last executing test programs: 43.656771895s ago: executing program 1 (id=791): futex_waitv(&(0x7f0000001ec0)=[{0x7, &(0x7f0000000080)=0xffff, 0x2}, {0x6, &(0x7f00000000c0)=0x9, 0x2}, {0x7, &(0x7f0000000100)=0x100, 0x82}, {0x6, &(0x7f0000000140), 0x82}, {0x8, &(0x7f0000000180)=0x1000, 0x2}, {0xa, &(0x7f00000001c0)=0x2}, {0x7, &(0x7f0000000200)=0xc189, 0x82}, {0x8, &(0x7f0000000240)=0x6, 0x2}, {0x4, &(0x7f0000000280), 0x82}, {0x5, &(0x7f00000002c0)=0x10, 0x82}, {0x4, &(0x7f00000003c0)=0x6, 0x2}, {0xb6, &(0x7f0000000400)=0x8, 0x82}, {0x200, &(0x7f0000000440)=0x303a, 0x2}, {0x8, &(0x7f0000000480)=0x7f, 0x82}, {0x3ff, &(0x7f00000004c0)=0x641, 0x2}, {0x8, &(0x7f0000000500)=0x8000000000000001, 0x82}, {0x5, &(0x7f0000000540)=0x4, 0x2}, {0x0, &(0x7f0000000580), 0x82}, {0x9, &(0x7f00000005c0)=0xfff, 0x82}, {0x3, &(0x7f0000000600)=0x8000000000000000, 0x82}, {0x8000000000000000, &(0x7f0000000640)=0x7, 0x82}, {0x2, &(0x7f0000000680)=0x80, 0x2}, {0x6, &(0x7f00000006c0)=0x5, 0x2}, {0xb, &(0x7f0000000700)=0xf, 0xb03eb07d5316f378}, {0x9, &(0x7f0000000740)=0x7fffffff, 0x2}, {0x7, &(0x7f0000000780)=0x9, 0x82}, {0x6ae, &(0x7f00000007c0)=0x9, 0x82}, {0x0, &(0x7f0000000800)=0xfffffffffffffffe, 0x82}, {0x2, &(0x7f0000000840)=0x73a, 0x82}, {0x2, &(0x7f0000000880)=0x1, 0x82}, {0x5, &(0x7f00000008c0)=0x1, 0x2}, {0x6, &(0x7f0000000900)=0x1, 0x2}, {0x6, &(0x7f0000000940)=0x8e, 0x82}, {0x2, &(0x7f0000000980)=0x4, 0x82}, {0x63a1, &(0x7f00000009c0)=0x7fffffffffffffff, 0x82}, {0x2, &(0x7f0000000a00)=0x7, 0x2}, {0x3, &(0x7f0000000a40)=0x4, 0x82}, {0x2, &(0x7f0000000a80)=0x4, 0x82}, {0x5, &(0x7f0000000ac0)=0x100, 0x82}, {0x5b34, &(0x7f0000000b00)=0x5, 0x2}, {0xfffffffffffffff9, &(0x7f0000000b40)=0x76, 0x2}, {0x1, &(0x7f0000000b80)=0xffffffffffffffff, 0x82}, {0x0, &(0x7f0000000bc0)=0x9, 0x82}, {0xffffffffffffff39, &(0x7f0000000c00)=0x1, 0x82}, {0xffffffff, &(0x7f0000000c40)=0x5, 0x2}, {0x800, &(0x7f0000000c80)=0x400, 0x2}, {0x5, &(0x7f0000000cc0)=0x10000, 0x2}, {0x3, &(0x7f0000000d00)=0x7, 0x2}, {0x0, &(0x7f0000000d40)=0x7}, {0x7, &(0x7f0000000d80)=0x2, 0x2}, {0x1, &(0x7f0000000dc0)=0x3, 0x2}, {0x9, &(0x7f0000000e00)=0xfffffffffffffff9, 0x2}, {0xcb85, &(0x7f0000000e40)=0x401, 0x82}, {0x7, &(0x7f0000000e80)=0x2, 0x82}, {0x4, &(0x7f0000000ec0)=0x6}, {0x3a, &(0x7f0000000f00)=0x3, 0x2}, {0x3, &(0x7f0000000f40)=0x800, 0x2}, {0x1, &(0x7f0000000f80)=0x7ff, 0x2}, {0x1, &(0x7f0000000fc0)=0xffffffffffffffff, 0x2}, {0x9, &(0x7f0000001000)=0x9, 0x2}, {0x6, &(0x7f0000001040)=0xffffffffffffff81, 0x82}, {0x6, &(0x7f0000001080)=0x39, 0x80}, {0x80000001, &(0x7f00000010c0)=0x8, 0x82}, {0x4, &(0x7f0000001100)=0x3, 0x82}, {0x4, &(0x7f0000001140)=0x1, 0x82}, {0x800, &(0x7f0000001180)=0x1b9c, 0x82}, {0xffffffff, &(0x7f00000011c0)=0x2}, {0xcb, &(0x7f0000001200)=0x3, 0x2}, {0x8, &(0x7f0000001240)=0x100, 0x82}, {0x0, &(0x7f0000001280)=0x6, 0x2}, {0x0, &(0x7f00000012c0)=0x7fffffff, 0x2}, {0x40, &(0x7f0000001300)=0x2, 0x2}, {0x7, &(0x7f0000001340)=0x81, 0x2}, {0x8001, &(0x7f0000001380)=0x3, 0x80}, {0x3, &(0x7f00000013c0)=0x7ff, 0x82}, {0x44d, &(0x7f0000001400)=0xacd4, 0x82}, {0x6, &(0x7f0000001440)=0x2, 0x82}, {0x99f, &(0x7f0000001480)=0x87, 0x82}, {0xd6, &(0x7f00000014c0)=0x7, 0x82}, {0xa2, &(0x7f0000001500)=0x8, 0x2}, {0x6, &(0x7f0000001540)=0x80000000, 0x82}, {0x2, &(0x7f0000001580)=0x10001, 0x2}, {0x6b8, &(0x7f00000015c0)=0xf49, 0x2}, {0x5, &(0x7f0000001600)=0x1, 0x2}, {0x876, &(0x7f0000001640)=0xfffffffffffffffa, 0x82}, {0x1ff, &(0x7f0000001680)=0x8f, 0x82}, {0x1, &(0x7f00000016c0)=0x40, 0x2}, {0x6000000000000000, &(0x7f0000001700)=0x2, 0x2}, {0x6, &(0x7f0000001740)=0xa4d, 0x2}, {0x0, &(0x7f0000001780)=0xd, 0x82}, {0x1, &(0x7f00000017c0)=0x1, 0x82}, {0x6, &(0x7f0000001800)=0x1, 0x82}, {0x10, &(0x7f0000001840)=0x2, 0x2}, {0x4, &(0x7f0000001880)=0xfffffffffffffffc, 0x82}, {0x8000, &(0x7f00000018c0), 0x82}, {0xab36, &(0x7f0000001900)=0x4b9}, {0xfffffffffffffff9, &(0x7f0000001940)=0x4, 0x2}, {0xfffffffffffff062, &(0x7f0000001980)=0x2, 0x2}, {0x9, &(0x7f00000019c0)=0x2, 0x82}, {0x200, &(0x7f0000001a00)=0x1ff, 0x82}, {0xc4d6, &(0x7f0000001a40), 0x82}, {0x6, &(0x7f0000001a80)=0x9, 0x82}, {0xfe0, &(0x7f0000001ac0)=0x4, 0x2}, {0x8000000000000000, &(0x7f0000001b00)=0x7, 0x82}, {0x9, &(0x7f0000001b40)=0x20c, 0x82}, {0x0, &(0x7f0000001b80), 0x2}, {0x7fff, &(0x7f0000001bc0)=0x9, 0x82}, {0x2, &(0x7f0000001c00)=0x4, 0x2}, {0xffffffffffffffff, &(0x7f0000001c40)=0x3, 0x2}, {0xffffffffffffd466, &(0x7f0000001c80)=0x401, 0x82}, {0x4, &(0x7f0000001cc0)=0xa1d4, 0x2}, {0x0, &(0x7f0000001d00)=0x1, 0x82}, {0x725fc4db, &(0x7f0000001d40)=0xfffffffffffffd1c, 0x2}, {0x3, &(0x7f0000001d80)=0x633, 0x2}, {0x4b, &(0x7f0000001dc0)=0x7, 0x82}, {0x8, &(0x7f0000001e00), 0x82}, {0x0, &(0x7f0000001e40)=0x711, 0x82}, {0x8, &(0x7f0000001e80)=0x4, 0x82}], 0x76, 0x0, &(0x7f0000002a00)={0x0, 0x989680}, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 43.580128524s ago: executing program 1 (id=793): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x1004) r5 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r5, &(0x7f0000004340)={0x2020}, 0x2020) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r9 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x1a3c81) ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f00000006c0)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 43.221076498s ago: executing program 1 (id=802): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000000020300000000000000010000840000000400000000010000000e0000000000000000000004"], 0x0, 0x4a}, 0x20) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100003}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000080)=0x1e, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) dup2(r1, r3) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000000)) 43.219672641s ago: executing program 1 (id=803): r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x2000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200)) r2 = syz_open_procfs(r0, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/136, 0x88}], 0x1, 0xfc, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x2000) (async) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200)) (async) syz_open_procfs(r0, &(0x7f0000000000)='status\x00') (async) preadv(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/136, 0x88}], 0x1, 0xfc, 0x1) (async) 43.175070535s ago: executing program 1 (id=805): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@generic={0x2e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$sock_ifreq(r1, 0x8927, &(0x7f0000018880)={'bond0\x00', @ifru_names='xfrm0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x5, &(0x7f0000000080)={0x0, 0x1, 0x4, @tid=r2}, &(0x7f0000000300)=0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi2\x00', 0x480, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x8000003, 0x0, 0x0, 0x1, 0x3}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x204, &(0x7f0000000040)={0x0}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='erofs\x00', 0xa00808, &(0x7f0000000200)='-^(\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000640)={0x2, 0x0, &(0x7f0000000340)=""/98, &(0x7f0000000500)=""/48, &(0x7f0000000540)=""/195, 0x70000}) bind$rxrpc(r6, &(0x7f00000002c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) 42.270955528s ago: executing program 1 (id=807): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000040)={0xe, 0x81}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000000c0)={0x0, 0x2e07e1c4, 0x3d, 0x2, 0x0, 0x7f}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0x0, 0xee00, &(0x7f0000000100)) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x1, 0x0, 0x10001}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000240)={0xffffffffffffffff, 0x4, 0x7, 0x6, @vifc_lcl_addr=@private=0xa010102, @remote}, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000280)='syz1\x00', 0x5) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000340)={r5, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000003c0)={r7, r8/1000+10000}, 0x10) sendto$rxrpc(r4, &(0x7f0000000400)="4e8aca70ad833a42d8a0ded6dc9d1af7aee027dd2cb54b62cfe1b2b288937523709469c4492aaa54d9c02f96116cd81317", 0x31, 0x4000080, &(0x7f0000000440)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0x7, @local, 0xd423}}, [0xffffffffffffffff, 0x0, 0x7, 0x2, 0x5, 0xc0, 0x8000, 0x6d9, 0x9ed, 0x7, 0xb, 0x101, 0x4, 0xd, 0xe]}, &(0x7f0000000580)=0x100) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000005c0)={r10, 0x0, 0x3ff, 0xa2, 0xd, 0x5}, &(0x7f0000000600)=0x14) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000640)=""/136) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r9, 0x8040942d, &(0x7f0000000700)) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000740)=0x5, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000780)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000008c0)={&(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0xa, 0x4}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000900)=r12) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000940)={r2, 0x1}) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000980)='cdg\x00', 0x4) syz_create_resource$binfmt(&(0x7f00000009c0)='./file0\x00') sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4800) 27.255222725s ago: executing program 32 (id=807): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000040)={0xe, 0x81}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000000c0)={0x0, 0x2e07e1c4, 0x3d, 0x2, 0x0, 0x7f}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0x0, 0xee00, &(0x7f0000000100)) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x1, 0x0, 0x10001}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000240)={0xffffffffffffffff, 0x4, 0x7, 0x6, @vifc_lcl_addr=@private=0xa010102, @remote}, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000280)='syz1\x00', 0x5) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000300)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000340)={r5, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000003c0)={r7, r8/1000+10000}, 0x10) sendto$rxrpc(r4, &(0x7f0000000400)="4e8aca70ad833a42d8a0ded6dc9d1af7aee027dd2cb54b62cfe1b2b288937523709469c4492aaa54d9c02f96116cd81317", 0x31, 0x4000080, &(0x7f0000000440)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0x7, @local, 0xd423}}, [0xffffffffffffffff, 0x0, 0x7, 0x2, 0x5, 0xc0, 0x8000, 0x6d9, 0x9ed, 0x7, 0xb, 0x101, 0x4, 0xd, 0xe]}, &(0x7f0000000580)=0x100) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000005c0)={r10, 0x0, 0x3ff, 0xa2, 0xd, 0x5}, &(0x7f0000000600)=0x14) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000640)=""/136) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r9, 0x8040942d, &(0x7f0000000700)) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000740)=0x5, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000780)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000008c0)={&(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0xa, 0x4}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000900)=r12) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000940)={r2, 0x1}) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000980)='cdg\x00', 0x4) syz_create_resource$binfmt(&(0x7f00000009c0)='./file0\x00') sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4800) 3.589765877s ago: executing program 0 (id=1207): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x325, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x7a) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000007, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r11, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908", 0x25}, {&(0x7f0000000440)="c91d588b87bd12b736", 0x9}], 0x2}, 0x4005) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmmsg(r4, &(0x7f0000000500)=[{{&(0x7f0000000300)=@in={0x2, 0x4e23, @multicast2}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="2b42f58728afda85a9553b049e0fffecce78f2e6cb7d18e631216674ee75119aade4f647e6bcec5cd294e42572464ec34f41704f375b2b7546e6b8f9548c1c67471573f03d3137ae5997603d01d67c1de5dd3dc72a00f9d66ef2322bf9230743488824896d77ec4b73705a09497427716a27fa91a8d7ef2b76798a7c96efdb1b76e3764075f101def490d0947a163c13be0af09415c8a36f38a0b9218ab24786c899d209820da76460ab", 0xaa}], 0x1, &(0x7f00000008c0)=[{0x90, 0x109, 0x9b, "193a48e4a2002dc3eb61e69212dcb5f0d0aaa7be69ef611401842a4f43af4a16faf71dc571ee6db0d09b519e803d46179510f9467e5af93b524658776654fb84fddbc66a04f8962d4b988822d01bc922709c4cc3ae71017e5488094999566b82b1a948b6d71b51ddf4054bbf8a8ed7603c91cece42d46abd51bd3c440a420af2"}, {0x78, 0x101, 0x401, "2a8025e816605ac8382ac7853920b58c71b29ff9d5faf9f47974fa308d96d3fb97f5a3c6b2521ce1e606da824dc588c925288a313e3b851d41ab20306c95b85c3da3db73dda9374c7cb371d18e9a53ec92725e08974b4cfd8916bad57f86454245cf41d894"}, {0xd0, 0x10c, 0xff, "121d90073a3c7381015abb28fa295b663233cd05853d5ae0908317b03fb6c276e63e90143e2a0c555ed0e71d0892d4ef347c21d8cc1f195d57688fe86f2158a865382058512d653fa986ba2e9b555cd40becc246a3034810dd127f3fffa8793d6fc3ad657b3e53435d96c6172a9514566f2f14e960ca895c66aac0f41bd146b3e0e79ea66f453ff0d71563fe0b75252df3452a56b204373cea4845e305cb425ce02e0e60c70a850b2eb2f03514a55ee1adb73d08d5e6c76c6c5ac6ae"}, {0x100, 0x112, 