last executing test programs: 3m57.520199371s ago: executing program 3 (id=264): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 3m57.518951286s ago: executing program 3 (id=265): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="000804000120001e2c001280110001006272696467655f736c617665000000001400058005001e000000000005001c"], 0x4c}}, 0x24004000) 3m57.498321691s ago: executing program 3 (id=266): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x72bd27, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7, 0x8}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e22}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 3m57.431217723s ago: executing program 3 (id=267): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m57.430951267s ago: executing program 3 (id=268): r0 = socket$inet(0x2, 0x80001, 0x84) listen(r0, 0x3) accept(r0, 0x0, 0x0) shutdown(r0, 0x0) 3m57.212226891s ago: executing program 3 (id=272): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r0, 0x8948, &(0x7f0000000000)) 3m57.139313148s ago: executing program 32 (id=272): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x8}) ioctl$sock_netdev_private(r0, 0x8948, &(0x7f0000000000)) 1m28.603948848s ago: executing program 1 (id=5156): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000500)=""/139, 0x8b}], 0x1) sendmmsg$alg(r1, &(0x7f00000029c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="b49f7b3fc29567cea4915a4f429f19769e", 0x11}], 0x1, 0x0, 0x0, 0x20000080}], 0x1, 0x0) 1m27.662413101s ago: executing program 1 (id=5180): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 75:*\tm'], 0xa) write$cgroup_devices(r1, &(0x7f00000001c0)={'c', ' *:* ', 'm\x00'}, 0x8) 1m27.662024649s ago: executing program 1 (id=5182): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x46f3, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x3, 0x10000, 0x3, 0x7, 0x4, 0x7ff, 0xf, 0xe11d}, 0x0, &(0x7f00000001c0)={0x8, 0x0, 0x1, 0x100000001, 0x5, 0x100000000, 0x4, 0x262}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m27.555361583s ago: executing program 1 (id=5184): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') 1m27.554863246s ago: executing program 1 (id=5185): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1m27.374590878s ago: executing program 1 (id=5190): r0 = socket$inet6(0xa, 0x3, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1m27.322382761s ago: executing program 33 (id=5190): r0 = socket$inet6(0xa, 0x3, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.340041833s ago: executing program 2 (id=7364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) inotify_init1(0x80000) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) pipe(&(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xe, 0x3, 0x5, 0x0, 0xd79, 0x9, 0x6, 0x7}, &(0x7f0000000100)={0xd7c, 0xf, 0x7fff, 0x2, 0x4, 0x1, 0x1000, 0x1ff}, 0x0, 0x0, 0x0) 2.117828995s ago: executing program 5 (id=7365): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 2.085049891s ago: executing program 2 (id=7367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @local}}}], 0x20}}], 0x1, 0x4880) 2.081358141s ago: executing program 5 (id=7368): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r2, @ANYBLOB=',group_id=', @ANYRESOCT=r2]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x564f143a, 0x85, 0x6, 0xf, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r5, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r3, r6, 0x6700000000000000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x401, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2.047208248s ago: executing program 5 (id=7370): ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000080)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$alg(0x26, 0x5, 0x0) accept4(r8, 0x0, 0x0, 0x800) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="19922cbd7000fddbdf", @ANYRES32=r3, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r7, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 1.969880952s ago: executing program 2 (id=7372): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x20) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x6efc, 0x3900, 0xb, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000100)=0x2, 0x4) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x5, 0x5}, 0x1}, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xffffffffffffffff, 0x280080) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x28000, 0x0) fcntl$notify(r1, 0x402, 0x8000003b) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004000d80e88251c33efce56652b3fd307e889d9544280100c67abceb7f6d5090b5b7e099766cfc96745b9c642bb1c85634da453a676e335d95c11a6dc5f57548b0df35ff738ba4f572230b32ea8353f3744b8958b84e9d7468bd5a83c124722859fe618b945c4c83e84aaf74"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.903008251s ago: executing program 2 (id=7374): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "ca82fff16100"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17c6c327e1245c59, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 1.902587798s ago: executing program 4 (id=7375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.893876762s ago: executing program 5 (id=7376): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84", 0x6}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdfbffff0000000008010000000000003300000004000000041d00000000000007100000000102099f000800000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0730000000010a7a01800500000000000000040000000000000004"], 0x1c0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.8549765s ago: executing program 4 (id=7377): syz_open_dev$sndctrl(0x0, 0x400, 0x2f4c01) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000007cc0)=[{{&(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 1.854788407s ago: executing program 5 (id=7378): syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d95a4400001040001090260"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x5, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x3c9a02, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 1.853356542s ago: executing program 2 (id=7379): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x9, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x10, 0x1, 0x1, 0x1006, 0x3, 0xec4, 0xb32a, [{0x6, 0x80000001, 0x6, 0xd}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x22401, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 951.314462ms ago: executing program 4 (id=7383): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000e40f000007"], 0x39) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000480)='\x00\xac=\x9d\x00\x00\"0\xc5\xe1\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xef\x04;s\xe1\xc4\xcf\xaa\xa0\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbc*A\xdcq\xb7\xc1\xba&\xd1\xff\xffs\xf1\xc3G,](\x1dA\x8a\x97\xb1\xdb\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf\x00\x00\x00\xe6_\xc9n\x19\x12\xb0m\x06\a\x00\x00\x00\x00\x00\x00', 0x5) fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x1) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 901.52342ms ago: executing program 4 (id=7384): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000540)={0x51, 0x4cf, 0x3, 0xffff, 0xf, "800300eb00cbe600"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa388, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000480)={0x9, 0x1, 0x2, "8eb8a868e93b59fbba176fb1dea0708c68d900", 0x55595659}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000300)={0x0, 0x2, 0x24c4, 0x1}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 844.72974ms ago: executing program 4 (id=7385): socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0, {[0x30]}}, 0x0, 0x8, &(0x7f0000000300)) pipe2(&(0x7f0000000040), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 491.22502ms ago: executing program 2 (id=7386): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000140)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x72dfa471a5e165f3, 0xe4) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x8, 0xbd76, 0x2, 0xffffffffffffffff, 0x7fffffff, 0x8001, 0xffffffff}, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x300, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 490.824002ms ago: executing program 0 (id=7388): memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\x01\x00\x00\x00\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xbaL\xd3#\x87|J\xb9\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\x00\x00\x00\x00\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9Z\xd9G\xb6K[\x94\xfd^\xdd\x04\xa1\x83U\x900}!\x8b\x0e,M\xc0D\x15\x02\xde\xda', 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newtaction={0x14, 0x30, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 490.267083ms ago: executing program 0 (id=7389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x208101, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x9, 0x7, 0xc, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0x5, 0x2, 0x6, 0x1, 0x4], 0x3, [0x8b, 0x101, 0xffff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x440, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 354.604651ms ago: executing program 0 (id=7390): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000440)='./file0/file0\x00', 0x2) 350.593906ms ago: executing program 0 (id=7391): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 266.410516ms ago: executing program 4 (id=7392): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 265.871106ms ago: executing program 0 (id=7393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'vlan1\x00'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 135.533145ms ago: executing program 0 (id=7394): socket$inet6(0xa, 0x1, 0x0) r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) socket(0x10, 0x3, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x6, 0x2, 0x0, 0x2, 0x5}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x8000000000000008}, @TCA_NETEM_RATE64={0xc, 0x8, 0x26455f14adc0284b}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r5) sendmmsg$inet(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001380)="7bde898718a6c6c9237cb3183110240767593c40c38b46f5aaeb010661a7f3a802772dbeacbb719d97936097c7800c3d28a0234a87eba4fc532c7a3e1d96bc18a74bc61cf414ee3274f2ad278b47c77c0e45053d47029eb9ef0b3ac4a709f6dd73fdf65e6cc009bb98827b4d1716e42b0498dad14ebb339fe30c9128e7661135a70a36cc3a0198de1ee50ac13750797f4ea33fabeecb09d217918384bb28ef8d0367ab68e1ed5e3d832450b228c8c1feb0f8ec2d26694be70a3d212c9a304aa07e798a47ba95b016f13bfb0c94e2f325c1a8fc53ec4e06f0c27f07ed17b85387eb107c2ae94bc026472c78b61bc85fbb101d4c3a6ee4", 0xf6}, {&(0x7f00000000c0)="92309e6d23dd22b738dccfb217c3fe033ba644e321e9f54a1e7ec77550f2e0272b4806d914c9f23c3732ebae91b667771f0d5abb4436b0d81cb607cc7cfa30391ec6bbfdf6b477eeae64afd922c6b7aab5", 0x51}], 0x2}}], 0x1, 0x20048814) 0s ago: executing program 5 (id=7395): socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0, {[0x30]}}, 0x0, 0x8, &(0x7f0000000300)) pipe2(&(0x7f0000000040), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 7] warn_alloc+0x248/0x3a0 [ 192.230317][T16547] ? __pfx_warn_alloc+0x10/0x10 [ 192.230333][T16547] ? __pfx_stack_trace_save+0x10/0x10 [ 192.230353][T16547] ? kasan_save_stack+0x42/0x60 [ 192.230364][T16547] ? kasan_save_stack+0x33/0x60 [ 192.230374][T16547] ? kasan_save_track+0x14/0x30 [ 192.230384][T16547] ? xskq_create+0x52/0x1d0 [ 192.230397][T16547] ? xsk_setsockopt+0x792/0x9a0 [ 192.230410][T16547] ? do_sock_setsockopt+0xf3/0x1d0 [ 192.230428][T16547] ? xskq_create+0xfb/0x1d0 [ 192.230442][T16547] __vmalloc_node_range_noprof+0xfbc/0x1480 [ 192.230461][T16547] ? xskq_create+0xfb/0x1d0 [ 192.230479][T16547] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.230498][T16547] ? xskq_create+0xfb/0x1d0 [ 192.230512][T16547] vmalloc_user_noprof+0x9e/0xe0 [ 192.230527][T16547] ? xskq_create+0xfb/0x1d0 [ 192.230541][T16547] xskq_create+0xfb/0x1d0 [ 192.230557][T16547] xsk_setsockopt+0x792/0x9a0 [ 192.230571][T16547] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.230585][T16547] ? find_held_lock+0x2b/0x80 [ 192.230602][T16547] ? selinux_socket_setsockopt+0x6a/0x80 [ 192.230628][T16547] ? __pfx_xsk_setsockopt+0x10/0x10 [ 192.230642][T16547] do_sock_setsockopt+0xf3/0x1d0 [ 192.230661][T16547] __sys_setsockopt+0x1a0/0x230 [ 192.230678][T16547] __x64_sys_setsockopt+0xbd/0x160 [ 192.230692][T16547] ? do_syscall_64+0x91/0xfa0 [ 192.230703][T16547] ? lockdep_hardirqs_on+0x7c/0x110 [ 192.230721][T16547] do_syscall_64+0xcd/0xfa0 [ 192.230733][T16547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.230744][T16547] RIP: 0033:0x7f946878f6c9 [ 192.230754][T16547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.230764][T16547] RSP: 002b:00007f94695b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.230775][T16547] RAX: ffffffffffffffda RBX: 00007f94689e5fa0 RCX: 00007f946878f6c9 [ 192.230782][T16547] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 192.230788][T16547] RBP: 00007f9468811f91 R08: 0000000000000004 R09: 0000000000000000 [ 192.230795][T16547] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 192.230801][T16547] R13: 00007f94689e6038 R14: 00007f94689e5fa0 R15: 00007ffdc7707bf8 [ 192.230817][T16547] [ 192.230821][T16547] Mem-Info: [ 192.316175][T16547] active_anon:6730 inactive_anon:10882 isolated_anon:0 [ 192.316175][T16547] active_file:10286 inactive_file:49004 isolated_file:0 [ 192.316175][T16547] unevictable:18674 dirty:396 writeback:0 [ 192.316175][T16547] slab_reclaimable:7975 slab_unreclaimable:76041 [ 192.316175][T16547] mapped:23943 shmem:13707 pagetables:1514 [ 192.316175][T16547] sec_pagetables:307 bounce:0 [ 192.316175][T16547] kernel_misc_reclaimable:0 [ 192.316175][T16547] free:428189 free_pcp:6986 free_cma:0 [ 192.338362][T16547] Node 0 active_anon:27044kB inactive_anon:43528kB active_file:41080kB inactive_file:195796kB unevictable:71160kB isolated(anon):0kB isolated(file):0kB mapped:95712kB dirty:1576kB writeback:0kB shmem:51292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:13200kB pagetables:6120kB sec_pagetables:1228kB all_unreclaimable? no Balloon:0kB [ 192.352833][T16547] Node 1 active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:220kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 192.362801][T16547] Node 0 DMA free:6664kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:2452kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.372162][T16547] lowmem_reserve[]: 0 1239 1239 1239 1239 [ 192.374000][T16547] Node 0 DMA32 free:84800kB boost:2048kB min:29628kB low:36520kB high:43412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27044kB inactive_anon:43528kB active_file:38628kB inactive_file:195796kB unevictable:71160kB writepending:1576kB zspages:0kB present:2080628kB managed:1269472kB mlocked:0kB bounce:0kB free_pcp:29160kB local_pcp:6692kB free_cma:0kB [ 192.384708][T16547] lowmem_reserve[]: 0 0 0 0 0 [ 192.386461][T16547] Node 1 Normal free:1621804kB boost:0kB min:39660kB low:49572kB high:59484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:64kB inactive_file:220kB unevictable:3536kB writepending:8kB zspages:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.396429][T16547] lowmem_reserve[]: 0 0 0 0 0 [ 192.398152][T16547] Node 0 DMA: 8*4kB (UM) 5*8kB (UM) 6*16kB (UM) 13*32kB (UME) 7*64kB (UME) 10*128kB (UME) 3*256kB (UME) 1*512kB (E) 1*1024kB (E) 1*2048kB (M) 0*4096kB = 6664kB [ 192.404061][T16547] Node 0 DMA32: 582*4kB (UME) 437*8kB (UME) 656*16kB (UME) 676*32kB (UME) 204*64kB (UME) 89*128kB (UME) 47*256kB (UME) 40*512kB (UME) 16*1024kB (UM) 0*2048kB 0*4096kB = 111296kB [ 192.409723][T16547] Node 1 Normal: 21*4kB (UME) 37*8kB (UME) 39*16kB (UME) 166*32kB (UME) 74*64kB (UME) 26*128kB (UME) 11*256kB (UME) 10*512kB (UME) 2*1024kB (UM) 2*2048kB (M) 389*4096kB (UM) = 1621804kB [ 192.415351][T16547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.418696][T16547] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 192.421657][T16547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.424640][T16547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 192.427564][T16547] 89900 total pagecache pages [ 192.429477][T16547] 0 pages in swap cache [ 192.430806][T16547] Free swap = 124996kB [ 192.432147][T16547] Total swap = 124996kB [ 