+0x9a/0x330 [ 127.633855][ T9215] walk_component+0x342/0x5b0 [ 127.637285][ T9215] path_lookupat+0x17f/0x770 [ 127.639612][ T9215] filename_lookup+0x221/0x5f0 [ 127.642342][ T9215] kern_path+0x35/0x50 [ 127.644850][ T9215] lookup_bdev+0xd9/0x280 [ 127.647359][ T9215] resume_store+0x1d8/0x460 [ 127.650342][ T9215] kobj_attr_store+0x55/0x80 [ 127.653779][ T9215] sysfs_kf_write+0x117/0x170 [ 127.656027][ T9215] kernfs_fop_write_iter+0x33d/0x500 [ 127.659109][ T9215] vfs_write+0x5ae/0x1150 [ 127.661918][ T9215] ksys_write+0x12b/0x250 [ 127.664794][ T9215] do_syscall_64+0xcd/0x250 [ 127.669970][ T9215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.674290][ T9215] [ 127.674290][ T9215] -> #1 (&of->mutex){+.+.}-{4:4}: [ 127.677776][ T9215] __mutex_lock+0x19b/0xb10 [ 127.680820][ T9215] kernfs_fop_write_iter+0x27b/0x500 [ 127.685768][ T9215] iter_file_splice_write+0x90f/0x10b0 [ 127.690928][ T9215] do_splice+0x146a/0x1f70 [ 127.693869][ T9215] __do_splice+0x327/0x360 [ 127.696835][ T9215] __x64_sys_splice+0x187/0x250 [ 127.700269][ T9215] do_syscall_64+0xcd/0x250 [ 127.703132][ T9215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.706997][ T9215] [ 127.706997][ T9215] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 127.724629][ T9215] __lock_acquire+0x249e/0x3c40 [ 127.726962][ T9215] lock_acquire.part.0+0x11b/0x380 [ 127.729459][ T9215] __mutex_lock+0x19b/0xb10 [ 127.731673][ T9215] pipe_lock+0x64/0x80 [ 127.737416][ T9215] iter_file_splice_write+0x1eb/0x10b0 [ 127.740420][ T9215] do_splice+0x146a/0x1f70 [ 127.748915][ T9215] __do_splice+0x327/0x360 [ 127.751013][ T9215] __x64_sys_splice+0x187/0x250 [ 127.753216][ T9215] do_syscall_64+0xcd/0x250 [ 127.760868][ T9215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.767435][ T9215] [ 127.767435][ T9215] other info that might help us debug this: [ 127.767435][ T9215] [ 127.773893][ T9215] Chain exists of: [ 127.773893][ T9215] &pipe->mutex --> &ovl_i_mutex_dir_key[depth] --> sb_writers#6 [ 127.773893][ T9215] [ 127.786734][ T9215] Possible unsafe locking scenario: [ 127.786734][ T9215] [ 127.793495][ T9215] CPU0 CPU1 [ 127.797443][ T9215] ---- ---- [ 127.800713][ T9215] rlock(sb_writers#6); [ 127.802998][ T9215] lock(&ovl_i_mutex_dir_key[depth]); [ 127.807902][ T9215] lock(sb_writers#6); [ 127.812040][ T9215] lock(&pipe->mutex); [ 127.814594][ T9215] [ 127.814594][ T9215] *** DEADLOCK *** [ 127.814594][ T9215] [ 127.820120][ T9215] 1 lock held by syz.0.946/9215: [ 127.822987][ T9215] #0: ffff8880278fa420 (sb_writers#6){.+.+}-{0:0}, at: __do_splice+0x327/0x360 [ 127.827820][ T9215] [ 127.827820][ T9215] stack backtrace: [ 127.831305][ T9215] CPU: 0 UID: 0 PID: 9215 Comm: syz.0.946 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 127.831326][ T9215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 127.831337][ T9215] Call Trace: [ 127.831343][ T9215] [ 127.831351][ T9215] dump_stack_lvl+0x116/0x1f0 [ 127.831421][ T9215] print_circular_bug+0x490/0x760 [ 127.831486][ T9215] check_noncircular+0x31a/0x400 [ 127.831548][ T9215] ? __pfx_check_noncircular+0x10/0x10 [ 127.831563][ T9215] ? bpf_ksym_find+0x127/0x1c0 [ 127.831579][ T9215] ? lockdep_lock+0xc6/0x200 [ 127.831594][ T9215] ? __pfx_lockdep_lock+0x10/0x10 [ 127.831609][ T9215] ? arch_stack_walk+0xa7/0x100 [ 127.831624][ T9215] __lock_acquire+0x249e/0x3c40 [ 127.831649][ T9215] ? __pfx___lock_acquire+0x10/0x10 [ 127.831668][ T9215] ? find_held_lock+0x2d/0x110 [ 127.831684][ T9215] ? iter_file_splice_write+0x1cd/0x10b0 [ 127.831707][ T9215] lock_acquire.part.0+0x11b/0x380 [ 127.831727][ T9215] ? pipe_lock+0x64/0x80 [ 127.831745][ T9215] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 127.831764][ T9215] ? rcu_is_watching+0x12/0xc0 [ 127.831779][ T9215] ? trace_lock_acquire+0x14e/0x1f0 [ 127.831794][ T9215] ? pipe_lock+0x64/0x80 [ 127.831807][ T9215] ? lock_acquire+0x2f/0xb0 [ 127.831824][ T9215] ? pipe_lock+0x64/0x80 [ 127.831837][ T9215] __mutex_lock+0x19b/0xb10 [ 127.831851][ T9215] ? pipe_lock+0x64/0x80 [ 127.831864][ T9215] ? pipe_lock+0x64/0x80 [ 127.831878][ T9215] ? __pfx___mutex_lock+0x10/0x10 [ 127.831895][ T9215] ? rcu_is_watching+0x12/0xc0 [ 127.831909][ T9215] ? trace_kmalloc+0x2d/0xd0 [ 127.831929][ T9215] ? pipe_lock+0x64/0x80 [ 127.831940][ T9215] pipe_lock+0x64/0x80 [ 127.831953][ T9215] iter_file_splice_write+0x1eb/0x10b0 [ 127.831978][ T9215] ? __futex_wait+0x324/0x3c0 [ 127.831996][ T9215] ? __pfx___lock_acquire+0x10/0x10 [ 127.832016][ T9215] ? __pfx_iter_file_splice_write+0x10/0x10 [ 127.832041][ T9215] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 127.832063][ T9215] ? __do_splice+0x327/0x360 [ 127.832085][ T9215] ? __pfx_iter_file_splice_write+0x10/0x10 [ 127.832109][ T9215] do_splice+0x146a/0x1f70 [ 127.832131][ T9215] ? lock_acquire.part.0+0x11b/0x380 [ 127.832152][ T9215] ? __pfx_do_splice+0x10/0x10 [ 127.832172][ T9215] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 127.832191][ T9215] ? __pfx_lock_release+0x10/0x10 [ 127.832211][ T9215] ? trace_lock_acquire+0x14e/0x1f0 [ 127.832229][ T9215] __do_splice+0x327/0x360 [ 127.832251][ T9215] ? __pfx___do_splice+0x10/0x10 [ 127.832272][ T9215] ? __fget_files+0x206/0x3a0 [ 127.832288][ T9215] __x64_sys_splice+0x187/0x250 [ 127.832312][ T9215] do_syscall_64+0xcd/0x250 [ 127.832328][ T9215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.832350][ T9215] RIP: 0033:0x7fa45c98cda9 [ 127.832364][ T9215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.832379][ T9215] RSP: 002b:00007fa45d858038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 127.832395][ T9215] RAX: ffffffffffffffda RBX: 00007fa45cba5fa0 RCX: 00007fa45c98cda9 [ 127.832405][ T9215] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 127.832414][ T9215] RBP: 00007fa45ca0e2a0 R08: 0000000000000004 R09: 0000000000000005 [ 127.832424][ T9215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.832433][ T9215] R13: 0000000000000000 R14: 00007fa45cba5fa0 R15: 00007ffd773faad8 [ 127.832447][ T9215] [ 128.438021][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.058278][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.137904][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.159503][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.227800][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.086224][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.460036][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.989002][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.165425][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.347453][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.420134][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.545107][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.606187][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.638291][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.737880][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.781850][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.043492][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.164714][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.154695][ C1] vkms_vblank_simulate: vblank timer overrun VM DIAGNOSIS: 18:25:02 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853fcd95 RDI=ffffffff9ab767c0 RBP=ffffffff9ab76780 RSP=ffffc900062df0e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e33312e36 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ab76780 R15=0000000000000000 RIP=ffffffff853fcdbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa45d8586c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa45d836f98 CR3=0000000026cf4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa45ca0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa45ca0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa45ca0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa45ca0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa45ca0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa45ca0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa45cb7c488 00007fa45cb7c480 00007fa45cb7c478 00007fa45cb7c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa45d6dd100 00007fa45cb7c440 00007fa45cb7c458 00007fa45cb7c4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa45cb7c498 00007fa45cb7c490 00007fa45cb7c488 00007fa45cb7c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 