0x3, "cac6dd4dc03e3a215a5d0a4efc788dfed55fb1fa578b980aff43f69c2ffff9117e62f0a3af02c649ac83f3af5fde146931dbc7dde5d5795db33478fa3afc9cd7442b6418d3c537a5a544171b66042faca79b7c92029318259fd4f0aec9bde1a1b43d56d1f808b21daa52477ab8a75052e81645f3e6afc178ca75a95607d41f53e8b23060ea9d8fd382033aa475b73a7c2886de3dcaaa0bdbb6456e8b06fc8e88a5483ea0fde02691bb56f26094570d3aa843a472974b417ad9c4a1852a0b07263c77c9167a5b46b95283faf87daea0b6c39aea1267a95683db79297842051d1d0830d21893dd6c289c5d2503"}, {0x70, 0x104, 0x10, "3fb44d3068e7518cbee2be494ecbfa650793f55fa72209922f9e319a9e7e7b7e2b9d68fd21d43b92324963104d9fecfd357f68deb38f5ac249a92a76ddd0b752bb5f23ed8559d709e3a5d6f86a7ba974f5a9d83ead8c197dbe4a06e766"}], 0x348}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)="485aa28a4ded52bbacff984b746342af638b73f42d1d67af275f935c9eb01db14f1204f34edbfed11a726cf403be99b782ea9acfc29377187dac43cf63909420caacb0f4adfe2ae09a65c4d36641e8783b918b39e86835cc55503d96e908a1948374d281198f06138b90a0dd16690e41c25df72b208393e059fee97c9e62b7bc1a51cedc05f56c21a44003ffb358e666ebbee508652ee54252589386e5650c21d3691ae900cd178dd3c3310f53b4aee46119c9b1dae8248d7e3e6a9d4018e77b93051768498306b39498aaf3a0ac1f", 0xcf}, {&(0x7f00000003c0)="d4d873ce1c92a8f4536b2f5916ad773f7a9ae0ce775b1aabf1751634691760f55a409e7650009ca610f8ae92f314697a7279e3439b97c725a0b9a85ed51ccbc0e8a05fac9f4c123897a34ab759dfde63858573", 0x53}], 0x2}}], 0x2, 0x4004800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3.392411108s ago: executing program 0 (id=1209): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x8, 0x10, 0x80000000, 0x6}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8040, 0x0) preadv(r4, &(0x7f0000002d40)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1, 0x40, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdb0f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 2.589813915s ago: executing program 3 (id=1217): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x78, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5241}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 2.589636697s ago: executing program 0 (id=1218): socket$unix(0x1, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) openat$bsg(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bsg/0:0:0:0\x00', 0x10b003, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e4f242d2fa177a6315bd5618714627d78d1f5909dafb18e53f0cb83032c6a81f2ef2557e9fffdf94d46723df9eb3833d34c68ac38c1e9b5e678a97227392ef69d5e33eec922708b747056be8f1999159e2eef8eb947f7d0b747b74f", 0x5c}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="b800000000000000120100000700000010a6e6b92c4e6b399c2630370772b6c96bbf908de5f0104c822cb551170f23c54f0a846b572fde99a7caf25c9c85635e216bbd2dacfb812a547c261a32864319ab0b79d4d1766a7bdff89ea43dd1a1105325ed381cf867bf427d98e7cdd5b2d184a6383ceea35c6ea18098d7fc31357e534c767985ad2d7b75e3fef9c5dfe6e0be2d131fce37d806f43b4154756e4275fa4e9037b21c01de634aca99496fa2adcfa204d5311b25ee14000000"], 0xb8}, 0x4000008) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r3 = io_uring_setup(0x27, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x20) 2.520251389s ago: executing program 0 (id=1221): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) (async) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3080000, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (async) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x3, 0x4}) 2.519079943s ago: executing program 3 (id=1223): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) inotify_init() prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r6, r5, 0x25, 0x8, @void}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x23}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xff}}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r10, 0x89a489e1ad9be467, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x4, 0x40, 0x5, 0xff5a}}}, @NL80211_ATTR_BSS_SELECT={0x40, 0xe3, 0x0, 0x1, {0x3c, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x2}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x56}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xfffffff7}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x2}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x2}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x84}, 0x40) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r13}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, r5, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'netdevsim0\x00', {0x4}, 0xbfa}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140)=0x9, 0x4) 2.456586623s ago: executing program 0 (id=1224): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x2, 0x4, 0x4, 0xa, 0x500, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x84, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x700, 0x80, 0x8, 0xf5, {{0x7, 0x4, 0x1, 0x1, 0x1c, 0x64, 0x0, 0x6, 0x29, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x8, 0x81, 0x0, 0xe, [0x3cae22e4]}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @restrict={0x9, 0x0, 0x0, 0xb, 0x5}, @float={0x7, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000300)=""/92, 0x40, 0x5c, 0x1, 0x1, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0xfffffff9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000}, [@jmp={0x5, 0x0, 0x9, 0x1, 0x6, 0xffffffffffffffff}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @ldst={0x2, 0x3, 0x2, 0x3, 0x8, 0x20, 0xffffffffffffffff}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xff}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000004c0)='syzkaller\x00', 0x800, 0xb3, &(0x7f0000000500)=""/179, 0x40f00, 0x2, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xa, 0xffffffff, 0xe9}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000640)=[r0, r0], &(0x7f0000000680)=[{0x1, 0x1, 0x6, 0xc}, {0x3, 0x4, 0x1, 0x5}, {0x2, 0x2, 0xe, 0x6}, {0x2, 0x3, 0x7, 0x1}, {0x1, 0x1, 0x3, 0xb}, {0x1, 0x5, 0xa, 0x5}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0x21, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xc}, @alu={0x7, 0x1, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0x10}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x81, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, @tracing=0x1c, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0xc, 0x3e8, 0x8}, 0x10, r5, r6, 0x0, &(0x7f00000007c0)=[r0, r0], 0x0, 0x10, 0x9}, 0x94) 2.454919324s ago: executing program 0 (id=1226): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x59}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x18, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000043}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x42, &(0x7f00000005c0)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0xfffffffffffffe8f, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0xe7, 0x1, 0x8}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f00000005c0)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0xfffffffffffffe8f, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0xe7, 0x1, 0x8}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.377342794s ago: executing program 3 (id=1229): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00:\x00', @ANYRES32, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x0) 2.310993924s ago: executing program 3 (id=1230): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x2aa040, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="de67000f001a660f3a63b40000a582d1e866b8060000000f23d00f21f86635300000020f23f8660f38826eb5360fc759002626f30f2a59bab880008ee00f8f0090", 0x41}], 0x1, 0x0, &(0x7f0000000100)=[@flags={0x3, 0x15d00}], 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000002180)) write$FUSE_BMAP(r1, &(0x7f00000021c0)={0x18, 0xffffffffffffffda, r2, {0x6}}, 0x18) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000002200)={0x6, 0xa}) fadvise64(r0, 0xfc, 0x7c, 0x2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000002240)={0x54, 0x3, 0x8000}) r4 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000002400)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000023c0)={&(0x7f00000022c0)={0x100, 0x9, 0x6, 0x202, 0x0, 0x0, {0x4, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8000}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10}, @IPSET_ATTR_ADT={0xa8, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffa}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xa}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'netpci0\x00'}}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x48014) read$FUSE(r4, &(0x7f0000002440)={0x2020}, 0x2020) ioctl$CDROM_NEXT_WRITABLE(r1, 0x5394, &(0x7f0000004480)) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) r5 = accept4$netrom(r3, &(0x7f00000044c0)={{0x3, @bcast}, [@bcast, @rose, @default, @default, @netrom, @default, @remote, @netrom]}, &(0x7f0000004540)=0x48, 0x80000) recvmmsg(r5, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000004580)=""/154, 0x9a}], 0x1, &(0x7f0000004680)=""/153, 0x99}, 0x10001}, {{&(0x7f0000004740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000004880)=[{&(0x7f00000047c0)=""/187, 0xbb}], 0x1, &(0x7f00000048c0)=""/211, 0xd3}, 0x10001}, {{&(0x7f00000049c0)=@nl, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004a40)=""/65, 0x41}, {&(0x7f0000004ac0)=""/140, 0x8c}, {&(0x7f0000004b80)=""/72, 0x48}], 0x3, &(0x7f0000004c40)=""/143, 0x8f}}], 0x3, 0x0, &(0x7f0000004dc0)={0x0, 0x3938700}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000004e00)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000004e40)) getpeername(r3, &(0x7f0000004e80)=@xdp, &(0x7f0000004f00)=0x80) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000004f40)=0xa) syz_open_dev$audion(&(0x7f0000004f80), 0x8, 0x3) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005000), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000050c0)={&(0x7f0000004fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005080)={&(0x7f0000005040)={0x34, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x2}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x5}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x3}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x13}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) connect$bt_rfcomm(r1, &(0x7f0000005100)={0x1f, @none, 0x5}, 0xa) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000005180), r1) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000005240)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005200)={&(0x7f00000051c0)={0x30, r7, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040041}, 0x4c844) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000005280)={r5, 0x5, 0x4, 0x81}) close(r3) 2.305886875s ago: executing program 3 (id=1232): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000014c0)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x40, "b512b3880e60fe3f6b54c6b909007c9f70d0cfe9"}}]}, 0x150}}, 0x844) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f020}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0x34, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0x89, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8000000040000000, 0xc, 0x4, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0xffffffffffbffffe, 0x5, 0x7, 0x7, 0x3, 0x6}) 2.150191891s ago: executing program 3 (id=1237): r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x90) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x0, 0x3) r2 = gettid() (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) timer_create(0x7, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) (async, rerun: 32) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) (rerun: 32) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) (async) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000340)=""/191, 0xbf}], 0x1) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) 1.210195367s ago: executing program 4 (id=1243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}, @typed={0x6, 0x12, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.161256068s ago: executing program 4 (id=1244): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x22000100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1fffffc, &(0x7f0000000180)=[{0xfffffffffffffffc, 0x2}], 0x1, 0x237, 0x0, 0x2, 0x0, 0x2}) 1.101122309s ago: executing program 4 (id=1245): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB='OGAIN \'C'], 0xbb) close(r3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = timerfd_create(0x0, 0x80000) timerfd_settime(r5, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r5, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x22004040) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) acct(&(0x7f0000000040)='./file0\x00') r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00010028b97004fcdbdf2507000000", @ANYRES32=r10, @ANYBLOB="0200260a06000500040000000a000200ff"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040880) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0xf6ff, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000200)={r4, &(0x7f0000000000)='/\x8f&\'!:.