192.433458][T16547] 1048443 pages RAM [ 192.434682][T16547] 0 pages HighMem/MovableOnly [ 192.436122][T16547] 281762 pages reserved [ 192.437482][T16547] 0 pages cma reserved [ 192.537925][T16580] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4771'. [ 192.565920][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4773'. [ 192.570040][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4773'. [ 192.579042][ T40] audit: type=1400 audit(1762453577.801:1369): avc: denied { write } for pid=16585 comm="syz.1.4774" path="socket:[54534]" dev="sockfs" ino=54534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.808750][T16623] netlink: 'syz.4.4792': attribute type 29 has an invalid length. [ 192.813082][T16623] netlink: 'syz.4.4792': attribute type 29 has an invalid length. [ 193.536695][T16678] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 193.614759][T16684] tls_set_device_offload: netdev not found [ 193.760188][T16690] kvm: kvm [16689]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0xc1) = 0xffff8b7f [ 193.764036][T16690] kvm: kvm [16689]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0xc2) = 0xffff8b7f [ 195.319702][T16797] __nla_validate_parse: 1 callbacks suppressed [ 195.319714][T16797] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4866'. [ 195.451470][T16816] overlayfs: failed to clone upperpath [ 195.918076][T16851] netlink: 'syz.4.4886': attribute type 9 has an invalid length. [ 195.920567][T16851] netlink: 'syz.4.4886': attribute type 11 has an invalid length. [ 195.923123][T16851] netlink: 'syz.4.4886': attribute type 12 has an invalid length. [ 195.927786][T16851] netlink: 210060 bytes leftover after parsing attributes in process `syz.4.4886'. [ 195.930732][T16851] openvswitch: netlink: Message has 4 unknown bytes. [ 195.959774][T16853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4887'. [ 195.972144][T16853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4887'. [ 196.434135][T16887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4901'. [ 196.437820][T16887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4901'. [ 196.472581][T16891] trusted_key: syz.2.4902 sent an empty control message without MSG_MORE. [ 196.503487][ T40] audit: type=1326 audit(1762453581.476:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16897 comm="syz.2.4906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 196.515394][ T40] audit: type=1326 audit(1762453581.476:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16897 comm="syz.2.4906" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 196.531113][ T40] audit: type=1326 audit(1762453581.476:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16897 comm="syz.2.4906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 196.538752][ T40] audit: type=1326 audit(1762453581.476:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16897 comm="syz.2.4906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 196.550650][ T40] audit: type=1326 audit(1762453581.476:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16897 comm="syz.2.4906" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 196.559916][ T40] audit: type=1326 audit(1762453581.476:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16897 comm="syz.2.4906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 196.568078][ T40] audit: type=1326 audit(1762453581.476:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16897 comm="syz.2.4906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 196.576247][ T40] audit: type=1326 audit(1762453581.476:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16897 comm="syz.2.4906" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 196.584094][ T40] audit: type=1326 audit(1762453581.476:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16897 comm="syz.2.4906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 196.587961][T16906] kvm: user requested TSC rate below hardware speed [ 196.591614][ T40] audit: type=1326 audit(1762453581.476:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16897 comm="syz.2.4906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 196.607940][T16906] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 196.740432][T16922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4915'. [ 196.743492][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4915'. [ 196.746380][T16922] netlink: 'syz.2.4915': attribute type 6 has an invalid length. [ 196.806065][T16926] input: syz1 as /devices/virtual/input/input26 [ 196.862327][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4919'. [ 196.865595][T16930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4919'. [ 197.157658][T16967] netlink: 'syz.2.4934': attribute type 9 has an invalid length. [ 197.161183][T16967] netlink: 'syz.2.4934': attribute type 9 has an invalid length. [ 197.397324][T16989] netlink: 'syz.1.4945': attribute type 15 has an invalid length. [ 197.401032][T16989] netlink: 'syz.1.4945': attribute type 15 has an invalid length. [ 197.458816][T16993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.473935][T16993] bond2: (slave batadv1): Opening slave failed [ 197.518766][ T6009] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 197.679564][T17019] overlayfs: failed to clone upperpath [ 197.688954][ T6009] usb 7-1: Using ep0 maxpacket: 8 [ 197.693031][ T6009] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.696152][ T6009] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 197.698924][ T6009] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 197.702884][ T6009] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 197.706416][ T6009] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 197.709208][ T6009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.716080][ T6009] hub 7-1:1.0: bad descriptor, ignoring hub [ 197.718029][ T6009] hub 7-1:1.0: probe with driver hub failed with error -5 [ 197.720453][ T6009] cdc_wdm 7-1:1.0: skipping garbage [ 197.722178][ T6009] cdc_wdm 7-1:1.0: skipping garbage [ 197.726457][ T6009] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 197.728372][ T6009] cdc_wdm 7-1:1.0: Unknown control protocol [ 198.042365][ T6004] usb 7-1: USB disconnect, device number 17 [ 198.405206][ T6009] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 198.576450][ T6009] usb 7-1: Using ep0 maxpacket: 8 [ 198.580628][ T6009] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.584475][ T6009] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 198.588059][ T6009] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.593019][ T6009] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 198.596537][ T6009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.602631][ T6009] hub 7-1:1.0: bad descriptor, ignoring hub [ 198.604958][ T6009] hub 7-1:1.0: probe with driver hub failed with error -5 [ 198.607992][ T6009] cdc_wdm 7-1:1.0: skipping garbage [ 198.614716][ T6009] cdc_wdm 7-1:1.0: skipping garbage [ 198.616747][ T6009] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 198.703639][T17061] overlayfs: failed to clone upperpath [ 198.732895][T17064] netlink: 'syz.0.4976': attribute type 21 has an invalid length. [ 198.735872][T17064] netlink: 'syz.0.4976': attribute type 21 has an invalid length. [ 198.763568][T17068] ip6gre1: entered allmulticast mode [ 198.939948][ T6009] usb 7-1: USB disconnect, device number 18 [ 198.978360][T17085] "syz.4.4987" (17085) uses obsolete ecb(arc4) skcipher [ 199.009825][T17088] tls_set_device_offload_rx: netdev not found [ 199.175594][T17108] netlink: 'syz.1.4998': attribute type 4 has an invalid length. [ 199.185086][T17108] netlink: 'syz.1.4998': attribute type 4 has an invalid length. [ 199.894584][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.897309][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.258371][T17184] netlink: 'syz.4.5027': attribute type 1 has an invalid length. [ 200.269686][T17184] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.290015][T17184] bond2: (slave geneve2): making interface the new active one [ 200.298402][T17184] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 201.462856][T17265] __nla_validate_parse: 17 callbacks suppressed [ 201.462874][T17265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5061'. [ 201.477869][ T73] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.482304][ T73] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.507558][ T6009] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 201.553537][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'. [ 201.556410][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'. [ 201.565957][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'. [ 201.568860][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'. [ 201.586764][T17276] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.590733][T17276] bond3: (slave bond4): making interface the new active one [ 201.595289][T17276] bond3: (slave bond4): Enslaving as an active interface with an up link [ 201.653752][T17291] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.5073'. [ 201.708355][T17299] overlayfs: failed to clone upperpath [ 201.713616][T17303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5079'. [ 201.717146][T17303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5079'. [ 201.955223][ T5236] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.062134][ T5236] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 202.125629][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 202.125640][ T40] audit: type=1400 audit(1762453586.723:1386): avc: denied { setopt } for pid=17341 comm="syz.4.5096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 202.148256][T17346] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5098'. [ 202.151889][T17346] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5098'. [ 202.250577][T17356] validate_nla: 5 callbacks suppressed [ 202.250594][T17356] netlink: 'syz.1.5103': attribute type 30 has an invalid length. [ 202.325515][ T40] audit: type=1400 audit(1762453586.910:1387): avc: denied { watch_mount watch_reads } for pid=17364 comm="syz.2.5107" path="/863/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 202.519441][T17382] overlayfs: failed to clone upperpath [ 203.227647][T17417] netlink: 'syz.2.5129': attribute type 5 has an invalid length. [ 203.419325][ T40] audit: type=1400 audit(1762453587.929:1388): avc: denied { kexec_image_load } for pid=17426 comm="syz.0.5133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 203.543341][T17446] netlink: 'syz.0.5141': attribute type 14 has an invalid length. [ 203.546266][T17446] netlink: 'syz.0.5141': attribute type 14 has an invalid length. [ 203.619530][T17457] netlink: 'syz.4.5147': attribute type 1 has an invalid length. [ 203.700252][T17457] netlink: 'syz.4.5147': attribute type 1 has an invalid length. [ 204.756577][ T6001] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 204.918310][ T6001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.921771][ T6001] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.924868][ T6001] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 204.928675][ T6001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.932425][ T6001] usb 7-1: config 0 descriptor?? [ 205.370508][ T6001] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 205.380147][ T6001] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 205.388709][ T6001] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.000A/input/input27 [ 205.405996][ T6001] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 205.421401][T11312] syz_tun (unregistering): left promiscuous mode [ 205.590421][ T6001] usb 7-1: USB disconnect, device number 19 [ 205.679935][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.683047][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.685858][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.689366][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.691915][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.789037][T17557] chnl_net:caif_netlink_parms(): no params data found [ 205.855967][T17557] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.858395][T17557] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.860698][T17557] bridge_slave_0: entered allmulticast mode [ 205.863319][T17557] bridge_slave_0: entered promiscuous mode [ 205.866360][T17557] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.869116][T17557] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.871217][T17557] bridge_slave_1: entered allmulticast mode [ 205.873740][T17557] bridge_slave_1: entered promiscuous mode [ 205.904416][T17557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.908833][T17557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.955491][T17557] team0: Port device team_slave_0 added [ 205.959293][T17557] team0: Port device team_slave_1 added [ 205.964862][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.002242][T17557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.004440][T17557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.012880][T17557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.018107][T17557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.021200][T17557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.031165][T17557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.079654][T17557] hsr_slave_0: entered promiscuous mode [ 206.082166][T17557] hsr_slave_1: entered promiscuous mode [ 206.227411][T17557] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 206.231908][T17557] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 206.236747][T17557] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 206.240495][T17557] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 206.256693][T17557] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.259075][T17557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.261569][T17557] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.264195][T17557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.346485][T17557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.357147][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.361893][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.378345][T17557] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.408362][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.411009][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.417022][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.419355][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.538285][T17557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.656520][T17557] veth0_vlan: entered promiscuous mode [ 206.661960][T17557] veth1_vlan: entered promiscuous mode [ 206.680942][T17557] veth0_macvtap: entered promiscuous mode [ 206.686710][T17557] veth1_macvtap: entered promiscuous mode [ 206.696058][T17557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.706224][T17557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.714017][ T1145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.717586][ T1145] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.722959][ T1145] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.727862][ T1145] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.770622][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.773394][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.786580][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.789349][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.122353][T17647] netlink: 'syz.2.5220': attribute type 6 has an invalid length. [ 207.125603][T17647] __nla_validate_parse: 11 callbacks suppressed [ 207.125615][T17647] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5220'. [ 207.162139][T17653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5223'. [ 207.212003][T17660] syzkaller1: entered promiscuous mode [ 207.213690][T17660] syzkaller1: entered allmulticast mode [ 207.414248][ T40] audit: type=1400 audit(1762453591.670:1389): avc: denied { relabelfrom } for pid=17667 comm="syz.2.5229" name="" dev="pipefs" ino=57261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 207.444912][T17670] input: syz0 as /devices/virtual/input/input28 [ 207.750707][T17695] openvswitch: netlink: nsh attr 