00000000000000c4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000007e7a4 RBX=0000000000000001 RCX=ffffffff8b55e469 RDX=ffffed100d4e6f7e RSI=ffffffff8bd33ce0 RDI=ffffffff81906cd9 RBP=ffffed1003b59910 RSP=ffffc90000187e08 R8 =0000000000000000 R9 =ffffed100d4e6f7d R10=ffff88806a737beb R11=0000000000000000 R12=0000000000000001 R13=ffff88801dacc880 R14=ffffffff90621510 R15=0000000000000000 RIP=ffffffff8b55f84f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5583be2d58 CR3=0000000053016000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5582e0f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5582e0f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5582e0f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5582e0f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5582e0f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5582e0f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5582f7c488 00007f5582f7c480 00007f5582f7c478 00007f5582f7c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5583add100 00007f5582f7c440 00007f5582f70004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5582f7c498 00007f5582f7c490 00007f5582f7c488 00007f5582f7c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000c70cc RBX=0000000000000002 RCX=ffffffff8b55e469 RDX=ffffed100d506f7e RSI=ffffffff8bd33ce0 RDI=ffffffff81906cd9 RBP=ffffed1003b5c000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d506f7d R10=ffff88806a837beb R11=0000000000000000 R12=0000000000000002 R13=ffff88801dae0000 R14=ffffffff90621510 R15=0000000000000000 RIP=ffffffff8b55f84f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555559296808 CR3=0000000035d84000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=00000000000000ff Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556b64380f 000055556b6435c0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556b6ba278 000055556b6b5af0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 050c80040201498a 00100001a0ed8410 000004060240bc00 020007007375622f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008010392001000 1790030ef3acd080 1000178003401000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0208001803000800 1003029408000803 1808000003188004 1780040010000410 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ffffffffffffff feff0830030aa608 0028031c08002003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100041885c2cd96 08000100000e0806 060123b800000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000001ffffff fffffffffeff0830 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030aa6080028031c 0800200302080018 0300080010030294 0800080318080000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000008376c RBX=0000000000000003 RCX=ffffffff8b55e469 RDX=ffffed100d526f7e RSI=ffffffff8bd33ce0 RDI=ffffffff81906cd9 RBP=ffffed1003b5c488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d526f7d R10=ffff88806a937beb R11=0000000000000000 R12=0000000000000003 R13=ffff88801dae2440 R14=ffffffff90621510 R15=0000000000000000 RIP=ffffffff8b55f84f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd773f9f40 CR3=0000000026cf4000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000003609 DR2=000000000000029f DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e3d9c6a3ace53a46 e6253ef34bd74d94 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ee7ca80b8e0e1fa1 0c94e09daed7f560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f5c8e63d5d496569 ca3f93c9ca3cc5d9 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 adbeb3614f5dff6a ec3ab78527f1bb80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000007040 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004e59c8475c 0000004e0000004e ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004e59d0c188 0000000059d3b5e2 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000004e00800100 5851670258413334 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000004e 000388f0580ca562 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 87ac0fa4bfe8c4fc 889a2338f075701b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a534ea35afc7b58b 7069d3ac650f4de3 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000