\x00', 0x4484a1, &(0x7f00000000c0)={@align=0x77, {0x0, 0xf, 0x2, 0xc0c}}, 0x3, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x7}) 981.04789ms ago: executing program 4 (id=1246): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r2, &(0x7f00000000c0)='net/ip_tables_names\x00') r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x3, 0x0, 0x7f, 0x40, 0x800, 0x0, 0x5a1, 0x85f}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x10004) sendmsg$nl_route_sched(r3, &(0x7f0000002240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002200)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffe0, 0x7}, {0xa62871af25c4498e}, {0xfff3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00010029bd700000dcdf2507000000", @ANYRES32=r1, @ANYBLOB="80007f0a08000f00070000000a000200f5"], 0x30}, 0x1, 0x0, 0x0, 0x2400c001}, 0x4040004) 889.929154ms ago: executing program 4 (id=1247): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000080)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000340)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x22}, @loopback}}}], 0x20}, 0x4001000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket(0x1, 0x803, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0xfffffe3d) read(r6, &(0x7f0000000100)=""/146, 0x92) r8 = accept4$unix(r6, &(0x7f0000000380)=@abs, &(0x7f0000000280)=0x6e, 0x0) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000400)) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fddbdf25010000000c00030002000000000000000c0002003b0000000000000004000780"], 0x30}, 0x1, 0x0, 0x0, 0x20840}, 0x20008844) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff07"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x140e, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000090}, 0x40014) ioctl$CDROMVOLCTRL(r9, 0x30d, &(0x7f0000000080)={0xa2, 0x10, 0x8, 0xd}) 730.622999ms ago: executing program 4 (id=1249): sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x800) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8, 0x40, 0x8, 0x3, {{0x51, 0x4, 0x2, 0x5, 0x144, 0x66, 0x0, 0x3, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x1b, 0xb6, [@empty, @remote, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010100]}, @timestamp_prespec={0x44, 0x4c, 0xb2, 0x3, 0x1, [{@multicast1, 0xeacb}, {@remote, 0x10001}, {@local, 0x9}, {@private=0xa010102, 0x401}, {@multicast1, 0xb}, {@broadcast, 0x4}, {@rand_addr=0x64010100, 0x6}, {@multicast1, 0x9}, {@rand_addr=0x64010102, 0xce}]}, @rr={0x7, 0xf, 0x3c, [@multicast1, @dev={0xac, 0x14, 0x14, 0xd}, @local]}, @timestamp_addr={0x44, 0x44, 0xd, 0x1, 0x2, [{@local, 0x9}, {@empty, 0x8}, {@rand_addr=0x64010102, 0x10001}, {@broadcast}, {@empty, 0xad}, {@broadcast, 0x3}, {@private=0xa010102, 0x9a5a}, {@loopback, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0x86, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x11}, 0xf67}, {@broadcast, 0x2}, {@multicast2, 0x3}, {@private=0xa010101, 0x80000001}]}, @timestamp_addr={0x44, 0x34, 0xea, 0x1, 0xd, [{@broadcast, 0x3}, {@local, 0x800}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x5}, {@rand_addr=0x64010102}, {@private=0xa010102, 0x2}, {@broadcast, 0x7}]}, @rr={0x7, 0x13, 0xbf, [@multicast2, @multicast2, @local, @local]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0xea, 0xffffffff, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x20, 0x1, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0xea, 0xffffffff, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x20, 0x1, 0x5}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x68, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4658dcea975aab10}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', r2, 0x4, 0x2, 0x4, 0xe0f, 0x25, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x8000, 0x7, 0x61d, 0xd}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x168, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x168}}, 0x8855) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x101, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x101, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000980)={0xa285, r7, 0x1}) r9 = eventfd2(0xe0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f00000009c0)=r9, 0x1) (async) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f00000009c0)=r9, 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000a80)={0x16, 0x98, 0xfa00, {&(0x7f0000000a40)={0xffffffffffffffff}, 0x9, 0xffffffffffffffff, 0x10, 0x0, @ib={0x1b, 0x0, 0x7ff, {"09056063fcf22ce948fcbb5a1838c71b"}, 0x7, 0xffffffffffffff7f, 0x71e}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r8, &(0x7f0000000b40)={0x11, 0x10, 0xfa00, {&(0x7f0000000a00), r10}}, 0x18) syz_clone(0x2000080, &(0x7f0000000b80)="26d19acbfbbd99a3009d0488b478ef755166872579353126d94ff03c1c8b44d77ce36fd2f3aa5179bb104e362d554e860a9f8df919dc108d4090837c6ee93072dfac06ecb423dc60abcba5bb60b72da418a79ffd52bd1c57f9c65d8db35dbab433945aeed0f1cbd4fca4dc715da1c3e6f89637beb7cdcc3f60f6389be39628a0b53ce9cf026e05ebb7b8f805ed171bf8f967cb64cba75b391ec8aebbecbd8de03c79608fd8e29eddc9e13fe42883ef", 0xaf, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)="22b4520cb2da767f697caf60f8de30cffbbf4d7f46d4974199c1c17e6533c5e0cdef4a01c5e7d25c6ad1f96957d99fc53f327ba91c37152dd44254104ab5e765eceee920878512c97c8d43b22c372a65cd151ad7d841eb04309e099b6747d0c21c400bbec99345bf1bfb9bf0af5f") (async) syz_clone(0x2000080, &(0x7f0000000b80)="26d19acbfbbd99a3009d0488b478ef755166872579353126d94ff03c1c8b44d77ce36fd2f3aa5179bb104e362d554e860a9f8df919dc108d4090837c6ee93072dfac06ecb423dc60abcba5bb60b72da418a79ffd52bd1c57f9c65d8db35dbab433945aeed0f1cbd4fca4dc715da1c3e6f89637beb7cdcc3f60f6389be39628a0b53ce9cf026e05ebb7b8f805ed171bf8f967cb64cba75b391ec8aebbecbd8de03c79608fd8e29eddc9e13fe42883ef", 0xaf, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)="22b4520cb2da767f697caf60f8de30cffbbf4d7f46d4974199c1c17e6533c5e0cdef4a01c5e7d25c6ad1f96957d99fc53f327ba91c37152dd44254104ab5e765eceee920878512c97c8d43b22c372a65cd151ad7d841eb04309e099b6747d0c21c400bbec99345bf1bfb9bf0af5f") ioctl$sock_bt_hci(r8, 0x800448d4, &(0x7f0000000d40)="9aa97d8acbf2c823eb5d08ece8a75df8d1ed6be6384482e74858941c2b5000d4d9337f174ab9ac543af07a3586d9d492cca5d272a89b8c5329c616a6acbc4b8fdfb3099d7ac899085f49752eddb0b7e5d2707a1aaf51bedda090e7a939eba6d8976ee0a71f7e243ac2c6e6aeb5e573882a2638d4cf62aea2f3bb30ccac77a7471688415b3cd2a5edbef66de3be29ab522c28bdeb5a839f8518fe150ee25638807fa60d4c0598a043e61bbbde63fe849e45c13516398e429c") (async) ioctl$sock_bt_hci(r8, 0x800448d4, &(0x7f0000000d40)="9aa97d8acbf2c823eb5d08ece8a75df8d1ed6be6384482e74858941c2b5000d4d9337f174ab9ac543af07a3586d9d492cca5d272a89b8c5329c616a6acbc4b8fdfb3099d7ac899085f49752eddb0b7e5d2707a1aaf51bedda090e7a939eba6d8976ee0a71f7e243ac2c6e6aeb5e573882a2638d4cf62aea2f3bb30ccac77a7471688415b3cd2a5edbef66de3be29ab522c28bdeb5a839f8518fe150ee25638807fa60d4c0598a043e61bbbde63fe849e45c13516398e429c") sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x64, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x15}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0x7f, 0x4]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xfffffff7, 0x4, 0xce11, 0xd2]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000f40)={0x1ff, 0xfec00000, 0xc84c65f7a886fa92, r9, 0x1}) (async) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000f40)={0x1ff, 0xfec00000, 0xc84c65f7a886fa92, r9, 0x1}) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40046201, &(0x7f0000000f80)='#*}*#.$]!$(\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0xb8, 0x2, 0x8, 0x201, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xd0a}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2d0f2803}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000891}, 0x20000010) syz_usb_connect(0x1, 0xae7, &(0x7f0000001140)={{0x12, 0x1, 0x110, 0xa5, 0xd0, 0x18, 0x8, 0x45e, 0x46d, 0x6407, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad5, 0x2, 0xfc, 0x8, 0x10, 0x2, "", [{{0x9, 0x4, 0x8d, 0x6, 0xa, 0x45, 0x67, 0xf6, 0x8, [@uac_as={[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x6, 0x4, 0x8b, 0x5, "588708", "8ad822"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x3, 0x2}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x9, 0xf4, "a7"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xb, 0x1, 0x9, 0x6, "c8a2e9e587db"}]}], [{{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x9, 0x5, 0x3, [@generic={0xd9, 0xc, "bcff7f09e6912f6f69f630502b38d31e72ca0ec35812bb2a09f7569857ac51d64740166e641930670b7fbc3574b1a5c10c75e43c8ea47d65591399a52365c48ae21b36291213dc683de830125f572346adae5dd5da7e414ff4767131840d777ff315a92087366638ffe4c9263a9fd5857eed58c0059b984d454d58343d734e54dde4c8fcec7c6a16cd7deb6a7cd5917b7cc3bbcfdc5cf8435205e812eb0304d84cabb48140f7a9218d6af078112bf594a86905b5efaa36fdeb5050b6ca124718ededefd2dac0c5bb1a419a19b2b38dc3946a968ca4f07d"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x48, 0x25, 0xff, 0x8f}}, {{0x9, 0x5, 0x19, 0x1, 0x800, 0x2, 0x5, 0x9, [@generic={0x100, 0xd, "6c4720f9a77419e7bb5983f44379cd8b854bd10dc20e566571f7967859863d13904ac33dfcc446266b6b38cb43bdb652676343a1f9618d861b6ccad50c556416a4c02675d6fe4b36dfd391382047561b7246b5398b055b2c348f68afe61bd9f9c35086d8faaded95855798735e9a7293a70c50a1dfe4a265ce6de21d51f93efd6454246cc4d017cd6c6acd9ee940722c98e1b9e34908d848be78642376d172693f9c2bbabb4804db015383656017387e112fdb2a148a168d505c405c3cda4e40e1e8ac2a38c3b00828eaaa601f55cbb3fd02ae8061629b2bbb8f23288dcf544d2f119681cd6dc45a1988acb759925c8984c9f409aa0d31ca2db739cfd0c0"}, @generic={0x35, 0x3e, "ee7af8b1701f53a0107e40b735cc0a8f31633c32774c96c222ce4b78f9082153a3d5f927cd3e7c04c2e51d1905f669d5c75dd2"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x6, 0x8, 0x80}}, {{0x9, 0x5, 0x7, 0x4, 0x0, 0x4, 0x7, 0x3, [@generic={0xc7, 0xa, "870818e4862ff4a881f2d7772b562559bf0412166426a0a740ed3e1e57f494cd354d60d6553329f53ab4f14d35250e7888b3ff9b09c4133e876a3964e433936fd3d43518817ec96e6c51d082b84696d8566035ae0058dfb5bca83843b8a2d0dc6e451c7cdcc6d442d6b65164bfe3bbb686ffa15af3cef410a1d912ca4313e678ef5dfcb916be1fd1babb6a797bc9adaa59abb6734abdd73ceafb83baa3f20cdacebe4ec57068ecf63cbc278b362b50cf9107f86c0e898e7528f58857a133d1fbba3d216b9f"}, @generic={0x8a, 0x0, "694fcdf99258ae4d68d76e3a930a0001dbce211adaf63e0c2312b752793970ca36aebc23a91bd76c59b53bf3bf4847104059d319d628c861700ecf3f831f63a131f4eb80698ee8959efff3f9cab4d757ed1bec7c9a30be5048f637b7d9c8874359919eaace593ba98d0be59cd8db568eea1086abe77235a19421615c879d21dccc0bf184344fb777"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x438, 0xd, 0x7d, 0x68, [@generic={0x73, 0x31, "1290db73ef118c79748a0972ff7b0d940aaa5a6475d7e31d5bbe9c3468385c3fc737b8a5a08c3b305a7a80ff8b15830c1175ba47c1d29dffcc5386963545cebb5111db6a28dba5c76feb99562a41cbfe01a06f188a166df55aca13f65b736ade463d9b1c1094d3a7af2b77b3c7d1baf1a6"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x5, 0x6, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x2}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x1, 0xba, 0x1, [@generic={0x6d, 0x21, "a9b2b001bcd7059ad83d02727cae6409d3860b3c689bfdc9da97e2d996dcbb240d662907af3ddd29bb13666bdc1b725970679101874e7399644a65adaaf55edfb3d39729716b0e416f85d9c4aa1cf7c46ee2c2e5c191f608d2e06cccde17c2f0f13ccc3818cb5c167be924"}, @generic={0x1e, 0x21, "d258ac3641554262cbd570d05975fe48d13e59bf217ba6d61ee08595"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x10, 0x6, 0x2, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x800}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x0, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x6}]}}]}}, {{0x9, 0x4, 0x88, 0x9e, 0xd, 0x8e, 0x1e, 0x4a, 0x8, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1fc, 0xffff, 0xe8, 0x6}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x91, 0x1, 0x5, 0x17, "58f83315e094db"}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "1004"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0xfffe, 0x3, 0x9}, {0x6, 0x24, 0x1a, 0x98, 0x10}, [@acm={0x4, 0x24, 0x2, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x80, 0x1, 0x5, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0xbc, 0xe4, 0xf5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x40, 0x5}]}], [{{0x9, 0x5, 0x9, 0x3, 0x40, 0x23, 0x4, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5c, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x6, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x81, 0x3}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x6, 0x5}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x1, 0x0, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xfbd}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x4, 0xf, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9b, 0xf801}, @generic={0xbd, 0x3, "cf80c63d30d663574cd6d2fba5ff536fc700ff14e283e4fc238b4c9ac2ac2836cfebd6b93023a4365dd916001390cad1c41dab2cc0cd79f880c214032308b5fed911df078abbe4dd4262814502806fb0ad22cd35e8d81a53bb9c4de29cc89fc9b72f8c48f07921870db39e9d0f474b572e96d46eee6a8bdc5556b0fe3d56a5b4a01c40e9cc44555a6c8633c990d7a1fc7cabe1e49a1bfa4b14980c58aff5c721decc91763fe64591790637cd4a388a12dec90ff5015c788305d1a6"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x7b, 0x2, 0x1, [@generic={0x96, 0x10, "fe318aa47bc10a087d4d4c550b378347b0a2b14ce9f7c706c3bba7bf71b3cd6c548265a32536b590169ae97e580e4093e74430bb8c88fc8e363a0539fb6146ccdfe710539b1aad473b39d4107e721d50168d9b89a01779e85dbf8e992cb8f79fdddbb441347b4a35fe1d67ce3315bb66f748a2704a8f5d8b3a92959b199893e60ba48d20c791b4dd130e29a7dd8b9e1df61e041a"}, @generic={0xf1, 0xe, "36223dd58bd06f64cc78e5363462a73584d54e4f9769307579e5b44368e80fc581df55613fcc5befc2d7544f6254ea1496ed198a121c3ad04b19e0069c384a5c028a9311dd55c79ced95206469b52424160478eba2969e029db751067446e39c39066c7b607d4b2c447dd9271c7921789c7a7d9ec4ff4b830b7abea1d82a96ba5974af8892248b9d1321e195fb24269da158e9d26a5c9214e6b5a1042e7b7bc386d0314ee07e43dce81f7129698911b5d137fd4a71af8875013c834cf041bad080d251b86671b4ed05eca9b09774909ad0b1b481d16b20561bd6e1ae726c71364efa53eb3d5b9fee461c8b038a8d02"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x0, 