253 is out of range max 3 [ 207.753133][T17695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.858354][ T5297] Bluetooth: hci2: command tx timeout [ 207.924095][T17709] ref_ctr_offset mismatch. inode: 0x120b offset: 0x7 ref_ctr_offset(old): 0x200000000980 ref_ctr_offset(new): 0x24 [ 208.634315][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5262'. [ 208.682202][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5264'. [ 208.684997][T17747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5264'. [ 208.688215][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5264'. [ 208.690996][T17747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5264'. [ 208.804634][ T40] audit: type=1400 audit(1762453592.970:1390): avc: denied { execmem } for pid=17760 comm="syz.4.5271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 208.871953][T17768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5274'. [ 209.311377][ T40] audit: type=1400 audit(1762453593.447:1391): avc: denied { create } for pid=17793 comm="syz.5.5285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.313140][T17794] netlink: 596 bytes leftover after parsing attributes in process `syz.5.5285'. [ 209.319307][ T40] audit: type=1400 audit(1762453593.447:1392): avc: denied { write } for pid=17793 comm="syz.5.5285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.329744][ T40] audit: type=1400 audit(1762453593.447:1393): avc: denied { nlmsg_write } for pid=17793 comm="syz.5.5285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 209.336224][T17796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5286'. [ 209.448519][ T40] audit: type=1400 audit(1762453593.569:1394): avc: denied { add_name } for pid=17802 comm="syz.5.5289" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 209.456555][ T40] audit: type=1400 audit(1762453593.569:1395): avc: denied { create } for pid=17802 comm="syz.5.5289" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 209.549770][T17814] loop3: detected capacity change from 0 to 7 [ 209.554190][T17814] Dev loop3: unable to read RDB block 7 [ 209.556043][T17814] loop3: unable to read partition table [ 209.558547][T17814] loop3: partition table beyond EOD, truncated [ 209.561074][T17814] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 209.602042][ T40] audit: type=1400 audit(1762453593.718:1396): avc: denied { unmount } for pid=17557 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 209.912124][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 209.914863][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 209.959198][ T7356] libceph: connect (1)[b::]:6789 error -101 [ 209.961908][ T7356] libceph: mon0 (1)[b::]:6789 connect error [ 210.070807][ T5297] Bluetooth: hci2: command tx timeout [ 210.200595][ T6020] libceph: connect (1)[c::]:6789 error -101 [ 210.202598][ T6020] libceph: mon0 (1)[c::]:6789 connect error [ 210.242062][ T7356] libceph: connect (1)[b::]:6789 error -101 [ 210.244608][ T7356] libceph: mon0 (1)[b::]:6789 connect error [ 210.745432][ T155] libceph: connect (1)[c::]:6789 error -101 [ 210.747756][ T155] libceph: mon0 (1)[c::]:6789 connect error [ 210.784038][T17849] ceph: No mds server is up or the cluster is laggy [ 210.784126][T17852] ceph: No mds server is up or the cluster is laggy [ 210.787330][ T7356] libceph: connect (1)[b::]:6789 error -101 [ 210.791656][ T7356] libceph: mon0 (1)[b::]:6789 connect error [ 211.016700][T17908] Set syz1 is full, maxelem 14 reached [ 211.173288][T17914] loop2: detected capacity change from 0 to 7 [ 211.176345][T17914] Dev loop2: unable to read RDB block 7 [ 211.178774][T17914] loop2: AHDI p1 p2 p3 [ 211.180523][T17914] loop2: partition table partially beyond EOD, truncated [ 211.183601][T17914] loop2: p1 start 1601398130 is beyond EOD, truncated [ 211.186330][T17914] loop2: p2 start 1702059890 is beyond EOD, truncated [ 211.195020][ T40] audit: type=1800 audit(1762453595.215:1397): pid=17916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.5337" name="nullb0" dev="tmpfs" ino=3343 res=0 errno=0 [ 211.281435][T17922] ksmbd: Unknown IPC event: 3, ignore. [ 212.030866][T17942] 9pnet_fd: Insufficient options for proto=fd [ 212.219300][T17954] netlink: 'syz.0.5355': attribute type 22 has an invalid length. [ 212.227362][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.230046][T17954] netlink: 'syz.0.5355': attribute type 22 has an invalid length. [ 212.230650][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.235200][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.237914][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.295047][ T5297] Bluetooth: hci2: command tx timeout [ 212.865340][ T40] audit: type=1400 audit(1762453596.776:1398): avc: denied { bind } for pid=18006 comm="syz.0.5379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 212.866799][T18010] team0: left allmulticast mode [ 212.873355][T18010] team_slave_1: left allmulticast mode [ 213.023453][T18022] netlink: 'syz.5.5387': attribute type 1 has an invalid length. [ 213.025896][T18022] netlink: 'syz.5.5387': attribute type 3 has an invalid length. [ 213.028309][T18022] netlink: 'syz.5.5387': attribute type 3 has an invalid length. [ 213.064940][ T5297] Bluetooth: hci1: command 0x0406 tx timeout [ 213.922497][T18064] __nla_validate_parse: 5 callbacks suppressed [ 213.922513][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5402'. [ 213.928478][T18064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5402'. [ 213.932265][T18064] netlink: 'syz.0.5402': attribute type 20 has an invalid length. [ 213.935112][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5402'. [ 213.937891][T18064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5402'. [ 213.940816][T18064] netlink: 'syz.0.5402': attribute type 20 has an invalid length. [ 214.075002][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5409'. [ 214.078199][T18078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5409'. [ 214.087343][ T1148] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.089168][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5409'. [ 214.090268][ T1148] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.093361][T18078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5409'. [ 214.096139][ T1148] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.101580][ T1148] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.161173][ T40] audit: type=1400 audit(1762453597.983:1399): avc: denied { ioctl } for pid=18088 comm="syz.4.5414" path="socket:[57839]" dev="sockfs" ino=57839 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.530226][ T5946] Bluetooth: hci2: command tx timeout [ 214.601684][T18125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5429'. [ 214.605081][T18125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5429'. [ 214.668504][ T7356] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 214.840422][ T7356] usb 10-1: Using ep0 maxpacket: 32 [ 214.843308][ T7356] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 214.846511][ T7356] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 214.850178][ T7356] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.853983][ T7356] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 214.859598][ T7356] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 214.862737][ T7356] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.865233][ T7356] usb 10-1: Product: syz [ 214.866577][ T7356] usb 10-1: Manufacturer: syz [ 214.868068][ T7356] usb 10-1: SerialNumber: syz [ 214.875601][ C2] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 214.876025][T18141] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 214.879301][ T7356] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input29 [ 215.118257][ T7356] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 215.122102][ T7356] (id 0x00) [ 215.171178][ T7356] rc_core: IR keymap rc-imon-pad not found [ 215.173264][ T7356] Registered IR keymap rc-empty [ 215.175010][ T7356] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 215.179060][ T7356] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 215.226361][T18165] netlink: 'syz.2.5448': attribute type 1 has an invalid length. [ 215.229154][T18165] netlink: 'syz.2.5448': attribute type 4 has an invalid length. [ 215.332450][ T7356] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 215.337789][ T7356] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input30 [ 215.343045][ T7356] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:2> initialized [ 215.518485][ T7356] usb 10-1: USB disconnect, device number 2 [ 215.630880][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 215.936443][T18213] Bluetooth: hci0: invalid len left 7, exp >= 8 [ 217.214379][ T40] audit: type=1400 audit(1762453600.845:1400): avc: denied { unmount } for pid=18293 comm="syz.0.5504" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 217.239272][T18296] overlayfs: failed to clone upperpath [ 217.580797][ T40] audit: type=1400 audit(1762453601.181:1401): avc: denied { mount } for pid=18331 comm="syz.0.5520" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 217.959337][ T40] audit: type=1400 audit(1762453601.537:1402): avc: denied { remount } for pid=18357 comm="syz.0.5533" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 218.058583][T18377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18377 comm=syz.4.5542 [ 218.064949][T18377] netlink: 'syz.4.5542': attribute type 1 has an invalid length. [ 218.103481][T18377] bond5: (slave bridge2): making interface the new active one [ 218.107036][T18377] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 218.615908][ T40] audit: type=1400 audit(1762453602.154:1403): avc: denied { map } for pid=18431 comm="syz.5.5561" path="/69/file0/cpu.stat" dev="9p" ino=71827855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 218.667749][ T7590] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 218.719134][T18440] overlayfs: failed to clone upperpath [ 218.827900][ T7590] usb 7-1: Using ep0 maxpacket: 16 [ 219.046702][T18412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.050234][T18412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.057337][ T7590] usb 7-1: unable to get BOS descriptor or descriptor too short [ 219.063984][ T7590] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 219.066837][ T7590] usb 7-1: can't read configurations, error -71 [ 219.081182][T18469] xt_hashlimit: size too large, truncated to 1048576 [ 219.806927][ T40] audit: type=1400 audit(1762453603.267:1404): avc: denied { read } for pid=18486 comm="syz.2.5584" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 219.863869][ T40] audit: type=1400 audit(1762453603.314:1405): avc: denied { name_bind } for pid=18488 comm="syz.4.5585" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 219.864111][T18489] input: syz1 as /devices/virtual/input/input31 [ 220.279344][ T40] audit: type=1400 audit(1762453603.707:1406): avc: denied { mounton } for pid=18532 comm="syz.5.5603" path="/79/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 220.710764][ T40] audit: type=1400 audit(1762453604.109:1407): avc: denied { read } for pid=18562 comm="syz.2.5615" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 220.721177][ T40] audit: type=1400 audit(1762453604.109:1408): avc: denied { open } for pid=18562 comm="syz.2.5615" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 220.770891][T18568] overlayfs: failed to clone upperpath [ 220.876726][T18578] __nla_validate_parse: 3 callbacks suppressed [ 220.876738][T18578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5622'. [ 221.164854][T18533] overlayfs: statfs failed on './file0' [ 221.199173][T18607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5635'. [ 221.202688][T18607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5635'. [ 221.228439][T18611] bridge0: entered promiscuous mode [ 221.230221][T18615] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1782782363/1782782365 [ 221.233474][T18615] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1782782363/1782782365 [ 221.343522][T18630] geneve3: entered promiscuous mode [ 221.563421][T18663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5659'. [ 221.592484][T18670] xt_hashlimit: max too large, truncated to 1048576 [ 221.792343][T18695] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5664'. [ 221.837071][T18703] overlayfs: failed to clone upperpath [ 222.241915][T18741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5692'. [ 222.245723][T18741] netlink: 'syz.0.5692': attribute type 20 has an invalid length. [ 222.249149][T18741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5692'. [ 222.252941][T18741] netlink: 'syz.0.5692': attribute type 20 has an invalid length. [ 222.293815][ T40] audit: type=1800 audit(1762453605.596:1409): pid=18743 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.5693" name="loop4" dev="tmpfs" ino=8576 res=0 errno=0 [ 222.421674][T18751] netlink: 'syz.0.5696': attribute type 1 has an invalid length. [ 222.438018][T18751] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.454989][T18751] bond5: (slave gretap2): making interface the new active one [ 222.458395][T18751] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 222.597056][T18766] ipip0: entered promiscuous mode [ 223.050290][T18801] overlayfs: failed to get inode (-116) [ 223.055675][T18801] overlayfs: failed to get inode (-116) [ 223.076687][T18807] overlayfs: failed to clone upperpath [ 223.374596][T18835] netlink: 'syz.4.5734': attribute type 10 has an invalid length. [ 223.377002][T18835] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5734'. [ 223.379677][T18835] team0: entered promiscuous mode [ 223.381300][T18835] team_slave_1: entered promiscuous mode [ 223.384689][T18835] bridge0: port 3(team0) entered blocking state [ 223.386921][T18835] bridge0: port 3(team0) entered disabled state [ 223.388978][T18835] team0: entered allmulticast mode [ 223.390551][T18835] team_slave_1: entered allmulticast mode [ 223.394171][T18835] bridge0: port 3(team0) entered blocking state [ 223.396197][T18835] bridge0: port 3(team0) entered forwarding state [ 223.592258][T18848] could not allocate digest TFM handle cryptd(blake2b-160) [ 223.651306][T18860] overlayfs: failed to clone upperpath [ 224.270652][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 224.393983][T18875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5748'. [ 225.255313][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5777'. [ 225.342291][T18950] gtp1: entered promiscuous mode [ 226.424477][T19001] all: renamed from lo (while UP) [ 226.454268][T19003] __nla_validate_parse: 1 callbacks suppressed [ 226.454280][T19003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5799'. [ 226.611144][T19009] traps: syz.2.5802[19009] attempts to use CLI/STI, pretending it's a NOP, ip:200000000002 in dev/zero[2,200000000000+b36000] [ 226.669668][ T40] audit: type=1400 audit(1762453609.683:1410): avc: denied { read write } for pid=19019 comm="syz.2.5807" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 226.678068][ T40] audit: type=1400 audit(1762453609.683:1411): avc: denied { open } for pid=19019 comm="syz.2.5807" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 226.685112][ T40] audit: type=1400 audit(1762453609.683:1412): avc: denied { map } for pid=19019 comm="syz.2.5807" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 226.692444][ T40] audit: type=1400 audit(1762453609.683:1413): avc: denied { execute } for pid=19019 comm="syz.2.5807" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 226.979899][T19052] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5819'. [ 227.087673][T19066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.091061][T19066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.209865][T19066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.214840][T19066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.299211][T19066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.302524][T19066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.437566][T19066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.441662][T19066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.519871][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.522604][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.530547][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.533251][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.542794][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.545388][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.552619][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.555505][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.679185][T19075] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5829'. [ 228.076719][T19110] overlayfs: failed to clone upperpath [ 228.132053][T19116] overlayfs: failed to clone upperpath [ 228.164201][T19122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5850'. [ 228.192350][T19125] netlink: 'syz.4.5851': attribute type 7 has an invalid length. [ 228.194968][T19125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5851'. [ 228.278282][T19131] VFS: Mount too revealing [ 228.522491][T19152] can0: slcan on ttyS3. [ 228.784175][ T61] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 228.943260][ T61] usb 7-1: Using ep0 maxpacket: 32 [ 228.946139][ T61] usb 7-1: config index 0 descriptor too short (expected 5138, got 18) [ 228.948811][ T61] usb 7-1: config 5 has too many interfaces: 108, using maximum allowed: 32 [ 228.951507][ T61] usb 7-1: config 5 has an invalid descriptor of length 185, skipping remainder of the config [ 228.955004][ T61] usb 7-1: config 5 has 0 interfaces, different from the descriptor's value: 108 [ 228.959485][ T61] usb 7-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=77.d6 [ 228.962467][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.965732][ T61] usb 7-1: Product: syz [ 228.967086][ T61] usb 7-1: Manufacturer: syz [ 228.968510][ T61] usb 7-1: SerialNumber: syz [ 229.189317][ T61] usb 7-1: USB disconnect, device number 22 [ 229.264070][T19151] can0 (unregistered): slcan off ttyS3. [ 229.584695][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 229.584896][ T5297] Bluetooth: hci4: command 0x1003 tx timeout [ 230.133577][ T40] audit: type=1400 audit(1762453612.919:1414): avc: denied { bind } for pid=19189 comm="syz.2.5875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 230.139660][ T40] audit: type=1400 audit(1762453612.919:1415): avc: denied { listen } for pid=19189 comm="syz.2.5875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 230.145841][ T40] audit: type=1400 audit(1762453612.919:1416): avc: denied { accept } for pid=19189 comm="syz.2.5875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 230.358662][T19203] binder: 19202:19203 ioctl c0306201 200000000040 returned -14 [ 230.392468][T19213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5885'. [ 230.392744][T19211] netlink: 'syz.5.5884': attribute type 13 has an invalid length. [ 230.395340][T19213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5885'. [ 230.409551][T19209] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 230.440667][T19213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5885'. [ 230.443621][T19213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5885'. [ 230.568426][T19231] netlink: 'syz.0.5894': attribute type 1 has an invalid length. [ 230.597557][T19231] bond6: (slave geneve2): making interface the new active one [ 230.601230][T19231] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 230.604733][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 230.608013][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 230.610933][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 230.615352][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 230.661658][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5900'. [ 230.724137][T19257] o2cb: This node has not been configured. [ 230.725982][T19257] o2cb: Cluster check failed. Fix errors before retrying. [ 230.728208][T19257] (syz.4.5903,19257,3):user_dlm_register:674 ERROR: status = -22 [ 230.730922][T19257] (syz.4.5903,19257,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 231.006272][T19277] overlayfs: failed to clone upperpath [ 231.077163][T19281] gtp0: entered promiscuous mode [ 231.138495][ T7101] libceph: connect (1)[c::]:6789 error -22 [ 231.140483][ T7101] libceph: mon0 (1)[c::]:6789 connect error [ 231.220229][ T6004] libceph: connect (1)[c::]:6789 error -22 [ 231.222239][ T6004] libceph: mon0 (1)[c::]:6789 connect error [ 231.413654][ T7101] libceph: connect (1)[c::]:6789 error -22 [ 231.415637][ T7101] libceph: mon0 (1)[c::]:6789 connect error [ 231.499452][ T6004] libceph: connect (1)[c::]:6789 error -22 [ 231.501374][ T6004] libceph: mon0 (1)[c::]:6789 connect error [ 231.511510][T19314] netlink: 'syz.5.5924': attribute type 1 has an invalid length. [ 231.531159][T19314] bond1: (slave geneve2): making interface the new active one [ 231.533940][T19314] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 231.536770][ T13] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 231.539899][ T13] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 231.543961][ T59] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 231.546757][ T59] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 231.768190][T19331] netlink: 'syz.0.5931': attribute type 1 has an invalid length. [ 231.771217][T19331] netlink: 'syz.0.5931': attribute type 4 has an invalid length. [ 231.969445][ T7101] libceph: connect (1)[c::]:6789 error -22 [ 231.971539][ T7101] libceph: mon0 (1)[c::]:6789 connect error [ 231.983029][T19289] ceph: No mds server is up or the cluster is laggy [ 231.983433][T19299] ceph: No mds server is up or the cluster is laggy [ 232.100924][T19346] __nla_validate_parse: 2 callbacks suppressed [ 232.100936][T19346] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5938'. [ 232.399181][T19364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5945'. [ 232.467145][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5948'. [ 232.472816][T19371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5948'. [ 232.824619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 232.868345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 233.056275][T19425] overlayfs: failed to clone upperpath [ 233.066494][T19424] overlayfs: failed to get inode (-116) [ 233.068869][T19424] overlayfs: failed to get inode (-116) [ 233.181478][T19437] netlink: 'syz.0.5977': attribute type 1 has an invalid length. [ 233.196891][T19437] gretap3: entered promiscuous mode [ 233.200281][T19437] bond7: (slave gretap3): making interface the new active one [ 233.203102][T19437] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 233.239834][T19449] netlink: 'syz.0.5981': attribute type 2 has an invalid length. [ 233.243979][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5981'. [ 233.247395][T19449] netlink: 'syz.0.5981': attribute type 2 has an invalid length. [ 233.252407][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5981'. [ 233.341837][T19461] netlink: 'syz.4.5987': attribute type 5 has an invalid length. [ 233.352686][T19467] syzkaller0: entered promiscuous mode [ 233.354448][T19467] syzkaller0: entered allmulticast mode [ 233.366549][T19470] overlayfs: failed to clone upperpath [ 233.419366][T19476] bond8: (slave bridge0): making interface the new active one [ 233.422049][T19476] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 233.598253][T19495] uprobe: syz.5.6000:19495 failed to unregister, leaking uprobe [ 233.679420][T19503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6001'. [ 233.683480][T19503] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6001'. [ 233.711425][T19509] Bluetooth: hci0: unsupported parameter 255 [ 233.713788][T19509] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 233.849698][T19518] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6008'. [ 234.107614][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 234.894532][ T40] audit: type=1400 audit(1762453617.370:1417): avc: denied { watch } for pid=19547 comm="syz.2.6022" path="/1061/file0/control" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 235.037463][T19556] validate_nla: 1 callbacks suppressed [ 235.037475][T19556] netlink: 'syz.2.6025': attribute type 4 has an invalid length. [ 235.041480][T19556] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6025'. [ 235.764956][ T6009] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 235.822843][ T40] audit: type=1400 audit(1762453618.240:1418): avc: denied { load_policy } for pid=19578 comm="syz.5.6034" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 235.824018][T19579] SELinux: failed to load policy [ 235.951910][ T6009] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 235.955374][ T6009] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 235.960052][ T6009] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.964140][ T6009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.967099][T19586] overlayfs: overlapping lowerdir path [ 235.968818][T19575] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 235.971630][T19575] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 235.975562][T19586] overlayfs: failed to verify upper (166/file0, ino=901, err=-116) [ 235.975967][ T6009] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.978512][T19586] overlayfs: failed to verify index dir 'upper' xattr [ 235.978529][T19586] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 235.997136][T19586] overlayfs: failed to verify upper root origin [ 236.193351][ T7101] usb 7-1: USB disconnect, device number 23 [ 236.278361][ T6001] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 236.441569][ T6001] usb 10-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 236.444582][ T6001] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.447474][ T6001] usb 10-1: Product: syz [ 236.449092][ T6001] usb 10-1: Manufacturer: syz [ 236.451596][ T6001] usb 10-1: SerialNumber: syz [ 236.455439][ T6001] usb 10-1: config 0 descriptor?? [ 236.684316][ T155] usb 10-1: USB disconnect, device number 3 [ 236.762544][ T40] audit: type=1400 audit(1762453619.119:1419): avc: denied { setopt } for pid=19637 comm="syz.0.6058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 236.851282][T19648] overlayfs: failed to clone upperpath [ 237.077605][T19677] netlink: 'syz.0.6074': attribute type 1 has an invalid length. [ 237.101174][T19677] 8021q: adding VLAN 0 to HW filter on device bond9 [ 237.108960][T19677] bond9: (slave erspan0): making interface the new active one [ 237.112947][T19677] bond9: (slave erspan0): Enslaving as an active interface with an up link [ 237.176504][ T40] audit: type=1400 audit(1762453619.512:1420): avc: denied { read write } for pid=19689 comm="syz.0.6079" name="file0" dev="tmpfs" ino=9090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 237.183540][ T40] audit: type=1400 audit(1762453619.512:1421): avc: denied { open } for pid=19689 comm="syz.0.6079" path="/1763/file0" dev="tmpfs" ino=9090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 237.191073][ T40] audit: type=1400 audit(1762453619.512:1422): avc: denied { ioctl } for pid=19689 comm="syz.0.6079" path="/1763/file0" dev="tmpfs" ino=9090 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 237.656730][T19707] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 237.694157][T19709] netlink: 'syz.5.6088': attribute type 1 has an invalid length. [ 237.696695][T19709] netlink: 'syz.5.6088': attribute type 4 has an invalid length. [ 237.699573][T19709] __nla_validate_parse: 2 callbacks suppressed [ 237.699581][T19709] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.6088'. [ 237.710969][T19709] netlink: 'syz.5.6088': attribute type 1 has an invalid length. [ 237.714185][T19709] netlink: 'syz.5.6088': attribute type 4 has an invalid length. [ 237.717089][T19709] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.6088'. [ 237.905103][T19726] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 237.912066][T19735] overlayfs: failed to clone upperpath [ 238.099412][T19753] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6107'. [ 238.181223][T19766] xt_hashlimit: size too large, truncated to 1048576 [ 238.200677][T19769] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6114'. [ 238.323148][T19780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6118'. [ 238.742857][T19809] netlink: 750 bytes leftover after parsing attributes in process `syz.0.6125'. [ 238.805477][T19811] cgroup: Setting release_agent not allowed [ 239.211142][ T40] audit: type=1400 audit(1762453621.410:1423): avc: denied { mounton } for pid=19836 comm="syz.2.6138" path="/file0" dev="ramfs" ino=67619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 239.214175][T19837] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 239.220616][T19837] overlayfs: failed to set xattr on upper [ 239.223000][T19837] overlayfs: ...falling back to redirect_dir=nofollow. [ 239.225745][T19837] overlayfs: ...falling back to index=off. [ 239.229022][T19837] overlayfs: ...falling back to uuid=null. [ 239.233973][T19837] overlayfs: ...falling back to xino=off. [ 239.236373][T19837] overlayfs: conflicting lowerdir path [ 239.283767][T19843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6140'. [ 239.360109][T19853] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 239.467072][T19862] netlink: 'syz.5.6148': attribute type 10 has an invalid length. [ 240.388370][T19862] bond0: (slave bond_slave_0): Releasing backup interface [ 240.482023][T19887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6158'. [ 240.547101][ T40] audit: type=1400 audit(1762453622.654:1424): avc: denied { read } for pid=19882 comm="syz.5.6160" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 240.554266][T19893] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 240.561005][ T40] audit: type=1400 audit(1762453622.654:1425): avc: denied { open } for pid=19882 comm="syz.5.6160" path="/186/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 240.564879][T19893] block device autoloading is deprecated and will be removed. [ 240.591295][ T40] audit: type=1400 audit(1762453622.692:1426): avc: denied { ioctl } for pid=19882 comm="syz.5.6160" path="/186/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 240.606750][T19904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.743782][T19917] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6173'. [ 240.999553][ T40] audit: type=1400 audit(1762453623.085:1427): avc: denied { read write } for pid=19928 comm="syz.5.6178" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 241.006681][ T40] audit: type=1400 audit(1762453623.085:1428): avc: denied { open } for pid=19928 comm="syz.5.6178" path="/191/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 241.015578][ T40] audit: type=1400 audit(1762453623.085:1429): avc: denied { ioctl } for pid=19928 comm="syz.5.6178" path="/191/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 241.053529][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6179'. [ 241.782593][T19978] kvm: emulating exchange as write [ 241.910889][ T40] audit: type=1400 audit(1762453623.936:1430): avc: denied { write } for pid=19989 comm="syz.2.6203" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 241.941570][T19994] netlink: 'syz.2.6205': attribute type 1 has an invalid length. [ 241.954150][T19994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.971494][T19994] bond2: (slave ip6erspan0): making interface the new active one [ 241.974815][T19994] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 242.109660][T20009] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 242.312411][ T40] audit: type=1400 audit(1762453624.310:1431): avc: denied { write } for pid=20034 comm="syz.0.6224" lport=52170 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 242.420329][T20046] overlayfs: failed to clone upperpath [ 243.168290][ T40] audit: type=1400 audit(1762453625.114:1432): avc: denied { cmd } for pid=20086 comm="syz.4.6246" path="socket:[67071]" dev="sockfs" ino=67071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 243.433111][T20096] __nla_validate_parse: 5 callbacks suppressed [ 243.433124][T20096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6250'. [ 243.437885][T20096] bond0: option prio: mode dependency failed, not supported in mode