0x7, 0x3, [@generic={0xe0, 0xb, "05c8ef27e17c093eea61814764dcd80a7b4772d7fa2bb6c4d798bce84f153e3a5920178c10b9f118011da14322350a0433a34784eab7f04de78f79f3d6f8817b69311df29e945eba0e69c54057ee452ff7f00b88d080e1de15425f471beb07965ac95fc451d6891de39b00442ef0bc840991c58a424709d9633c7583686ab1e40aa7916fbacf11c0fad8946bb4c5ba6890ca0eb79364aefd2d532c73a195a503603d209a325615a0bdc542e345ecfb7bfb5403370b45019a3d97c607041a025a17bd9ee5cdf26d6b3e33014d9e1e0903360e468cd166f7495beac9458f8e"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0xfc, 0x2, 0x1, [@generic={0x9, 0x11, "dc24f47a6c2f9f"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0x48, 0x86, 0xf}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x1, 0xe, 0x4, [@generic={0x4e, 0x22, "30ac8352eacefe96d8d4c9c16244ee9a8fa785ae5f6c6af13c14e9c9eedbc43f9d7c2ad4f24a8c3719a139de07f831ee5eb802d8bfdaddde6a48e34124bf3eff17794707aca69526901e38c7"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0xb}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x9, 0x5, 0x5}}, {{0x9, 0x5, 0x6, 0x1, 0x40, 0x9b, 0x0, 0x8, [@generic={0xe4, 0x8, "9a76dd6eb9724aff4be96c144b4f459835bb2d563ce6ef447950a54ca96a2ecc96bc696acc10ca2ae1241cc6144bd1daa04cc15298faac62d34c2089e697dd078feaed082ebf9c32ae8d3710f24cb50eca02f19f11847924fbd4b67708443a3caf71b081c67d6c411bcb67aacda3465ca8eb2d4e891adaf5df12e113b322e38b527767b100f6d243641cf3d8c062aac41354dbb684f40ad69cf00ab93afca83b542468bd367b075ec7965a96cbd09eb215f799f5b039ca9933bbeed84630aa5f478628ce5f41111b3946e978ed373f11a81ee8b350edad52d474fd77562ac37990ad"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x6}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x1, 0x8, 0x0, [@generic={0x64, 0x10, "1ce0cff792e432a2fe0dd1109129dd21b6a85191e92650be514089413036d0b0bec3818aafaff7d3918704484d1f78bf55c589a74139343a4369e5d16122961e251d7546ec1475594f75a0b94973f0af8f4f1955c0457d563c66d55407a5edb3cc0d"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x200}]}}]}}]}}]}}, &(0x7f0000002040)={0xa, &(0x7f0000001c40)={0xa, 0x6, 0x0, 0x4, 0xa, 0x4, 0x0, 0x8}, 0x2b, &(0x7f0000001c80)={0x5, 0xf, 0x2b, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x3, 0x2, 0x9, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0xb, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x9, 0xe9}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x8}, @ptm_cap={0x3}]}, 0x6, [{0x9e, &(0x7f0000001cc0)=@string={0x9e, 0x3, "2238d1b38d5424732e25402e5c7a31588b158dcf06734e8ac1d1b170d0f1671cfddc7d7181326bee5c5de5a9365b6f765bc12319e11da756e847bb5bd49c3d670ad0b72e0443fb99748cdf8fbf4537fde16e9bc4e6527f2e1d05cc35089a3a9523a2e5d004209d61561e991d2714530aca107e6db1b1332a5f7cb1015232eb918780749f977446657c267948fb1f3663affa7489e742df0232e88842"}}, {0xa6, &(0x7f0000001d80)=@string={0xa6, 0x3, "01c54e3521a646cc15160f32c56b5b3273c1df443b3f2611100505ba741673521b38d21e1772bb56a00ccd010f101e4b26f016118d0fd38adbcdb1af7216d5762fe8d72789b0d54006e6722ff33102cf8174114af3bb9d2bc99da9e7f69759a3820dd0b366a24554f7e784f1c7d1b0f39b2608f29ffc425be1762edcae4ea555026bb8928003fca8298b3efdda932d1b835de417fc8c1057cd15b3205be7fd4e7faa8e3f"}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000001e80)=@lang_id={0x4, 0x3, 0x44b}}, {0x9f, &(0x7f0000001ec0)=@string={0x9f, 0x3, "552bb6545bd722a477dafbee3fab561030a0e5c6575d1f2feaf9e7642c26013af14e201a9f23cdd70c279b5114c6bad02af37f240658428b6626d5f1664501b90b648b999cc0340f9490b3259b2ed35b338f928101de033ca12ec434d71a55da0e5a13d97300811873b5c65453997222d9693f18b5d51dffdb0d015ad5a58999a59006defff956d788faa08958242a11cd58494859cb8d6389a1938029"}}, {0xb3, &(0x7f0000001f80)=@string={0xb3, 0x3, "25d2cc6ac2bfbdfaf60b7f53a885d77c1916a91ce149689fde53bd99f0f85591512b25b330f41f1fe0a702f004704e218b178712a7c11ac3533181ba1444584cac9f511fa8684f7fd65c2f9e8bbd8f60fdc8ea7316be1091c4ee88b1e8fe54cf4f8ba00c846ae048d6159020d2430a8451f783b85153fc03ef89be461fa59af1719637284e874ce8d564d5ae596c284dac05c3d67f3c4d67e9be6bf6e46227123a3a80dbf580f371f68c206b88fc537ff1"}}]}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r11, &(0x7f0000002280)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x48, r12, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x200080f0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)=@newtclass={0xa8, 0x28, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0xfff1}, {0xd, 0x8}, {0x3, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x24, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x81, 0x2, 0x4}}, @TCA_HFSC_FSC={0x10, 0x2, {0xb, 0x4, 0x8001}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xb4}}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_red={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x48810}, 0x20000081) 570.468464ms ago: executing program 2 (id=1251): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000850) setresuid(0x0, 0xee00, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad4300000000000000000f"], 0x14}}, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 569.790027ms ago: executing program 2 (id=1252): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0xd, 0x14, 0x3, 0x0, 0xff, 0x4, 0x0, @private=0xa010102, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r6}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x120, r3, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf8212b5f4054fd35}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x15}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040040}, 0x4040008) 481.167589ms ago: executing program 2 (id=1253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000080)="29000300010003", 0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x492dfc465ae32a8d, 0x70bd2d}, 0x1c}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000001180)={@local, @local, @void, {@canfd={0xd, {{0x1, 0x1, 0x1, 0x1}, 0x31, 0x3, 0x0, 0x0, "55bd89914c5a935f3597151aa91d9cd78efd591ffafc327f4760eca7e7f772afc9c7290704f3598176ff5c2af813e09f4eda78e0051600"}}}}, 0x0) 430.180576ms ago: executing program 2 (id=1254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xf657}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000004dc0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000004c0)="1378", 0x2}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r5 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0x7ff, 0x0, 0x0, 0xf421, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) 211.037548ms ago: executing program 2 (id=1255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x4005e}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x240040c0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x94, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x8880}, 0x4000010) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x121881, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r7, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30c) ioctl$TUNSETNOCSUM(r7, 0x400454c8, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r10, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c370000000b0104000000000000000000000009080002400000000001080002408000000100000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x100c0}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 0s ago: executing program 2 (id=1256): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x3, 0x3}, 0x6) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x4, 0x3}, 0x6) r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r4, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x102, 0x1cc) sendfile(r5, r5, 0x0, 0x6) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='&C'], 0x1c}, 0x1, 0x0, 0x0, 0x45a3c1901f775339}, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0xd, r9, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r9, 0x80000001, 0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) epoll_pwait(r6, &(0x7f00000000c0)=[{}], 0x1, 0xfe, 0x0, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x20}, {r3, 0x4044}], 0x2, 0xffffff04) write(r0, &(0x7f0000000200)="07000000010000", 0x7) kernel console output (not intermixed with test programs): ap1: entered promiscuous mode [ 118.146160][ T7295] batman_adv: batadv0: Adding interface: gretap1 [ 118.149343][ T7295] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 118.158294][ T7295] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 118.478326][ T5966] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 118.624693][ T5966] usb 5-1: Using ep0 maxpacket: 16 [ 118.628800][ T5966] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 118.632588][ T5966] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 118.632634][ T7323] FAT-fs (sr0): bogus number of reserved sectors [ 118.637225][ T5966] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 9510, setting to 1024 [ 118.639577][ T7323] FAT-fs (sr0): Can't find a valid FAT filesystem [ 118.646392][ T5966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.650970][ T5966] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 118.653989][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.657001][ T5966] usb 5-1: Product: syz [ 118.658348][ T5966] usb 5-1: Manufacturer: syz [ 118.659844][ T5966] usb 5-1: SerialNumber: syz [ 118.662893][ T5966] usb 5-1: config 0 descriptor?? [ 118.666507][ T7303] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 118.871971][ T7303] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 118.876668][ T5966] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input15 [ 118.884250][ T40] kauditd_printk_skb: 86 callbacks suppressed [ 118.884267][ T40] audit: type=1400 audit(1774640791.104:616): avc: denied { ioctl } for pid=5323 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3019 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.024759][ T1028] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 119.076322][ T40] audit: type=1400 audit(1774640791.304:617): avc: denied { write } for pid=7302 comm="syz.0.360" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 119.084764][ T40] audit: type=1400 audit(1774640791.304:618): avc: denied { open } for pid=7302 comm="syz.0.360" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 119.131349][ T40] audit: type=1400 audit(1774640791.354:619): avc: denied { mounton } for pid=7302 comm="syz.0.360" path="/103/file0" dev="tmpfs" ino=553 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 119.141321][ T7328] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 119.175456][ T1028] usb 8-1: Using ep0 maxpacket: 32 [ 119.180262][ T1028] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 119.184060][ T1028] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 119.188749][ T1028] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 119.191980][ T1028] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.201490][ T1028] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 119.205445][ T1028] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.208582][ T1028] usb 8-1: Product: ࡡ [ 119.210165][ T1028] usb 8-1: Manufacturer: 㖥ѭ䦱瀻О롘㑡ヽ࡜먭ՈꮠŒ␧啓懳苣⟩ﯼ콡ᤈϔ轜夤鸞㴮폆ڽ｝댨ᮥ蜡号앦溜䋩킏耾ᑋᏫ짘ꪘ鑜ꌼ瑿崰ହ雫刞䫾鮎퐢ꯒ♓䟬駭藿톚앩蓺㳷밖礔菁 [ 119.218175][ T1028] usb 8-1: SerialNumber: 㐁 [ 119.221570][ T40] audit: type=1400 audit(1774640791.444:620): avc: denied { write } for pid=7329 comm="syz.1.369" path="socket:[17110]" dev="sockfs" ino=17110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.225335][ T7327] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 119.257462][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.370'. [ 119.260747][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.370'. [ 119.263859][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.370'. [ 119.267819][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.370'. [ 119.270709][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.370'. [ 119.273581][ T7333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.370'. [ 119.287230][ T40] audit: type=1400 audit(1774640791.514:621): avc: denied { write } for pid=7331 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.293412][ T40] audit: type=1400 audit(1774640791.514:622): avc: denied { connect } for pid=7331 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.300446][ T40] audit: type=1400 audit(1774640791.524:623): avc: denied { read } for pid=7331 comm="syz.1.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 119.307379][ T40] audit: type=1400 audit(1774640791.524:624): avc: denied { ioctl } for pid=7331 comm="syz.1.370" path="socket:[18658]" dev="sockfs" ino=18658 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.338507][ T7337] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 119.346988][ T7338] tipc: New replicast peer: 10.1.1.0 [ 119.349144][ T7338] tipc: Enabled bearer , priority 10 [ 119.351315][ T7337] tipc: Enabling of bearer rejected, already enabled [ 119.392340][ T40] audit: type=1400 audit(1774640791.614:625): avc: denied { create } for pid=7339 comm="syz.1.