balance-rr(0) [ 243.477417][ T40] audit: type=1800 audit(1762453625.404:1433): pid=20105 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.6254" name="bus" dev="tmpfs" ino=8055 res=0 errno=0 [ 243.616208][T20125] overlayfs: failed to clone upperpath [ 243.698787][ T7101] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 243.722309][T20139] overlayfs: upper fs does not support tmpfile. [ 243.779860][T20149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6274'. [ 243.783053][T20149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6274'. [ 243.869822][ T7101] usb 7-1: Using ep0 maxpacket: 8 [ 243.872693][ T7101] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.876143][ T7101] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.879271][ T7101] usb 7-1: config 0 interface 0 has no altsetting 0 [ 243.882241][ T7101] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 243.885029][ T7101] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.888888][ T7101] usb 7-1: config 0 descriptor?? [ 244.328933][ T7101] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 244.419961][T20182] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 244.523358][T20200] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 244.542926][ T61] usb 7-1: USB disconnect, device number 24 [ 244.597234][T20205] overlayfs: failed to clone upperpath [ 244.808805][T20229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.813035][T20229] batadv_slave_0: entered promiscuous mode [ 244.884462][ T6004] libceph: connect (1)[c::]:6789 error -101 [ 244.887025][ T6004] libceph: mon0 (1)[c::]:6789 connect error [ 244.991736][T20235] ceph: No mds server is up or the cluster is laggy [ 245.402988][T20291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6334'. [ 245.406607][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6334'. [ 245.870319][T20323] evm: overlay not supported [ 246.035142][T20333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6353'. [ 246.039233][T20333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6353'. [ 246.272011][T20348] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 246.299806][T20352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6362'. [ 246.758612][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 246.758622][ T40] audit: type=1400 audit(1762453628.471:1437): avc: denied { write } for pid=20392 comm="syz.2.6381" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 246.819404][ T40] audit: type=1400 audit(1762453628.518:1438): avc: denied { getattr } for pid=20408 comm="syz.2.6387" name="/" dev="9p" ino=71827653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 246.822155][T20409] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 246.845432][ T40] audit: type=1400 audit(1762453628.556:1439): avc: denied { rename } for pid=20408 comm="syz.2.6387" name="file0" dev="overlay" ino=71827657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.852843][ T40] audit: type=1400 audit(1762453628.556:1440): avc: denied { write open } for pid=20408 comm="syz.2.6387" path=2F202864656C6574656429 dev="tmpfs" ino=5855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.861634][ T40] audit: type=1400 audit(1762453628.556:1441): avc: denied { read } for pid=20408 comm="syz.2.6387" name="file0" dev="9p" ino=71827657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.869086][ T40] audit: type=1400 audit(1762453628.556:1442): avc: denied { open } for pid=20408 comm="syz.2.6387" path="/file0" dev="9p" ino=71827657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.877652][ T40] audit: type=1400 audit(1762453628.565:1443): avc: denied { setattr } for pid=20408 comm="syz.2.6387" name="#5855" dev="tmpfs" ino=5855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.887362][ T40] audit: type=1400 audit(1762453628.565:1444): avc: denied { read } for pid=20408 comm="syz.2.6387" dev="tmpfs" ino=5855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.895382][ T40] audit: type=1400 audit(1762453628.565:1445): avc: denied { link } for pid=20408 comm="syz.2.6387" name="#5855" dev="tmpfs" ino=5855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.904126][ T40] audit: type=1400 audit(1762453628.612:1446): avc: denied { unlink } for pid=8077 comm="syz-executor" name="bus" dev="tmpfs" ino=5855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 246.985206][T20426] netlink: 'syz.4.6397': attribute type 12 has an invalid length. [ 247.078888][T20440] ip6tnl1: entered promiscuous mode [ 247.109203][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6412'. [ 247.115371][T20444] veth0_macvtap: left promiscuous mode [ 247.281835][T20455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6408'. [ 247.417846][ T5932] cgroup: fork rejected by pids controller in /syz0 [ 247.770814][ T5297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.775087][ T5297] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.778143][ T5297] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.781510][ T5297] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.785871][ T5297] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.917860][T20492] chnl_net:caif_netlink_parms(): no params data found [ 248.992893][T20492] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.995206][T20492] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.997527][T20492] bridge_slave_0: entered allmulticast mode [ 249.000166][T20492] bridge_slave_0: entered promiscuous mode [ 249.003770][T20492] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.005966][T20492] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.008118][T20492] bridge_slave_1: entered allmulticast mode [ 249.010663][T20492] bridge_slave_1: entered promiscuous mode [ 249.043792][T20492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.048933][T20492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.082497][T20492] team0: Port device team_slave_0 added [ 249.085846][T20492] team0: Port device team_slave_1 added [ 249.128602][T20492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.131377][T20492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.139246][T20492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.144085][T20492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.146228][T20492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.156511][T20492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.194561][T20492] hsr_slave_0: entered promiscuous mode [ 249.197151][T20492] hsr_slave_1: entered promiscuous mode [ 249.199302][T20492] debugfs: 'hsr0' already exists in 'hsr' [ 249.201059][T20492] Cannot create hsr debugfs directory [ 249.300415][T20492] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.303763][T20492] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 249.381906][T20492] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.385270][T20492] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 249.477371][T20492] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.480453][T20492] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 249.554207][T20492] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.557291][T20492] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 249.664938][T20492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.670743][T20492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.675181][T20492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.687996][T20492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.709770][T20492] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.712152][T20492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.714421][T20492] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.716650][T20492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.755746][T20492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.768909][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.773972][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.793255][T20492] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.806500][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.809470][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.816232][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.817152][T20554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6449'. [ 249.818441][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.958375][T20492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.993143][T20492] veth0_vlan: entered promiscuous mode [ 250.001254][T20492] veth1_vlan: entered promiscuous mode [ 250.018377][ T5946] Bluetooth: hci0: command tx timeout [ 250.025869][T20492] veth0_macvtap: entered promiscuous mode [ 250.030316][T20492] veth1_macvtap: entered promiscuous mode [ 250.042217][T20563] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.6451'. [ 250.045161][T20492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.046190][T20563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6451'. [ 250.053416][T20492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.060451][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.064962][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.069131][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.072281][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.112315][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.115634][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.131527][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.134120][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.202966][T20568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.205191][T20568] IPv6: NLM_F_CREATE should be set when creating new route [ 250.498338][T20593] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6464'. [ 250.767238][T20606] netlink: 'syz.5.6470': attribute type 5 has an invalid length. [ 250.795048][T20613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6473'. [ 250.846289][T20617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6475'. [ 250.919990][T20627] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6479'. [ 251.184703][T20663] bridge_slave_0: left allmulticast mode [ 251.186547][T20663] bridge_slave_0: left promiscuous mode [ 251.188894][T20663] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.193511][T20663] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.201342][T20663] bond0: (slave bond_slave_0): Releasing backup interface [ 251.206488][ T6009] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 251.218370][T20663] bond0: (slave bond_slave_1): Releasing backup interface [ 251.231067][T20663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.234564][T20663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.241417][T20663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.244407][T20663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.249570][T20663] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 251.399409][ T6009] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 251.402237][ T6009] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.404779][ T6009] usb 10-1: Product: syz [ 251.406139][ T6009] usb 10-1: Manufacturer: syz [ 251.407687][ T6009] usb 10-1: SerialNumber: syz [ 251.412410][ T6009] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 251.424449][ T5236] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 251.503833][T20676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6499'. [ 252.233615][T20697] overlayfs: failed to clone upperpath [ 252.242471][ T5946] Bluetooth: hci0: command tx timeout [ 252.584615][ T5236] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 252.587089][ T5236] ath9k_htc: Failed to initialize the device [ 252.608230][ T5236] usb 10-1: ath9k_htc: USB layer deinitialized [ 253.072316][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 253.072327][ T40] audit: type=1326 audit(1762453634.373:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20719 comm="syz.0.6519" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a4118f6c9 code=0x0 [ 253.143740][ T7356] usb 10-1: USB disconnect, device number 4 [ 253.351693][ T40] audit: type=1800 audit(1762453634.635:1453): pid=20726 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.6521" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=72016 res=0 errno=0 [ 253.363564][ T40] audit: type=1800 audit(1762453634.635:1454): pid=20726 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.6521" name=6E73BF12E10BC845E0807291376B6A9C4CCE5A99F85125232DD3D213E8DCE1FDDEEFF2A7D2AB97C26527FC108503 dev="overlay" ino=72016 res=0 errno=0 þÿÿÿ [ 253.737419][T20764] xt_hashlimit: max too large, truncated to 1048576 [ 253.777486][T20773] xt_hashlimit: size too large, truncated to 1048576 [ 253.927031][T20788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.929454][T20788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.934200][T20788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.936552][T20788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.116136][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 254.265252][T20794] md: could not open device unknown-block(0,0). [ 254.267747][T20794] md: md_import_device returned -6 [ 254.276863][ T9] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 254.279892][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.282473][ T9] usb 10-1: Product: syz [ 254.283887][ T9] usb 10-1: Manufacturer: syz [ 254.286092][ T9] usb 10-1: SerialNumber: syz [ 254.291288][ T9] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 254.301944][ T9] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 254.367061][ T40] audit: type=1400 audit(1762453635.579:1455): avc: denied { append } for pid=20798 comm="syz.2.6553" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 254.466288][ T5946] Bluetooth: hci0: command tx timeout [ 254.498856][T20807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6556'. [ 255.410498][ T9] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 255.412923][ T9] ath9k_htc: Failed to initialize the device [ 255.437337][ T9] usb 10-1: ath9k_htc: USB layer deinitialized [ 255.752485][T20838] batman_adv: batadv0: Adding interface: dummy0 [ 255.754515][T20838] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.762281][T20838] batman_adv: batadv0: Interface activated: dummy0 [ 255.772554][T20840] batadv0: mtu less than device minimum [ 255.774866][T20840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.778796][T20840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.782577][T20840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.786223][T20840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.789898][T20840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.793717][T20840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.797381][T20840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 255.801054][T20840] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.043517][T20859] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 256.045781][T20859] overlayfs: failed to set xattr on upper [ 256.047589][T20859] overlayfs: ...falling back to redirect_dir=nofollow. [ 256.049943][T20859] overlayfs: ...falling back to metacopy=off. [ 256.051893][T20859] overlayfs: ...falling back to index=off. [ 256.053711][T20859] overlayfs: ...falling back to uuid=null. [ 256.085982][ T40] audit: type=1400 audit(1762453637.197:1456): avc: denied { execute } for pid=20860 comm="syz.2.6578" name="file1" dev="ramfs" ino=69969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 256.093495][ T40] audit: type=1400 audit(1762453637.197:1457): avc: denied { execute_no_trans } for pid=20860 comm="syz.2.6578" path="/file1" dev="ramfs" ino=69969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 256.274903][T20869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6582'. [ 256.454582][T20884] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 256.458382][T20884] overlayfs: failed to set xattr on upper [ 256.460431][T20884] overlayfs: ...falling back to redirect_dir=nofollow. [ 256.462724][T20884] overlayfs: ...falling back to index=off. [ 256.464549][T20884] overlayfs: ...falling back to uuid=null. [ 256.466952][T20884] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 256.499685][T20890] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6592'. [ 