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.453399][ T1028] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.455933][ T1028] usb 8-1: MIDIStreaming interface descriptor not found [ 119.507618][ T1028] usb 8-1: USB disconnect, device number 12 [ 119.561443][ T6110] udevd[6110]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.608630][ T7354] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.944644][ T7379] netlink: 'syz.2.382': attribute type 1 has an invalid length. [ 119.960519][ T7379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.969271][ T7378] vlan3: entered allmulticast mode [ 119.971040][ T7378] bond0: entered allmulticast mode [ 119.979707][ T7379] bond0: (slave geneve2): making interface the new active one [ 119.982347][ T7379] geneve2: entered allmulticast mode [ 119.985591][ T7379] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 119.991817][ T7378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7378 comm=syz.2.382 [ 120.015657][ T1028] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 120.164677][ T1028] usb 8-1: Using ep0 maxpacket: 32 [ 120.168261][ T1028] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 120.171720][ T1028] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 120.175308][ T1028] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 120.178409][ T1028] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 120.183615][ T1028] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 120.187053][ T1028] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.189878][ T1028] usb 8-1: Product: Ⴙ焅뉈ᱢ☎➘渳扜⥒鷭픍⌮䨛툒栒ພ䶠캌 [ 120.192641][ T1028] usb 8-1: Manufacturer: ꩶ各咣忞废⡏ﱕ뗲휟芙蘰㤵 [ 120.195226][ T1028] usb 8-1: SerialNumber: syz [ 120.198750][ T7327] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 120.403023][ T7327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.408099][ T7327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.467087][ T7010] tipc: Node number set to 662384644 [ 120.543922][ T7409] fuse: Bad value for 'group_id' [ 120.546518][ T7409] fuse: Bad value for 'group_id' [ 120.924746][ T1028] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.927214][ T1028] usb 8-1: MIDIStreaming interface descriptor not found [ 120.965082][ T1028] usb 8-1: USB disconnect, device number 13 [ 120.991686][ T6110] udevd[6110]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.168966][ T7435] bridge1: port 1(erspan0) entered disabled state [ 121.218335][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.246481][ T5966] usb 5-1: USB disconnect, device number 4 [ 121.332767][ T7449] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 121.371575][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.382431][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.536711][ T7440] warning: `syz.2.400' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.542929][ T7440] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 121.550077][ T7455] __nla_validate_parse: 60 callbacks suppressed [ 121.550091][ T7455] netlink: 80 bytes leftover after parsing attributes in process `syz.2.400'. [ 121.555386][ T1180] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.559521][ T1180] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 121.563406][ T1180] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.567677][ T1180] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 121.570597][ T1180] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.573424][ T1180] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 121.576447][ T7460] netlink: 64 bytes leftover after parsing attributes in process `syz.3.405'. [ 121.580158][ T1180] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.582982][ T1180] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 121.588424][ T7460] netlink: 'syz.3.405': attribute type 10 has an invalid length. [ 121.590931][ T7460] netlink: 40 bytes leftover after parsing attributes in process `syz.3.405'. [ 121.594119][ T7460] team0: entered promiscuous mode [ 121.596032][ T7460] team_slave_0: entered promiscuous mode [ 121.598182][ T7460] team_slave_1: entered promiscuous mode [ 121.600117][ T7460] team0: entered allmulticast mode [ 121.601772][ T7460] team_slave_0: entered allmulticast mode [ 121.603595][ T7460] team_slave_1: entered allmulticast mode [ 121.607287][ T7460] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.615130][ T7460] bridge0: port 3(team0) entered blocking state [ 121.617258][ T7460] bridge0: port 3(team0) entered disabled state [ 121.665806][ T5966] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.669456][ T7463] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 121.672377][ T7463] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 121.677051][ T7463] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 121.679815][ T7463] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 121.722568][ T7469] comedi comedi3: comedi_config --init_data is deprecated [ 121.725907][ T7471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.408'. [ 121.769771][ T7474] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 121.824760][ T5966] usb 5-1: Using ep0 maxpacket: 32 [ 121.836347][ T5966] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 121.840909][ T5966] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 121.853224][ T5942] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 121.855317][ T7484] tmpfs: Unknown parameter ']LV@' [ 121.856952][ T5966] usb 5-1: string descriptor 0 read error: -22 [ 121.862654][ T5966] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 121.884630][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.891185][ T7451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.905031][ T5966] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 121.905429][ T7489] IPv4: Oversized IP packet from 127.202.26.0 [ 121.907952][ T5966] usb 5-1: MIDIStreaming interface descriptor not found [ 121.956885][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.415'. [ 122.040041][ T7499] netlink: 64 bytes leftover after parsing attributes in process `syz.2.417'. [ 122.050812][ T7499] netlink: 'syz.2.417': attribute type 10 has an invalid length. [ 122.053995][ T7499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.417'. [ 122.058510][ T7499] team0: entered promiscuous mode [ 122.060633][ T7499] team_slave_0: entered promiscuous mode [ 122.063115][ T7499] team_slave_1: entered promiscuous mode [ 122.066176][ T7499] team0: entered allmulticast mode [ 122.067898][ T7499] team_slave_0: entered allmulticast mode [ 122.069782][ T7499] team_slave_1: entered allmulticast mode [ 122.072669][ T7499] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.075803][ T7499] bridge0: port 3(team0) entered blocking state [ 122.077900][ T7499] bridge0: port 3(team0) entered disabled state [ 122.081075][ T7499] bridge0: port 3(team0) entered blocking state [ 122.083208][ T7499] bridge0: port 3(team0) entered forwarding state [ 122.104624][ T7506] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 122.106771][ T7506] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 122.110807][ T7506] vhci_hcd vhci_hcd.0: Device attached [ 122.111512][ T7507] vhci_hcd: connection closed [ 122.113082][ T165] vhci_hcd vhci_hcd.1: stop threads [ 122.116395][ T165] vhci_hcd vhci_hcd.1: release socket [ 122.118222][ T165] vhci_hcd vhci_hcd.1: disconnect device [ 122.147125][ T58] usb 5-1: USB disconnect, device number 5 [ 122.351481][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.425'. [ 122.366587][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.425'. [ 122.367525][ T1180] Bluetooth: hci4: Frame reassembly failed (-84) [ 122.884767][ T6093] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 123.045987][ T6093] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 123.048553][ T6093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.051953][ T6093] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.055963][ T6093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.059734][ T6093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 123.063945][ T6093] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 123.066560][ T6093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.070155][ T6093] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.073928][ T6093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.077622][ T6093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 123.082015][ T6093] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 123.084554][ T6093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.088209][ T6093] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.091999][ T6093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.095913][ T6093] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 123.104264][ T6093] usb 6-1: string descriptor 0 read error: -22 [ 123.106825][ T6093] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 123.109812][ T6093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.120895][ T6093] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 123.318213][ T6093] usb 6-1: USB disconnect, device number 3 [ 123.521939][ T7527] adutux: No device or device unplugged -19 [ 123.681738][ T7540] netlink: 64 bytes leftover after parsing attributes in process `syz.0.430'. [ 123.693117][ T7540] netlink: 'syz.0.430': attribute type 10 has an invalid length. [ 123.697111][ T7540] team0: entered promiscuous mode [ 123.698664][ T7540] team0: entered allmulticast mode [ 123.700849][ T7540] bridge0: port 1(team0) entered blocking state [ 123.703071][ T7540] bridge0: port 1(team0) entered disabled state [ 123.826170][ T1180] wlan1: Trigger new scan to find an IBSS to join [ 123.894077][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 123.894090][ T40] audit: type=1400 audit(1774640796.114:655): avc: denied { ioctl } for pid=7541 comm="syz.0.431" path="socket:[18804]" dev="sockfs" ino=18804 ioctlcmd=0x6f02 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.384675][ T5939] Bluetooth: hci4: command 0x1003 tx timeout [ 124.384956][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 124.543334][ T7547] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 124.609544][ T7552] CUSE: unknown device info "" [ 124.611329][ T7552] CUSE: zero length info key specified [ 124.613609][ T40] audit: type=1400 audit(1774640796.834:656): avc: denied { remount } for pid=7551 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.682492][ T7558] erspan1: entered promiscuous mode [ 124.684215][ T7558] erspan1: entered allmulticast mode [ 124.703026][ T7558] syzkaller0: entered promiscuous mode [ 124.706318][ T7558] syzkaller0: entered allmulticast mode [ 124.711938][ T7558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=7558 comm=syz.0.438 [ 124.753037][ T40] audit: type=1400 audit(1774640796.971:657): avc: denied { bind } for pid=7554 comm="syz.2.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.240251][ T40] audit: type=1400 audit(1774640797.461:658): avc: denied { map } for pid=7594 comm="syz.2.445" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 125.442525][ T7614] bond0: (slave caif0): Error: Device type is different from other slaves [ 125.500922][ T7618] netlink: 'syz.2.448': attribute type 3 has an invalid length. [ 125.620568][ T40] audit: type=1400 audit(1774640797.841:659): avc: denied { mount } for pid=7623 comm="syz.2.449" name="/" dev="9p" ino=76546181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 125.697518][ T40] audit: type=1400 audit(1774640797.921:660): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 126.056595][ T7651] trusted_key: encrypted_key: insufficient parameters specified [ 126.066289][ T7653] bridge0: port 1(team0) entered disabled state [ 126.075498][ T7653] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 126.125040][ T7653] team0: Mode changed to "loadbalance" [ 126.161200][ T6093] IPVS: starting estimator thread 0... [ 126.220222][ T7664] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 126.245915][ T7658] IPVS: using max 42 ests per chain, 100800 per kthread [ 126.287041][ T7666] sp0: Synchronizing with TNC [ 126.294239][ T40] audit: type=1400 audit(1774640798.511:661): avc: denied { bind } for pid=7667 comm="syz.1.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 126.300647][ T7668] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 126.331100][ T7666] : renamed from vlan0 (while UP) [ 126.360190][ T7675] syz_tun: entered allmulticast mode [ 126.395130][ T7676] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7676 comm=syz.2.461 [ 126.408492][ T40] audit: type=1400 audit(1774640798.631:662): avc: denied { bind } for pid=7673 comm="syz.1.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.414926][ T40] audit: type=1400 audit(1774640798.631:663): avc: denied { name_bind } for pid=7673 comm="syz.1.464" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 126.423203][ T40] audit: type=1400 audit(1774640798.631:664): avc: denied { node_bind } for pid=7673 comm="syz.1.464" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 126.511565][ T7670] syz_tun: left allmulticast mode [ 126.629986][ T7690] __nla_validate_parse: 11 callbacks suppressed [ 126.629999][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'. [ 126.686520][ T7698] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.746237][ T7700] bridge_slave_0: left allmulticast mode [ 126.748615][ T7700] bridge_slave_0: left promiscuous mode [ 126.751088][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.760778][ T7700] bridge_slave_1: left allmulticast mode [ 126.762688][ T7700] bridge_slave_1: left promiscuous mode [ 126.764859][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.771695][ T7700] bond0: (slave bond_slave_0): Releasing backup interface [ 126.777312][ T1155] wlan1: Trigger new scan to find an IBSS to join [ 126.779961][ T7700] bond0: (slave bond_slave_1): Releasing backup interface [ 126.787617][ T7700] team0: Port device team_slave_0 removed [ 126.792306][ T7700] team0: Port device team_slave_1 removed [ 126.794679][ T7700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.797037][ T7700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.801255][ T7700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.804328][ T7700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.809551][ T7700] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 126.823069][ T7706] team0: Mode changed to "loadbalance" [ 126.851004][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 126.891186][ T7708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.474'. [ 127.283542][ T7722] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 127.333945][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.478'. [ 127.338267][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.478'. [ 127.346655][ T7722] ip6gretap0: entered promiscuous mode [ 127.350426][ T7722] syz_tun: entered promiscuous mode [ 127.392936][ T7683] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 127.433608][ T7731] process 'syz.2.481' launched '/dev/fd/4' with NULL argv: empty string added [ 127.595922][ T7742] netlink: 48 bytes leftover after parsing attributes in process `syz.2.484'. [ 127.599748][ T7742] syzkaller0: entered promiscuous mode [ 127.601533][ T7742] syzkaller0: entered allmulticast mode [ 127.754120][ T7745] bridge0: port 3(team0) entered disabled state [ 127.769407][ T7747] comedi comedi3: comedi_parport: I/O port conflict (0x8001,3) [ 127.771310][ T7745] bridge_slave_0: left allmulticast mode [ 127.773718][ T7745] bridge_slave_0: left promiscuous mode [ 127.778004][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.783486][ T7745] bridge_slave_1: left allmulticast mode [ 127.785614][ T7745] bridge_slave_1: left promiscuous mode [ 127.787414][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.797397][ T7745] team_slave_0: left promiscuous mode [ 127.799203][ T7745] team_slave_0: left allmulticast mode [ 127.805289][ T7745] team0: Port device team_slave_0 removed [ 127.807578][ T7745] team_slave_1: left promiscuous mode [ 127.809240][ T7745] team_slave_1: left allmulticast mode [ 127.815168][ T7745] team0: Port device team_slave_1 removed [ 127.817739][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.820519][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.823694][ T7745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.826956][ T7745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.830657][ T7745] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 127.843888][ T7752] team0: Mode changed to "loadbalance" [ 127.847834][ T7754] netlink: 'syz.1.487': attribute type 2 has an invalid length. [ 127.870616][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 127.994286][ T5942] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 128.056311][ T29] IPVS: starting estimator thread 0... [ 128.089298][ T7767] fuse: Bad value for 'fd' [ 128.164652][ T7765] IPVS: using max 42 ests per chain, 100800 per kthread [ 128.295192][ T7767] batman_adv: batadv0: Adding interface: dummy0 [ 128.297883][ T7767] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.306774][ T7767] batman_adv: batadv0: Interface activated: dummy0 [ 128.318900][ T7767] batadv0: mtu less than device minimum [ 128.322212][ T7767] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.326820][ T7767] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.330746][ T7767] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.334481][ T7767] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.338344][ T7767] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.342835][ T7767] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.347296][ T7767] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.354713][ T1028] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 128.363471][ T7771] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 128.398904][ T7773] netlink: 68 bytes leftover after parsing attributes in process `syz.3.494'. [ 128.505026][ T1028] usb 7-1: Using ep0 maxpacket: 32 [ 128.515674][ T1028] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 128.518384][ T1028] usb 7-1: config 0 has no interface number 0 [ 128.520473][ T1028] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 128.528977][ T1028] usb 7-1: config 0 interface 196 has no altsetting 0 [ 128.534201][ T7780] netlink: 'syz.3.496': attribute type 10 has an invalid length. [ 128.538860][ T1028] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 128.541443][ T7780] team0: left allmulticast mode [ 128.542202][ T1028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.543703][ T7780] team_slave_0: left allmulticast mode [ 128.547793][ T1028] usb 7-1: Product: syz [ 128.548932][ T7780] team_slave_1: left allmulticast mode [ 128.550216][ T1028] usb 7-1: Manufacturer: syz [ 128.552746][ T7780] team0: left promiscuous mode [ 128.552763][ T7780] team_slave_0: left promiscuous mode [ 128.552952][ T7780] team_slave_1: left promiscuous mode [ 128.554388][ T1028] usb 7-1: SerialNumber: syz [ 128.557128][ T7780] bridge0: port 3(team0) entered disabled state [ 128.560238][ T1028] usb 7-1: config 0 descriptor?? [ 128.569598][ T7760] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 128.572395][ T7780] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.577522][ T7780] bond0: (slave team0): Enslaving as an active interface with an up link [ 128.618980][ T7784] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.498'. [ 128.624476][ T7784] overlayfs: failed to resolve './file0/file0': -2 [ 128.649801][ T7785] netlink: 304 bytes leftover after parsing attributes in process `syz.3.496'. [ 128.714204][ T7790] overlayfs: failed to clone upperpath [ 128.916359][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 128.916371][ T40] audit: type=1400 audit(1774640801.141:683): avc: denied { search } for pid=7811 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.925396][ T40] audit: type=1400 audit(1774640801.141:684): avc: denied { read write } for pid=7811 comm="getty" name="utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 128.945178][ T40] audit: type=1400 audit(1774640801.141:685): avc: denied { open } for pid=7811 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 128.952457][ T40] audit: type=1400 audit(1774640801.141:686): avc: denied { lock } for pid=7811 comm="getty" path="/run/utmp" dev="tmpfs" ino=2 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:init_tmpfs_t tclass=file permissive=1 [ 128.973418][ T40] audit: type=1400 audit(1774640801.141:687): avc: denied { read } for pid=7811 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 128.991435][ T40] audit: type=1400 audit(1774640801.201:688): avc: denied { listen } for pid=7798 comm="syz.3.502" lport=34610 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.060033][ T7800] kvm: emulating exchange as write [ 129.114486][ T5942] Bluetooth: hci0: unexpected event for opcode 0x202d [ 129.156592][ T40] audit: type=1400 audit(1774640801.381:689): avc: denied { bind } for pid=7826 comm="syz.1.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.175663][ T7835] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.219408][ T1028] ipheth 7-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 129.223727][ T1028] ipheth 7-1:0.196: probe with driver ipheth failed with error -71 [ 129.233865][ T40] audit: type=1400 audit(1774640801.451:690): avc: denied { setopt } for pid=7836 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.234191][ T1028] usb 7-1: USB disconnect, device number 4 [ 129.245118][ T40] audit: type=1400 audit(1774640801.451:691): avc: denied { write } for pid=7836 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.369051][ T40] audit: type=1400 audit(1774640801.591:692): avc: denied { ioctl } for pid=7840 comm="syz.3.514" path="socket:[20447]" dev="sockfs" ino=20447 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 129.393907][ T7849] kernel read not supported for file /cgroup.controllers (pid: 7849 comm: syz.3.517) [ 129.738471][ T61] wlan1: Creating new IBSS network, BSSID 72:cc:47:42:79:74 [ 129.940208][ T7899] netlink: 'syz.3.530': attribute type 10 has an invalid length. [ 129.943372][ T7899] batadv0: entered promiscuous mode [ 129.945626][ T5942] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 129.949013][ T7899] batadv0: entered allmulticast mode [ 129.951412][ T7899] bridge0: port 3(batadv0) entered blocking state [ 129.954082][ T7899] bridge0: port 3(batadv0) entered disabled state [ 130.129382][ T7919] dlm: non-version read from control device 95 [ 130.207739][ T7932] tc_dump_action: action bad kind [ 130.249397][ T7931] delete_channel: no stack [ 130.316963][ T7941] binder: 7940:7941 ioctl c018620c 200000000180 returned -22 [ 130.324670][ T7939] bridge_slave_0: invalid flags given to default FDB implementation [ 130.409395][ T7959] netlink: 'syz.2.543': attribute type 1 has an invalid length. [ 130.412833][ T7959] netlink: 'syz.2.543': attribute type 1 has an invalid length. [ 130.474691][ T61] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 130.479336][ T61] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 130.506457][ T7969] rdma_op ffff8880596711f0 conn xmit_rdma 0000000000000000 [ 130.567424][ T7983] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 131.109917][ T8024] binder: 8018:8024 ioctl c0306201 0 returned -14 [ 131.115593][ T8024] fuse: Bad value for 'fd' [ 131.158793][ T8028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.192217][ T8033] netlink: 'syz.3.566': attribute type 5 has an invalid length. [ 131.488844][ T8060] overlayfs: failed to clone upperpath [ 131.727987][ T8080] overlayfs: workdir and upperdir must be separate subtrees [ 131.879817][ T8088] __nla_validate_parse: 15 callbacks suppressed [ 131.879835][ T8088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.581'. [ 131.887265][ T8088] i2c i2c-1: dtv_property_process_set: SET cmd 0x25dfdbfb undefined [ 131.968986][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.584'. [ 131.982709][ T5936] cgroup: fork rejected by pids controller in /syz0 [ 132.054752][ T8095] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 132.057138][ T8095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 132.059367][ T8095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 132.068364][ T8101] input: syz1 as /devices/virtual/input/input19 [ 132.219191][ T8122] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 132.313663][ T8110] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4139625810 (8279251620 ns) > initial count (1536 ns). Using initial count to start timer. [ 132.372307][ T1180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.476884][ T5939] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.480584][ T5939] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.486966][ T5939] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.489978][ T5939] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.492764][ T5939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.516752][ T1180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.545179][ T59] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 132.624245][ T1180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.705270][ T59] usb 6-1: Using ep0 maxpacket: 32 [ 132.709173][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 132.713007][ T59] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 132.717277][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 132.720975][ T8135] chnl_net:caif_netlink_parms(): no params data found [ 132.723489][ T59] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 132.728630][ T59] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.732039][ T59] usb 6-1: Product: syz [ 132.733861][ T59] usb 6-1: Manufacturer: syz [ 132.740291][ T59] usb 6-1: SerialNumber: syz [ 132.747033][ T59] usb 6-1: config 0 descriptor?? [ 132.757732][ T59] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input20 [ 132.774145][ C3] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 132.795364][ C3] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 132.795645][ T1180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.854628][ C3] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 132.949899][ T8135] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.952895][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.959160][ T8135] bridge_slave_0: entered allmulticast mode [ 132.963897][ T8135] bridge_slave_0: entered promiscuous mode [ 132.976780][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.979176][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.981500][ T8135] bridge_slave_1: entered allmulticast mode [ 132.989646][ T8135] bridge_slave_1: entered promiscuous mode [ 133.066452][ T8135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.109157][ T8135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.244601][ T1180] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 133.480015][ T1180] bond0 (unregistering): Released all slaves [ 133.480543][ T128] smc: removing ib device sy1 [ 133.485886][ T1180] bond1 (unregistering): Released all slaves [ 133.495635][ T1180] bond2 (unregistering): Released all slaves [ 133.514783][ T8135] team0: Port device team_slave_0 added [ 133.519117][ T8135] team0: Port device team_slave_1 added [ 133.571769][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.574243][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.583280][ T8135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.595194][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.597490][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.606239][ T8135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.684357][ T8135] hsr_slave_0: entered promiscuous mode [ 133.688172][ T8135] hsr_slave_1: entered promiscuous mode [ 133.691915][ T8135] debugfs: 'hsr0' already exists in 'hsr' [ 133.693969][ T8135] Cannot create hsr debugfs directory [ 134.154630][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.154663][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.182850][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'. [ 134.188840][ T8188] netlink: 200 bytes leftover after parsing attributes in process `syz.2.604'. [ 134.198315][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 134.198325][ T40] audit: type=1400 audit(1774640806.421:728): avc: denied { setopt } for pid=8187 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 134.205088][ T8187] delete_channel: no stack [ 134.549446][ T5942] Bluetooth: hci3: command tx timeout [ 134.569147][ T8197] random: crng reseeded on system resumption [ 134.581582][ T8197] Hibernate inconsistent memory map detected! [ 134.585871][ T8197] PM: hibernation: Image mismatch: architecture specific data [ 134.604663][ T1180] hsr_slave_0: left promiscuous mode [ 134.609376][ T1180] hsr_slave_1: left promiscuous mode [ 134.622714][ T1180] veth1_macvtap: left promiscuous mode [ 134.625708][ T1180] veth0_macvtap: left promiscuous mode [ 134.627640][ T1180] veth1_vlan: left promiscuous mode [ 134.629268][ T1180] veth0_vlan: left promiscuous mode [ 135.217338][ T8122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.222549][ T8135] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.225936][ T8200] netlink: 'syz.2.608': attribute type 1 has an invalid length. [ 135.229212][ T8200] netlink: 192 bytes leftover after parsing attributes in process `syz.2.608'. [ 135.250242][ T6093] usb 6-1: USB disconnect, device number 4 [ 135.252624][ C3] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 135.312151][ T8135] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.317348][ T8135] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.327918][ T8135] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.464270][ T8135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.487306][ T8135] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.498641][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.500880][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.504718][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.507580][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.528035][ T40] audit: type=1400 audit(1774640807.751:729): avc: denied { create } for pid=8231 comm="syz.2.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 135.555490][ T40] audit: type=1400 audit(1774640807.761:730): avc: denied { sys_admin } for pid=8231 comm="syz.2.613" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 135.561824][ T40] audit: type=1400 audit(1774640807.761:731): avc: denied { checkpoint_restore } for pid=8231 comm="syz.2.613" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 135.569541][ T40] audit: type=1400 audit(1774640807.761:732): avc: denied { setattr } for pid=8228 comm="syz.1.612" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 135.630998][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.614'. [ 135.633803][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'. [ 135.710253][ T40] audit: type=1400 audit(1774640807.931:733): avc: denied { ioctl } for pid=8242 comm="syz.1.615" path="/dev/usbmon7" dev="devtmpfs" ino=759 ioctlcmd=0x3b66 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 135.721830][ T8135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.754321][ T8135] veth0_vlan: entered promiscuous mode [ 135.762134][ T8135] veth1_vlan: entered promiscuous mode [ 135.777269][ T8135] veth0_macvtap: entered promiscuous mode [ 135.781568][ T8135] veth1_macvtap: entered promiscuous mode [ 135.792629][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.802467][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.809335][ T128] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.812872][ T128] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.836424][ T8253] exFAT-fs (nullb0): invalid boot record signature [ 135.838443][ T128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.838651][ T8253] exFAT-fs (nullb0): failed to read boot sector [ 135.841777][ T128] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.844120][ T8253] exFAT-fs (nullb0): failed to recognize exfat type [ 135.925976][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.930480][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.946671][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.949166][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.953618][ T40] audit: type=1400 audit(1774640808.171:734): avc: denied { mounton } for pid=8135 comm="syz-executor" path="/syzkaller.ZhUHhG/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 135.971817][ T40] audit: type=1400 audit(1774640808.191:735): avc: denied { mounton } for pid=8135 comm="syz-executor" path="/syzkaller.ZhUHhG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 135.995760][ T40] audit: type=1400 audit(1774640808.191:736): avc: denied { mounton } for pid=8135 comm="syz-executor" path="/syzkaller.ZhUHhG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25219 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 136.006986][ T40] audit: type=1400 audit(1774640808.191:737): avc: denied { mounton } for pid=8135 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 136.029078][ T8262] dvmrp0: entered allmulticast mode [ 136.039954][ T8266] 9pnet_fd: p9_fd_create_unix (8266): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 136.190847][ T8283] program syz.3.625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.310073][ T8293] netlink: 'syz.2.628': attribute type 10 has an invalid length. [ 136.312796][ T8293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.628'. [ 136.319568][ T8293] net_ratelimit: 15 callbacks suppressed [ 136.319580][ T8293] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 136.425818][ T8307] netlink: 880 bytes leftover after parsing attributes in process `syz.3.633'. [ 136.444864][ T8312] tipc: Can't bind to reserved service type 2 [ 136.466849][ T8314] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.470457][ T8314] bridge_slave_1: left allmulticast mode [ 136.472756][ T8314] bridge_slave_1: left promiscuous mode [ 136.477503][ T8314] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.485994][ T8314] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 136.499255][ T8314] rdma_op ffff88805a6471f0 conn xmit_rdma 0000000000000000 [ 136.569266][ T8318] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 136.581212][ T8326] netlink: 'syz.3.640': attribute type 3 has an invalid length. [ 136.616062][ T5942] Bluetooth: hci3: command tx timeout [ 136.646347][ T8336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8336 comm=syz.0.644 [ 136.741034][ T8341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8341 comm=syz.3.646 [ 136.745084][ T8342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=8342 comm=syz.3.646 [ 136.831828][ T8349] hfsplus: unable to find HFS+ superblock [ 137.326517][ T8373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.336963][ T8372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.343027][ T8373] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 137.351857][ T8372] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 137.384166][ T8377] xt_hashlimit: max too large, truncated to 1048576 [ 137.390697][ T8377] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 137.401823][ T8377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.514148][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 137.626654][ T8386] SQUASHFS error: Failed to read block 0x0: -5 [ 137.628805][ T8386] unable to read squashfs_super_block [ 137.692502][ T8397] tmpfs: Unknown parameter 'K0 @06V";׫mgNށ' [ 137.764231][ T8407] capability: warning: `syz.0.666' uses 32-bit capabilities (legacy support in use) [ 137.897018][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.931842][ T8418] binder: 8417:8418 ioctl c0306201 2000000001c0 returned -14 [ 138.354574][ T830] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 138.433605][ T8426] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 138.439605][ T8426] batadv0: mtu less than device minimum [ 138.441932][ T8426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 138.445760][ T8426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 138.449393][ T8426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 138.452973][ T8426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 138.456549][ T8426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 138.460136][ T8426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 138.463773][ T8426] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 138.504781][ T830] usb 7-1: Using ep0 maxpacket: 16 [ 138.511016][ T830] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 138.514227][ T830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.516858][ T830] usb 7-1: Product: syz [ 138.518261][ T830] usb 7-1: Manufacturer: syz [ 138.519848][ T830] usb 7-1: SerialNumber: syz [ 138.521834][ T8429] evm: overlay not supported [ 138.523578][ T830] usb 7-1: config 0 descriptor?? [ 138.694660][ T5942] Bluetooth: hci3: command tx timeout [ 138.733889][ T8424] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 138.895479][ T8453] netlink: 14 bytes leftover after parsing attributes in process `syz.0.682'. [ 138.907991][ T8453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.913300][ T8453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.920154][ T8453] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 138.926937][ T8453] bond0 (unregistering): Released all slaves [ 138.938180][ T830] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 138.943830][ T830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.948619][ T830] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 138.951310][ T830] usb 7-1: media controller created [ 138.958126][ T8450] infiniband sy1: set down [ 138.959306][ T830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.959773][ T7010] sy1: Port: 1 Link DOWN [ 138.964225][ T8450] infiniband sy1: added bond0 [ 138.997109][ T8450] RDS/IB: sy1: added [ 138.999674][ T8450] smc: adding ib device sy1 with port count 1 [ 139.001928][ T8450] smc: ib device sy1 port 1 has no pnetid [ 139.208207][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.211175][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.218590][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.221559][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.507662][ T8424] dtv5100: wlen = 0, aborting. [ 139.509316][ T830] zl10353_read_register: readreg error (reg=127, ret==0) [ 139.511454][ T830] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 139.513941][ T830] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 139.520679][ T830] usb 7-1: USB disconnect, device number 5 [ 139.538135][ T830] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 139.618451][ T8477] syzkaller0: entered promiscuous mode [ 139.620291][ T8477] syzkaller0: entered allmulticast mode [ 139.685660][ T8478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.690'. [ 140.046272][ T8480] misc userio: Invalid payload size [ 140.048069][ T8480] misc userio: No port type given on /dev/userio [ 140.141248][ T29] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 140.144126][ T29] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 140.148311][ T29] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 140.150590][ T29] hid-generic 0006:0004:0009.0003: unknown main item tag 0x0 [ 140.152935][ T29] hid-generic 0006:0004:0009.0003: collection stack underflow [ 140.155936][ T12] smc: removing ib device sy1 [ 140.156203][ T29] hid-generic 0006:0004:0009.0003: item 0 2 0 12 parsing failed [ 140.161205][ T29] hid-generic 0006:0004:0009.0003: probe with driver hid-generic failed with error -22 [ 140.188171][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 140.188183][ T40] audit: type=1400 audit(1774640812.411:764): avc: denied { wake_alarm } for pid=8493 comm="syz.2.695" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.242774][ T40] audit: type=1400 audit(1774640812.461:765): avc: denied { create } for pid=8493 comm="syz.2.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 140.249255][ T40] audit: type=1400 audit(1774640812.461:766): avc: denied { write } for pid=8493 comm="syz.2.