256.690276][ T5946] Bluetooth: hci0: command tx timeout [ 256.711873][ T6001] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 256.873422][ T6001] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 256.876134][ T6001] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.880325][ T6001] usb 7-1: config 0 has no interfaces? [ 256.882138][ T6001] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 256.885139][ T6001] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.889118][ T6001] usb 7-1: config 0 descriptor?? [ 257.048820][T20909] overlayfs: failed to clone upperpath [ 257.283162][ T9] usb 10-1: USB disconnect, device number 5 [ 259.199296][T20947] netlink: 'syz.4.6614': attribute type 6 has an invalid length. [ 259.201476][T20947] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6614'. [ 259.298931][T20954] overlayfs: failed to clone upperpath [ 259.392698][ T40] audit: type=1400 audit(1762453640.283:1458): avc: denied { watch watch_reads } for pid=20960 comm="syz.0.6621" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 259.608754][ T6001] usb 7-1: USB disconnect, device number 25 [ 259.687771][T20988] gre0: entered allmulticast mode [ 259.691682][T20988] gre0: left allmulticast mode [ 259.773944][T20992] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2898581692 (23188653536 ns) > initial count (6059612160 ns). Using initial count to start timer. [ 260.360462][ T40] audit: type=1400 audit(1762453641.191:1459): avc: denied { create } for pid=21012 comm="syz.4.6640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 260.790042][ T40] audit: type=1400 audit(1762453641.593:1460): avc: denied { mounton } for pid=21034 comm="syz.5.6650" path="/287/file0" dev="tmpfs" ino=1617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 261.607487][T21050] : entered promiscuous mode [ 261.687271][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6658'. [ 262.141772][T21081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6668'. [ 262.144612][T21081] netlink: 'syz.2.6668': attribute type 7 has an invalid length. [ 262.147001][T21081] netlink: 'syz.2.6668': attribute type 8 has an invalid length. [ 262.149417][T21081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6668'. [ 262.469297][T21097] syzkaller1: entered promiscuous mode [ 262.471085][T21097] syzkaller1: entered allmulticast mode [ 262.736302][ T40] audit: type=1326 audit(1762453643.416:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21105 comm="syz.2.6679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 262.743475][ T40] audit: type=1326 audit(1762453643.416:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21105 comm="syz.2.6679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 262.751158][ T40] audit: type=1326 audit(1762453643.416:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21105 comm="syz.2.6679" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 262.758311][ T40] audit: type=1326 audit(1762453643.416:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21105 comm="syz.2.6679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 262.766148][ T40] audit: type=1326 audit(1762453643.416:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21105 comm="syz.2.6679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 262.773609][ T40] audit: type=1326 audit(1762453643.416:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21105 comm="syz.2.6679" exe="/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 262.783910][ T40] audit: type=1326 audit(1762453643.426:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21105 comm="syz.2.6679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160d98f6c9 code=0x7ffc0000 [ 262.855135][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6681'. [ 263.323343][T21125] netlink: 'syz.4.6687': attribute type 1 has an invalid length. [ 263.337474][T21125] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.895718][ T5946] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 264.131382][T21158] lo: entered allmulticast mode [ 264.134742][T21158] tunl0: entered allmulticast mode [ 264.137338][T21158] gre0: entered allmulticast mode [ 264.148037][T21158] erspan0: entered allmulticast mode [ 264.154361][T21158] ip_vti0: entered allmulticast mode [ 264.156805][T21158] ip6_vti0: entered allmulticast mode [ 264.159172][T21158] sit0: entered allmulticast mode [ 264.161856][T21158] ip6tnl0: entered allmulticast mode [ 264.165521][T21158] ip6gre0: entered allmulticast mode [ 264.167854][T21158] syz_tun: entered allmulticast mode [ 264.174339][T21158] ip6gretap0: entered allmulticast mode [ 264.180598][T21158] bridge0: entered allmulticast mode [ 264.183516][T21158] vcan0: entered allmulticast mode [ 264.186232][T21158] bond0: entered allmulticast mode [ 264.187962][T21158] bond_slave_0: entered allmulticast mode [ 264.189822][T21158] bond_slave_1: entered allmulticast mode [ 264.199499][T21158] dummy0: entered allmulticast mode [ 264.202267][T21158] nlmon0: entered allmulticast mode [ 264.204767][T21158] caif0: entered allmulticast mode [ 264.206549][T21158] batadv0: entered allmulticast mode [ 264.210641][T21158] veth0: entered allmulticast mode [ 264.213763][T21158] veth1: entered allmulticast mode [ 264.216810][T21158] wg0: entered allmulticast mode [ 264.219641][T21158] wg1: entered allmulticast mode [ 264.221710][T21158] wg2: entered allmulticast mode [ 264.223883][T21158] veth0_to_bridge: entered allmulticast mode [ 264.228096][T21158] veth1_to_bridge: entered allmulticast mode [ 264.236051][T21158] veth0_to_bond: entered allmulticast mode [ 264.240471][T21158] veth1_to_bond: entered allmulticast mode [ 264.243079][T21158] veth1_to_team: entered allmulticast mode [ 264.247366][T21158] veth0_to_batadv: entered allmulticast mode [ 264.250157][T21158] batadv_slave_0: entered allmulticast mode [ 264.252296][T21158] xfrm0: entered allmulticast mode [ 264.254649][T21158] veth0_to_hsr: entered allmulticast mode [ 264.257946][T21158] hsr_slave_0: entered allmulticast mode [ 264.261446][T21158] veth1_to_hsr: entered allmulticast mode [ 264.264657][T21158] hsr_slave_1: entered allmulticast mode [ 264.268072][T21158] hsr0: entered allmulticast mode [ 264.270232][T21158] veth1_virt_wifi: entered allmulticast mode [ 264.274245][T21158] veth0_virt_wifi: entered allmulticast mode [ 264.277536][T21158] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 264.279975][T21158] veth1_vlan: entered allmulticast mode [ 264.283272][T21158] veth0_vlan: entered allmulticast mode [ 264.286265][T21158] vlan0: entered allmulticast mode [ 264.288265][T21158] vlan1: entered allmulticast mode [ 264.291155][T21158] macvlan0: entered allmulticast mode [ 264.294749][T21158] macvlan1: entered allmulticast mode [ 264.296994][T21158] ipvlan0: entered allmulticast mode [ 264.298833][T21158] ipvlan1: entered allmulticast mode [ 264.300648][T21158] veth1_macvtap: entered allmulticast mode [ 264.304407][T21158] veth0_macvtap: entered allmulticast mode [ 264.307693][T21158] macsec0: entered allmulticast mode [ 264.310095][T21158] geneve0: entered allmulticast mode [ 264.312701][T21158] geneve1: entered allmulticast mode [ 264.315139][T21158] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 264.317995][T21158] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 264.321071][T21158] vxlan0: entered allmulticast mode [ 264.322937][T21158] ip6tnl1: entered allmulticast mode [ 264.324892][T21158] macsec2: entered allmulticast mode [ 264.328961][T21158] macvlan2: entered allmulticast mode [ 264.331016][T21158] mac80211_hwsim hwsim12 nicvf0: entered allmulticast mode [ 264.334337][T21158] bond1: entered allmulticast mode [ 264.336963][T21158] bridge1: entered allmulticast mode [ 264.338825][T21158] mac80211_hwsim hwsim13 pimreg: entered allmulticast mode [ 264.341220][T21158] vxlan1: entered allmulticast mode [ 264.342987][T21158] vxlan2: entered allmulticast mode [ 264.345458][T21158] ip6erspan0: entered allmulticast mode [ 264.349091][T21158] bond2: entered allmulticast mode [ 264.350725][T21158] geneve2: entered allmulticast mode [ 264.353498][T21158] bond3: entered allmulticast mode [ 264.355133][T21158] bond4: entered allmulticast mode [ 264.358252][T21158] bond5: entered allmulticast mode [ 264.359857][T21158] bridge2: entered allmulticast mode [ 264.362585][T21158] geneve3: entered allmulticast mode [ 264.365287][T21158] sit1: entered allmulticast mode [ 264.368196][T21158] netdevsim netdevsim4 eth0: entered allmulticast mode [ 264.370656][T21158] netdevsim netdevsim4 eth1: entered allmulticast mode [ 264.372937][T21158] netdevsim netdevsim4 eth2: entered allmulticast mode [ 264.375192][T21158] netdevsim netdevsim4 eth3: entered allmulticast mode [ 264.377561][T21158] bridge3: entered allmulticast mode [ 264.380831][T21158] bridge4: entered allmulticast mode [ 264.383078][T21158] vlan2: entered allmulticast mode [ 264.385373][T21158] veth2: entered allmulticast mode [ 264.387216][T21158] veth3: entered allmulticast mode [ 264.389735][T21158] sit2: entered allmulticast mode [ 264.392075][T21158] bridge5: entered allmulticast mode [ 264.394467][T21158] veth4: entered allmulticast mode [ 264.396210][T21158] veth5: entered allmulticast mode [ 264.397950][T21158] veth6: entered allmulticast mode [ 264.399974][T21158] veth7: entered allmulticast mode [ 264.401812][T21158] : entered allmulticast mode [ 264.408357][T21158] gre1: entered allmulticast mode [ 264.411306][T21158] bond6: entered allmulticast mode [ 264.717134][T21209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6722'. [ 264.721817][T21209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6722'. [ 264.779800][T21211] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6723'. [ 264.783478][T21211] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6723'. [ 264.840511][T21219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6727'. [ 264.875088][T21219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6727'. [ 265.133700][T21233] overlayfs: failed to clone upperpath [ 265.481604][T21249] netlink: 'syz.5.6739': attribute type 11 has an invalid length. [ 265.485446][T21249] netlink: 'syz.5.6739': attribute type 11 has an invalid length. [ 265.522902][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 265.522913][ T40] audit: type=1400 audit(1762453646.016:1490): avc: denied { write } for pid=21253 comm="syz.5.6742" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 265.548468][T21257] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 265.588523][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.590762][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.878527][ T40] audit: type=1804 audit(1762453646.353:1491): pid=21271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.6750" name="/newroot/57/file0" dev="tmpfs" ino=327 res=1 errno=0 [ 265.894582][ T40] audit: type=1326 audit(1762453646.362:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21272 comm="syz.5.6751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5838f6c9 code=0x7ffc0000 [ 265.903457][ T40] audit: type=1326 audit(1762453646.362:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21272 comm="syz.5.6751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5838f6c9 code=0x7ffc0000 [ 265.913646][ T40] audit: type=1326 audit(1762453646.372:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21272 comm="syz.5.6751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5838f6c9 code=0x7ffc0000 [ 265.920994][ T40] audit: type=1326 audit(1762453646.372:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21272 comm="syz.5.6751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5838f6c9 code=0x7ffc0000 [ 265.928184][ T40] audit: type=1326 audit(1762453646.372:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21272 comm="syz.5.6751" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fad5838f6c9 code=0x7ffc0000 [ 265.935635][ T40] audit: type=1326 audit(1762453646.372:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21272 comm="syz.5.6751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5838f6c9 code=0x7ffc0000 [ 265.942979][ T40] audit: type=1326 audit(1762453646.372:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21272 comm="syz.5.6751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5838f6c9 code=0x7ffc0000 [ 265.950559][ T40] audit: type=1326 audit(1762453646.372:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21272 comm="syz.5.6751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5838f6c9 code=0x7ffc0000 [ 266.472948][T21292] bridge0: port 3(team0) entered disabled state [ 266.480522][T21292] bridge_slave_0: left promiscuous mode [ 266.482510][T21292] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.489076][T21292] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.494562][T21292] bond0: (slave bond_slave_0): Releasing backup interface [ 266.500455][T21292] bond0: (slave bond_slave_1): Releasing backup interface [ 266.505271][T21292] team_slave_1: left promiscuous mode [ 266.513101][T21292] team0: Port device team_slave_1 removed [ 266.515362][T21292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.519562][T21292] net_ratelimit: 11 callbacks suppressed [ 266.519570][T21292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 266.558611][T21292] sit0: entered promiscuous mode [ 266.560650][T21292] sit0: left allmulticast mode [ 266.582836][T21292] sit0: entered allmulticast mode [ 266.592435][T21292] team0: Port device sit0 added [ 266.822504][ T5946] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 268.373275][T21419] __nla_validate_parse: 5 callbacks suppressed [ 268.373291][T21419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6812'. [ 268.403531][T21419] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6812'. [ 268.438935][T21428] overlayfs: failed to clone upperpath [ 268.727816][T21436] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 269.188199][T21467] kvm: pic: non byte write [ 269.410915][T21492] kvm: pic: non byte write [ 269.413001][T21499] fuse: root generation should be zero [ 270.376996][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.501140][T21533] geneve0: entered promiscuous mode [ 270.713167][T21550] netlink: 'syz.5.6871': attribute type 1 has an invalid length. [ 270.719577][T21552] netlink: 'syz.4.6870': attribute type 1 has an invalid length. [ 270.746483][T21550] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 270.750470][T21550] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 270.757575][T21550] bond2: (slave vcan1): making interface the new active one [ 270.760403][T21550] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 270.766926][T21552] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 270.771631][T21552] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 270.775818][T21552] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 270.792668][T21550] bond2: entered allmulticast mode [ 270.794535][T21550] vcan1: entered allmulticast mode [ 270.844002][T21561] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6874'. [ 270.923094][T21567] overlayfs: failed to clone upperpath [ 270.956872][T21572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6879'. [ 271.157340][ T5946] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 271.196850][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 271.196860][ T40] audit: type=1326 audit(1762453651.319:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21593 comm="syz.0.6885" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a4118f6c9 code=0x0 [ 271.288326][T21607] netlink: 'syz.5.6887': attribute type 1 has an invalid length. [ 271.324155][T21607] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.329945][T21607] bond3: (slave bond4): making interface the new active one [ 271.332471][T21607] bond3: (slave bond4): Enslaving as an active interface with an up link [ 271.349655][T21611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6888'. [ 271.406722][T21619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6892'. [ 271.408133][ T40] audit: type=1400 audit(1762453651.525:1563): avc: denied { append } for pid=21618 comm="syz.2.6891" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 271.448085][ T6001] IPVS: starting estimator thread 0... [ 271.553304][T21624] IPVS: using max 46 ests per chain, 110400 per kthread [ 271.567556][T21641] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 271.754255][T21650] netlink: 'syz.2.6902': attribute type 12 has an invalid length. [ 271.820559][T21654] binder_alloc: 21653: binder_alloc_buf, no vma [ 272.031771][ T40] audit: type=1400 audit(1762453652.105:1564): avc: denied { transfer } for pid=21659 comm="syz.5.6908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 272.065182][T21665] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 272.134446][ T40] audit: type=1804 audit(1762453652.198:1565): pid=21673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.6912" name="/newroot/1235/bus/bus" dev="overlay" ino=6484 res=1 errno=0 [ 272.534937][T21726] overlayfs: failed to clone upperpath [ 272.723426][T21738] Bluetooth: MGMT ver 1.23 [ 272.815678][T21744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6936'. [ 272.963568][T21756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6940'. [ 273.253158][T21773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6947'. [ 273.337260][T21782] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6951'. [ 273.531107][T21799] tipc: Started in network mode [ 273.532804][T21799] tipc: Node identity 4e7b4ab6e307, cluster identity 4711 [ 273.535332][T21799] tipc: Enabled bearer , priority 0 [ 273.539127][T21798] tipc: Resetting bearer [ 273.803544][T21802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6959'. [ 274.369008][T21824] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6968'. [ 274.611815][ T7101] tipc: Node number set to 2910603958 [ 274.736996][T21798] tipc: Disabling bearer [ 274.842083][T21837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6973'. [ 274.854708][T21837] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6973'. [ 274.872861][T21837] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6973'. [ 275.156075][T21854] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 275.494464][T21870] tipc: Enabled bearer , priority 0 [ 275.499658][T21869] tipc: Resetting bearer [ 276.419287][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6994'. [ 276.641844][T21869] tipc: Disabling bearer [ 276.646266][T21875] lo: Caught tx_queue_len zero misconfig [ 276.667302][T21881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.735754][ T40] audit: type=1326 audit(2000000003.983:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21893 comm="syz.2.6996" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f160d98f6c9 code=0x0 [ 276.789762][T21897] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6997'. [ 276.971701][T21911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7003'. [ 277.202213][T21936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7014'. [ 277.252109][T21934] kvm: pic: non byte write [ 277.306836][T21943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7016'. [ 278.001076][T21968] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.004207][T21968] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.201963][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.206231][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.209084][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.211914][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.434026][T21995] vlan3: entered promiscuous mode [ 278.436074][T21995] vlan3: entered allmulticast mode [ 278.832329][ T5946] Bluetooth: Unexpected continuation frame (len 10) [ 278.971137][T22019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.215797][T22025] __nla_validate_parse: 8 callbacks suppressed [ 279.215810][T22025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7049'. [ 279.294317][T22031] netlink: 'syz.4.7052': attribute type 11 has an invalid length. [ 279.394910][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804da5a000: rx timeout, send abort [ 279.430846][ T40] audit: type=1400 audit(2000000006.507:1567): avc: denied { write } for pid=22039 comm="syz.0.7056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 279.541814][T22053] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7060'. [ 279.929715][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804da5a400: rx timeout, send abort [ 279.934534][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804da5a000: abort rx timeout. Force session deactivation [ 280.010830][ T40] audit: type=1404 audit(2000000007.049:1568): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 280.038360][ T40] audit: type=1400 audit(2000000007.077:1569): avc: denied { connect } for pid=22081 comm="syz.5.7073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 280.044498][ T40] audit: type=1400 audit(2000000007.077:1570): avc: denied { setopt } for pid=22081 comm="syz.5.7073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 280.063253][ T40] audit: type=1400 audit(2000000007.096:1571): avc: denied { shutdown } for pid=22081 comm="syz.5.7073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 280.073546][ T40] audit: type=1400 audit(2000000007.105:1572): avc: denied { read write } for pid=17557 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.104796][ T40] audit: type=1400 audit(2000000007.134:1573): avc: denied { read write } for pid=17557 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 280.116226][ T40] audit: type=1400 audit(2000000007.143:1574): avc: denied { create } for pid=22086 comm="syz.5.7075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 280.122845][ T40] audit: type=1400 audit(2000000007.143:1575): avc: denied { create } for pid=22086 comm="syz.5.7075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 280.155599][T22091] netlink: 'syz.5.7076': attribute type 1 has an invalid length. [ 280.187609][T22091] 8021q: adding VLAN 0 to HW filter on device bond6 [ 280.190697][T22091] bond5: (slave bond6): making interface the new active one [ 280.193324][T22091] bond5: (slave bond6): Enslaving as an active interface with an up link [ 280.206408][T22091] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7076'. [ 280.209649][T22091] bond5: entered promiscuous mode [ 280.211339][T22091] bond6: entered promiscuous mode [ 280.213001][T22091] bond5: entered allmulticast mode [ 280.214604][T22091] bond6: entered allmulticast mode [ 280.217546][T22091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 280.233167][T22097] netem: change failed [ 280.377051][T22115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7088'. [ 280.467252][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804da5a400: abort rx timeout. Force session deactivation May 18 03:33:27 syzkaller kern.alert kernel: [ 280.467252][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804da5a400: abort rx timeout. Force session deactivation [ 280.561282][T22135] netlink: 'syz.0.7098': attribute type 1 has an invalid length. [ 280.569737][T22139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7099'. [ 280.581727][T22135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.597684][T22135] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 280.603986][T22135] bond1: entered allmulticast mode [ 280.613128][T22135] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 280.695574][T22152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7105'. [ 280.716460][T22152] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22152 comm=syz.4.7105 [ 281.103191][T22184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=22184 comm=syz.5.7119 [ 281.445035][T22186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7120'. [ 281.585054][ T6020] page_pool_release_retry() stalled pool shutdown: id 80, 3329 inflight 60 sec [ 281.868402][T22213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22213 comm=syz.4.7133 [ 281.872551][T22213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7133'. [ 281.935047][T22217] bridge: RTM_NEWNEIGH with invalid ether address [ 281.976516][T22223] netem: incorrect gi model size [ 281.978475][T22223] netem: change failed [ 282.160363][ T40] kauditd_printk_skb: 164 callbacks suppressed [ 282.160373][ T40] audit: type=1400 audit(2000000009.060:1740): avc: denied { name_bind } for pid=22240 comm="syz.4.7147" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 282.171579][ T40] audit: type=1400 audit(2000000009.060:1741): avc: denied { create } for pid=22240 comm="syz.4.7147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=0 [ 282.208198][ T40] audit: type=1400 audit(2000000009.106:1742): avc: denied { read write } for pid=20492 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 282.263998][ T40] audit: type=1400 audit(2000000009.153:1743): avc: denied { mounton } for pid=22248 comm="syz.4.7151" path="/1888/bus" dev="tmpfs" ino=9839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 282.288596][ T40] audit: type=1400 audit(2000000009.181:1744): avc: denied { mounton } for pid=22246 comm="syz.0.7150" path="/151/file0" dev="tmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 282.298189][T22252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7152'. [ 282.304089][ T40] audit: type=1400 audit(2000000009.200:1745): avc: denied { read write } for pid=20492 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 282.316555][ T40] audit: type=1400 audit(2000000009.209:1746): avc: denied { allowed } for pid=22253 comm="syz.0.7153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 282.324165][ T40] audit: type=1400 audit(2000000009.209:1747): avc: denied { prog_load } for pid=22253 comm="syz.0.7153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 282.337374][T22252] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22252 comm=syz.4.7152 [ 282.369260][ T40] audit: type=1400 audit(2000000009.256:1748): avc: denied { prog_load } for pid=22255 comm="syz.4.7154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 282.375507][ T40] audit: type=1400 audit(2000000009.256:1749): avc: denied { map_create } for pid=22255 comm="syz.4.7154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 282.522965][T22271] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7161'. [ 282.557007][T22271] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22271 comm=syz.5.7161 [ 282.863931][ T5946] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 282.901522][T22313] netlink: 'syz.5.7180': attribute type 1 has an invalid length. [ 282.915932][T22313] 8021q: adding VLAN 0 to HW filter on device bond7 [ 282.937080][T22313] veth15: entered promiscuous mode [ 282.940795][T22313] bond7: (slave veth15): Enslaving as an active interface with a down link [ 282.948661][T22313] bond7: entered allmulticast mode [ 283.002669][T22318] netlink: 'syz.5.7182': attribute type 4 has an invalid length. [ 283.010691][T22318] netlink: 'syz.5.7182': attribute type 4 has an invalid length. [ 283.344942][T22341] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22341 comm=syz.0.7193 [ 283.502665][T22359] vlan1: entered promiscuous mode [ 283.504435][T22359] vlan1: entered allmulticast mode [ 283.506044][T22359] hsr_slave_1: entered allmulticast mode [ 283.548098][T22361] xt_TPROXY: Can be used only with -p tcp or -p udp [ 284.377970][T22425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22425 comm=syz.2.7231 [ 285.099956][T22472] __nla_validate_parse: 5 callbacks suppressed [ 285.099967][T22472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7251'. [ 285.155828][T22477] netlink: 'syz.0.7253': attribute type 1 has an invalid length. [ 285.169701][T22477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 285.177455][T22477] vlan2: entered promiscuous mode [ 285.179491][T22477] bond2: entered promiscuous mode [ 285.185321][T22477] gretap1: entered promiscuous mode [ 285.189578][T22477] bond2: (slave gretap1): making interface the new active one [ 285.192784][T22477] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 285.719290][T22489] netlink: 'syz.5.7257': attribute type 1 has an invalid length. [ 285.982214][T22502] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 286.166585][T22514] 8021q: adding VLAN 0 to HW filter on device bond8 [ 286.189682][T22514] bond8: (slave ip6gretap1): making interface the new active one [ 286.193832][T22514] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 286.255385][T22523] macsec0: left allmulticast mode [ 286.340865][T22530] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 286.454699][T22539] netlink: 'syz.4.7280': attribute type 1 has an invalid length. [ 286.471803][T22539] bond9: entered promiscuous mode [ 286.475616][T22539] 8021q: adding VLAN 0 to HW filter on device bond9 [ 286.489605][T22539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7280'. [ 286.502734][T22539] bond9: (slave bridge11): making interface the new active one [ 286.505270][T22539] bridge11: entered promiscuous mode [ 286.507594][T22539] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 286.553055][T22542] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7281'. [ 286.634717][T22542] bond0 (unregistering): Released all slaves [ 286.917437][T22567] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 287.013959][T22567] hsr_slave_1 (unregistering): left promiscuous mode [ 287.211959][T22579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7296'. [ 287.291759][T22583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7298'. [ 287.325777][T22583] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22583 comm=syz.0.7298 [ 287.326151][T22585] netlink: 'syz.5.7299': attribute type 1 has an invalid length. [ 287.343292][T22585] 8021q: adding VLAN 0 to HW filter on device bond8 [ 287.352758][T22585] vlan0: entered allmulticast mode [ 287.355363][T22585] veth1: entered allmulticast mode [ 287.361723][T22585] bond8: (slave vlan0): making interface the new active one [ 287.365187][T22585] bond8: (slave vlan0): Enslaving as an active interface with an up link [ 287.511952][ T40] kauditd_printk_skb: 448 callbacks suppressed [ 287.511963][ T40] audit: type=1400 audit(2000000014.071:2198): avc: denied { read } for pid=22597 comm="syz.5.7305" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 287.521662][ T40] audit: type=1400 audit(2000000014.071:2199): avc: denied { read } for pid=22597 comm="syz.5.7305" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 287.529103][ T40] audit: type=1400 audit(2000000014.071:2200): avc: denied { read } for pid=22597 comm="syz.5.7305" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 287.651732][ T40] audit: type=1400 audit(2000000014.193:2201): avc: denied { read write } for pid=17557 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 287.666756][ T40] audit: type=1400 audit(2000000014.202:2202): avc: denied { create } for pid=22600 comm="syz.5.7306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 287.674948][ T40] audit: type=1400 audit(2000000014.202:2203): avc: denied { create } for pid=22600 comm="syz.5.7306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 287.682902][ T40] audit: type=1400 audit(2000000014.202:2204): avc: denied { map_create } for pid=22600 comm="syz.5.7306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 287.688814][ T40] audit: type=1400 audit(2000000014.202:2205): avc: denied { create } for pid=22600 comm="syz.5.7306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=0 [ 287.693161][T22603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7307'. [ 287.695167][ T40] audit: type=1400 audit(2000000014.202:2206): avc: denied { map_create } for pid=22600 comm="syz.5.7306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 287.703983][ T40] audit: type=1400 audit(2000000014.202:2207): avc: denied { prog_load } for pid=22600 comm="syz.5.7306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 287.719966][T22603] macvlan0: entered promiscuous mode [ 287.727385][T22603] macvlan0: entered allmulticast mode [ 287.731305][T22603] bond9: entered promiscuous mode [ 287.733431][T22603] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 287.738551][T22603] bond9: left promiscuous mode [ 287.769675][T22606] netlink: 'syz.2.7308': attribute type 1 has an invalid length. [ 287.782863][T22606] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.810779][T22606] veth11: entered promiscuous mode [ 287.815931][T22606] bond3: (slave veth11): Enslaving as an active interface with a down link [ 287.836559][T22606] vlan4: entered allmulticast mode [ 287.838635][T22606] bond3: entered allmulticast mode [ 287.841228][T22606] bond3: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 287.896468][T22613] ip6gre2: entered promiscuous mode [ 287.898154][T22613] ip6gre2: entered allmulticast mode [ 287.900964][ T46] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 287.903427][ T46] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 287.907437][T22613] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 287.928748][ T1336] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 287.986360][T22621] netlink: 'syz.2.7315': attribute type 4 has an invalid length. [ 288.057314][T22625] Invalid option length (1048180) for dns_resolver key [ 288.088782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 288.333772][ T1336] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 288.429322][T22642] netlink: 'syz.0.7325': attribute type 1 has an invalid length. [ 288.441817][T22642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.484803][T22642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.487842][T22642] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 288.491437][T22642] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 288.529439][T22649] veth11: entered promiscuous mode [ 288.533791][T22649] bond3: (slave veth11): Enslaving as an active interface with a down link [ 288.570097][T22642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7325'. [ 288.686704][ T1336] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 288.821516][T22671] bridge3: entered allmulticast mode [ 288.855614][ T5946] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 288.866145][ T5946] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 289.344580][T22691] netlink: 'syz.5.7343': attribute type 1 has an invalid length. [ 289.370365][T22691] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 289.375169][T22691] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 289.426684][T22696] gretap1: entered promiscuous mode [ 289.430863][T22696] bond10: (slave gretap1): making interface the new active one [ 289.434038][T22696] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 289.450385][T22696] macvlan0: entered promiscuous mode [ 289.452522][T22696] macvlan0: entered allmulticast mode [ 289.455030][T22696] bond10: entered promiscuous mode [ 289.458179][T22696] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 289.462765][T22696] bond10: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 289.469227][T22696] bond10: left promiscuous mode [ 289.628813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 289.922912][T22728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7358'. [ 290.740433][T22743] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7365'. [ 290.861155][T22754] bridge_slave_0: left allmulticast mode [ 290.863072][T22754] bridge_slave_0: left promiscuous mode [ 290.864972][T22754] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.870934][T22754] bridge_slave_1: left allmulticast mode [ 290.872751][T22754] bridge_slave_1: left promiscuous mode [ 290.874528][T22754] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.881179][T22754] bond0: (slave bond_slave_1): Releasing backup interface [ 290.887027][T22754] team0: Port device team_slave_0 removed [ 290.891569][T22754] team0: Port device team_slave_1 removed [ 290.893704][T22754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.896019][T22754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.898904][T22754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.903202][T22754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.907063][T22754] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 290.929453][T22757] vlan0: entered promiscuous mode [ 290.931572][T22757] veth1: entered promiscuous mode [ 290.934441][T22757] vlan0: left allmulticast mode [ 290.935956][T22757] veth1: left allmulticast mode [ 290.939108][T22757] bond8: (slave vlan0): Releasing active interface [ 290.946233][T22757] team0: Port device vlan0 added [ 290.963454][T22762] serio: Serial port ptm0 [ 290.993623][T22765] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 291.079514][T22772] syzkaller0: entered promiscuous mode [ 291.081210][T22772] syzkaller0: entered allmulticast mode [ 291.120716][T22781] netlink: 'syz.0.7382': attribute type 1 has an invalid length. [ 292.262403][T22781] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 292.277715][T22784] veth13: entered promiscuous mode [ 292.536801][ C3] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 293.223403][ T5297] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 293.226314][ T5297] Bluetooth: hci3: Injecting HCI hardware error event [ 293.229179][ T5297] Bluetooth: hci3: hardware error 0x00 [ 293.243087][ T5297] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 293.246949][ T5297] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 293.249849][ T5297] CPU: 2 UID: 0 PID: 5297 Comm: kworker/u33:1 Not tainted syzkaller #0 PREEMPT(full) [ 293.251069][ T40] kauditd_printk_skb: 279 callbacks suppressed [ 293.251078][ T40] audit: type=1400 audit(2000000019.429:2487): avc: denied { write } for pid=5872 comm="syz-executor" path="pipe:[1676]" dev="pipefs" ino=1676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 293.254552][ T5297] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 293.254564][ T5297] Workqueue: hci3 hci_error_reset [ 293.254590][ T5297] RIP: 0010:klist_put+0x4d/0x1b0 [ 293.254601][ T5297] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c f2 0c [ 293.254612][ T5297] RSP: 0018:ffffc9000d30f910 EFLAGS: 00010202 [ 293.254620][ T5297] RAX: dffffc0000000000 RBX: ffff888055ba7060 RCX: 0000000000000000 [ 293.254627][ T5297] RDX: 000000000000000b RSI: ffffffff8b5652f5 RDI: 0000000000000058 [ 293.254633][ T5297] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20caa04 [ 293.254640][ T5297] R10: ffffffff90655023 R11: 0000000000002b91 R12: 0000000000000000 [ 293.254646][ T5297] R13: 0000000000000001 R14: 1ffff92001a61f2a R15: ffffffff90654fe0 [ 293.254652][ T5297] FS: 0000000000000000(0000) GS:ffff8880d6c08000(0000) knlGS:0000000000000000 [ 293.254674][ T5297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.254683][ T5297] CR2: 00007fad592ffff0 CR3: 0000000048986000 CR4: 0000000000352ef0 [ 293.254689][ T5297] Call Trace: [ 293.254693][ T5297] [ 293.254698][ T5297] klist_remove+0x13f/0x2e0 [ 293.254708][ T5297] ? __pfx_klist_remove+0x10/0x10 [ 293.254717][ T5297] ? kobject_move+0x15d/0x260 [ 293.254729][ T5297] ? get_device_parent+0x1ed/0x4e0 [ 293.254750][ T5297] device_move+0x12d/0x10d0 [ 293.254764][ T5297] hci_conn_del_sysfs+0x81/0x180 [ 293.254775][ T5297] hci_conn_del+0x657/0x1180 [ 293.254785][ T5297] hci_conn_hash_flush+0x186/0x260 [ 293.256775][ T40] audit: type=1400 audit(2000000019.429:2488): avc: denied { write } for pid=5872 comm="syz-executor" path="pipe:[1676]" dev="pipefs" ino=1676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 293.263725][ T5297] hci_dev_close_sync+0x602/0x11d0 [ 293.263744][ T5297] ? __pfx_bt_err+0x10/0x10 [ 293.263758][ T5297] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 293.263770][ T5297] hci_dev_do_close+0x2e/0x90 [ 293.268296][ T40] audit: type=1400 audit(2000000019.429:2489): avc: denied { write } for pid=5872 comm="syz-executor" path="pipe:[1676]" dev="pipefs" ino=1676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 293.269322][ T5297] hci_error_reset+0xbf/0x320 [ 293.269336][ T5297] process_one_work+0x9cf/0x1b70 [ 293.269350][ T5297] ? __pfx_hci_rx_work+0x10/0x10 [ 293.272157][ T40] audit: type=1400 audit(2000000019.447:2490): avc: denied { read } for pid=5328 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 293.277427][ T5297] ? __pfx_process_one_work+0x10/0x10 [ 293.277445][ T5297] ? assign_work+0x1a0/0x250 [ 293.277456][ T5297] worker_thread+0x6c8/0xf10 [ 293.277469][ T5297] ? __kthread_parkme+0x19e/0x250 [ 293.355409][ T5297] ? __pfx_worker_thread+0x10/0x10 [ 293.355435][ T5297] kthread+0x3c5/0x780 [ 293.358966][ T5297] ? __pfx_kthread+0x10/0x10 [ 293.360852][ T5297] ? rcu_is_watching+0x12/0xc0 [ 293.362861][ T5297] ? __pfx_kthread+0x10/0x10 [ 293.364673][ T5297] ret_from_fork+0x675/0x7d0 [ 293.366530][ T5297] ? __pfx_kthread+0x10/0x10 [ 293.368354][ T5297] ret_from_fork_asm+0x1a/0x30 [ 293.370289][ T5297] [ 293.371557][ T5297] Modules linked in: [ 293.373540][ T5297] ---[ end trace 0000000000000000 ]--- [ 293.375943][ T5297] RIP: 0010:klist_put+0x4d/0x1b0 [ 293.378113][ T5297] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 9c f2 0c [ 293.385713][ T5297] RSP: 0018:ffffc9000d30f910 EFLAGS: 00010202 [ 293.387901][ T5297] RAX: dffffc0000000000 RBX: ffff888055ba7060 RCX: 0000000000000000 [ 293.391119][ T5297] RDX: 000000000000000b RSI: ffffffff8b5652f5 RDI: 0000000000000058 [ 293.394063][ T5297] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20caa04 [ 293.396723][ T5297] R10: ffffffff90655023 R11: 0000000000002b91 R12: 0000000000000000 [ 293.399079][ T5297] R13: 0000000000000001 R14: 1ffff92001a61f2a R15: ffffffff90654fe0 [ 293.401523][ T5297] FS: 0000000000000000(0000) GS:ffff8880d6c08000(0000) knlGS:0000000000000000 [ 293.404435][ T5297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.407023][ T5297] CR2: 00007fad592ffff0 CR3: 0000000048986000 CR4: 0000000000352ef0 [ 293.409602][ T5297] Kernel panic - not syncing: Fatal exception [ 293.412108][ T5297] Kernel Offset: disabled [ 293.413403][ T5297] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:15:16 Registers: info registers vcpu 0 CPU#0 RAX=000000000026d1bc RBX=0000000000000000 RCX=ffffffff8b60a2a9 RDX=ffffed100d486656 RSI=ffffffff8bf06fc0 RDI=ffffffff8192579d RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff90820cd0 R15=0000000000000000 RIP=ffffffff8b608d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2e61dff8 CR3=000000003a9cd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff812bf658 ffffffff812bf658 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff812bf658 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a41213050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a4121305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a41213057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a4121306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a412130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4a412131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 27e0f25075c77e1e 4af5e921e344a63b 03fec317b2cfdc38 b722dd236d9e3092 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3930fa7ccc07b61c d8b03644bb5a0d1f 7767b691aeeb3237 3cf2c914d906482b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b5aab7c622d9af64 aeee77b4f6fdbbc6 1e3930fa7ccc07b6 1cd8b03644bb5a0d ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1f7767b691aeeb32 373cf2c914d90648 2b27e0f25075c77e 1e4af5e921e344a6 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e46e3a4c1d10bb5f c81bb6782c4726c0 4be92a7c10eb8753 b817ed077fc2f006 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4eec53fca8c125f3 e2940cfb3bf116b0 95ba478a797ea04a 309a2c213d0ae74b ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69262decf8b0fec1 c828b25024833d5e ede168ab67038def 28bb84839117d209 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 cbeeab3fa34e7f79 5037c10ae51ede98 013acc360aa73511 66e728910ce39f33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffea0001559d40 RCX=ffffffff8208f496 RDX=ffff88810e65a480 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc900041075e0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=1ffffffff1c79ec9 R12=00007f160cce8000 R13=ffff88804bdb3740 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff8208f496 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6b08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f11bbd0a423 CR3=0000000061d1a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8161a8de ffffffff892820f4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff892820f4 ffffffff8161a8de ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8161a8de ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aca813050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aca81305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aca813057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aca81306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aca8130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aca8131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a000600080000 0002000100060000 0020000200058001 0048000000010003 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080000000a00 0600080000000200 0100060000040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010003000800 0000000005000500 0000000002000800 00000125dfdbfb00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000c0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000055 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85296435 RDI=ffffffff9add8780 RBP=ffffffff9add8740 RSP=ffffc9000d30f280 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000055 R14=ffffffff9add8740 R15=ffffffff852963d0 RIP=ffffffff8529645f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6c08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fad592ffff0 CR3=0000000048986000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8161a8de ffffffff892820f4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff892820f4 ffffffff8161a8de ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8161a8de ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aca813050 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aca81305d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aca813057 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aca81306b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aca8130f1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7aca8131cf ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a000600080000 0002000100060000 0020000200058001 0048000000010003 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080000000a00 0600080000000200 0100060000040008 000c00130014000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000010003000800 0000000005000500 0000000002000800 00000125dfdbfb00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000c0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff9125b8d8 RBX=ffffffff909d7a80 RCX=dffffc0000000000 RDX=1ffffffff213af50 RSI=0000000000000000 RDI=ffffffff909d7a80 RBP=ffffffff909d7a80 RSP=ffffc900031df328 R8 =ffffffff9125b90e R9 =0000000000000000 R10=ffffc900031df3d8 R11=00000000000136fe R12=ffffffff909d7a80 R13=ffffffff8236fe88 R14=ffffffff909d7a80 R15=ffffffff909d7a80 RIP=ffffffff816c0b90 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00005555605df500 ffffffff 00c00000 GS =0000 ffff8880d6d08000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f11beb17d60 CR3=000000003a120000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=000000000000000f Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcee3d9100 00007ffcee3d9100 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcee3db220 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556060ce4d 000055556060c870 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555560604668 0000555560604660 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11bdfb7d20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555605f67d8 00005555605f64e0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555560605064 0000555560605060 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555605f61b8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01f0800300100001 0000020806241000 0a100001c0801000 00040c0141ce04b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100002100001 f080040100000008 060801598e000800 01f0f00300080001 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f0e00300100001f0 d0030fffffffffff ff0401f0c0030010 0001f0b0030fffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0401f0a0 0300080001f09003 0fffffffffffff04 01f0800300100001 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000020806241000 0a100001c0801000 00040c0141ce04b0 1000018004010000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000