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 140.774727][ T5942] Bluetooth: hci3: command tx timeout [ 140.814732][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.852301][ T8503] dlm: no locking on control device [ 140.854407][ T8503] dlm: no locking on control device [ 140.858177][ T8503] dlm: no locking on control device [ 140.860498][ T8503] dlm: no locking on control device [ 140.862534][ T8503] dlm: no locking on control device [ 140.865428][ T8503] dlm: no locking on control device [ 140.867709][ T8503] dlm: no locking on control device [ 140.869898][ T8503] dlm: no locking on control device [ 140.871716][ T8503] dlm: no locking on control device [ 140.873897][ T8503] dlm: no locking on control device [ 140.876613][ T8503] dlm: no locking on control device [ 140.878704][ T8503] dlm: no locking on control device [ 140.880655][ T8503] dlm: no locking on control device [ 140.883081][ T8503] dlm: no locking on control device [ 140.885468][ T8503] dlm: no locking on control device [ 140.887820][ T8503] dlm: no locking on control device [ 140.889957][ T8503] dlm: no locking on control device [ 140.891910][ T8503] dlm: no locking on control device [ 140.894343][ T8503] dlm: no locking on control device [ 140.896892][ T8503] dlm: no locking on control device [ 140.898632][ T8503] dlm: no locking on control device [ 140.900786][ T8503] dlm: no locking on control device [ 140.902910][ T8503] dlm: no locking on control device [ 140.905453][ T8503] dlm: no locking on control device [ 140.907472][ T8503] dlm: no locking on control device [ 140.909323][ T8503] dlm: no locking on control device [ 140.911493][ T8503] dlm: no locking on control device [ 140.913563][ T8503] dlm: no locking on control device [ 140.915591][ T8503] dlm: no locking on control device [ 140.917707][ T8503] dlm: no locking on control device [ 140.919819][ T8503] dlm: no locking on control device [ 140.921947][ T8503] dlm: no locking on control device [ 140.923835][ T8503] dlm: no locking on control device [ 140.964608][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 140.968051][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.970321][ T8507] tmpfs: Unknown parameter '/dev/kvm' [ 140.971936][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.974446][ T8507] tmpfs: Unknown parameter '/dev/kvm' [ 140.979576][ T29] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 140.979823][ T8507] tmpfs: Unknown parameter '/dev/kvm' [ 140.982425][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.984971][ T8507] tmpfs: Unknown parameter '/dev/kvm' [ 140.986047][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 140.991974][ T29] usb 5-1: config 0 descriptor?? [ 141.118921][ T830] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 141.121815][ T830] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 141.125170][ T830] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 141.127818][ T830] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 141.130614][ T830] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 141.133523][ T830] hid-generic 0005:000B:0009.0004: unknown main item tag 0x0 [ 141.164336][ T830] hid-generic 0005:000B:0009.0004: hidraw1: BLUETOOTH HID v0.01 Device [syz0] on syz1 [ 141.187490][ T40] audit: type=1400 audit(1774640813.411:767): avc: denied { setopt } for pid=8519 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 141.194987][ T40] audit: type=1400 audit(1774640813.411:768): avc: denied { write } for pid=8519 comm="syz.3.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 141.210976][ T29] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 141.220218][ T8521] fido_id[8521]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 141.405820][ T8497] iowarrior 5-1:0.0: Error -90 while submitting URB [ 141.412136][ T8497] tipc: Started in network mode [ 141.419269][ T8497] tipc: Node identity 86b7c1718db5, cluster identity 4711 [ 141.421696][ T8497] tipc: Enabled bearer , priority 0 [ 141.425920][ T29] usb 5-1: USB disconnect, device number 6 [ 141.447187][ T8530] netlink: 80 bytes leftover after parsing attributes in process `syz.2.706'. [ 141.449662][ T8496] tipc: Disabling bearer [ 141.449958][ T8531] netlink: 80 bytes leftover after parsing attributes in process `syz.2.706'. [ 141.802814][ T40] audit: type=1400 audit(1774640814.021:769): avc: denied { map } for pid=8555 comm="syz.2.714" path="socket:[25596]" dev="sockfs" ino=25596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 141.857797][ T40] audit: type=1400 audit(1774640814.081:770): avc: denied { audit_write } for pid=8555 comm="syz.2.714" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 142.081688][ T8559] netlink: 'syz.0.715': attribute type 21 has an invalid length. [ 142.143770][ T8565] IPVS: length: 120 != 24 [ 142.199460][ T8569] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 142.212014][ T8569] overlayfs: failed to resolve './file1': -2 [ 142.219434][ T8569] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 142.225308][ T40] audit: type=1400 audit(1774640814.441:771): avc: denied { load_policy } for pid=8568 comm="syz.1.720" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 142.225991][ T8569] SELinux: failed to load policy [ 142.242297][ T40] audit: type=1400 audit(1774640814.461:772): avc: denied { watch } for pid=8568 comm="syz.1.720" path="/185/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 142.615259][ T40] audit: type=1400 audit(1774640814.821:773): avc: denied { mount } for pid=8580 comm="syz.3.723" name="/" dev="hugetlbfs" ino=27650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 142.649043][ T8589] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.724'. [ 142.864797][ T5942] Bluetooth: hci3: command tx timeout [ 143.001665][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c822000: rx timeout, send abort [ 143.198415][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 143.204242][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 143.215093][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 143.219333][ T8625] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 143.222019][ T8625] overlayfs: missing 'lowerdir' [ 143.457765][ T8640] netlink: 'syz.0.739': attribute type 322 has an invalid length. [ 143.502618][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c821800: rx timeout, send abort [ 143.506661][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c822000: abort rx timeout. Force session deactivation [ 143.525163][ T8643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'. [ 143.693468][ T8652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.746'. [ 144.006601][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c821800: abort rx timeout. Force session deactivation [ 144.193016][ T8675] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.755'. [ 144.197751][ T8675] net_ratelimit: 12 callbacks suppressed [ 144.197771][ T8675] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 144.206085][ T8675] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 144.211169][ T8676] comedi comedi3: comedi_test: 33787 microvolt, 2023431205 microsecond waveform attached [ 144.439380][ T8697] netlink: 'syz.1.761': attribute type 1 has an invalid length. [ 144.466673][ T8697] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.926034][ T8724] syzkaller0: entered promiscuous mode [ 144.928678][ T8724] syzkaller0: entered allmulticast mode [ 144.934644][ T5942] Bluetooth: hci3: command tx timeout [ 145.197920][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 145.197931][ T40] audit: type=1400 audit(1774640817.421:789): avc: denied { write } for pid=8742 comm="syz.2.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 146.282111][ T40] audit: type=1400 audit(1774640818.501:790): avc: denied { bind } for pid=8767 comm="syz.1.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 146.282441][ T8767] delete_channel: no stack [ 146.302251][ T40] audit: type=1400 audit(1774640818.521:791): avc: denied { accept } for pid=8765 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 146.347344][ T8773] program syz.1.780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.468926][ T40] audit: type=1400 audit(1774640818.691:792): avc: denied { execute_no_trans } for pid=8769 comm="syz.3.778" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=25892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 146.522437][ T40] audit: type=1400 audit(1774640818.741:793): avc: denied { setopt } for pid=8779 comm="syz.1.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 146.967049][ T40] audit: type=1400 audit(1774640819.191:794): avc: denied { map } for pid=8791 comm="syz.2.785" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 149.519846][ T8782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 149.609150][ T40] audit: type=1400 audit(1774640821.831:795): avc: denied { execute } for pid=8810 comm="syz.2.789" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.656759][ T8817] netlink: 64 bytes leftover after parsing attributes in process `syz.2.792'. [ 149.747125][ T40] audit: type=1400 audit(1774640821.971:796): avc: denied { setopt } for pid=8827 comm="syz.2.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 152.933793][ T8841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.047272][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 153.064386][ T40] audit: type=1400 audit(1774640825.281:797): avc: denied { ioctl } for pid=8886 comm="syz.2.811" path="/dev/sg1" dev="devtmpfs" ino=727 ioctlcmd=0x5387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 153.064473][ T8887] hsr_slave_1 (unregistering): left promiscuous mode [ 153.130446][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 153.133859][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.815'. [ 153.141486][ T46] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.141578][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 153.146345][ T46] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.149263][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.815'. [ 153.153623][ T46] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.160674][ T46] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.200603][ T40] audit: type=1400 audit(1774640825.421:798): avc: denied { read } for pid=8901 comm="syz.2.816" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 153.289761][ T8909] syz.2.818 uses old SIOCAX25GETINFO [ 153.340484][ T8909] netlink: 'syz.2.818': attribute type 19 has an invalid length. [ 153.343765][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'. [ 153.347664][ T8909] netlink: 'syz.2.818': attribute type 19 has an invalid length. [ 153.350455][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'. [ 153.543747][ T8927] binder: 8926:8927 ioctl 801c582d 200000000240 returned -22 [ 153.578338][ T8931] netlink: 24 bytes leftover after parsing attributes in process `syz.2.824'. [ 153.815057][ T5942] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 153.815269][ T8938] /dev/nullb0: Can't open blockdev [ 153.987319][ T8953] overlayfs: conflicting options: nfs_export=on,index=off [ 153.991236][ T8954] overlayfs: conflicting options: nfs_export=on,index=off [ 154.055937][ T8958] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 154.059355][ T8958] SELinux: failed to load policy [ 154.125313][ T40] audit: type=1400 audit(1774640826.351:799): avc: denied { getopt } for pid=8963 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 154.174452][ T8969] ref_ctr_offset mismatch. inode: 0xba offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x3000800000006 [ 154.230824][ T40] audit: type=1400 audit(1774640826.451:800): avc: denied { read } for pid=8970 comm="syz.0.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.318684][ T40] audit: type=1400 audit(1774640826.541:801): avc: denied { mount } for pid=8973 comm="syz.0.836" name="/" dev="configfs" ino=3174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 154.446631][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 154.850477][ T9003] netlink: 'syz.2.844': attribute type 2 has an invalid length. [ 154.856928][ T9004] netlink: 'syz.2.844': attribute type 2 has an invalid length. [ 154.966354][ T40] audit: type=1400 audit(1774640827.191:802): avc: denied { add_name } for pid=9006 comm="syz.2.845" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.976196][ T40] audit: type=1400 audit(1774640827.191:803): avc: denied { create } for pid=9006 comm="syz.2.845" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 154.985867][ T40] audit: type=1400 audit(1774640827.191:804): avc: denied { associate } for pid=9006 comm="syz.2.845" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 154.996337][ T40] audit: type=1400 audit(1774640827.191:805): avc: denied { read write } for pid=9006 comm="syz.2.845" name="file0" dev="9p" ino=76546183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.007343][ T40] audit: type=1400 audit(1774640827.191:806): avc: denied { open } for pid=9006 comm="syz.2.845" path="/242/file0/file0" dev="9p" ino=76546183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.243853][ T9014] netlink: 56 bytes leftover after parsing attributes in process `syz.2.847'. [ 155.248331][ T9015] tipc: MTU too low for tipc bearer [ 155.256373][ T9014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=9014 comm=syz.2.847 [ 155.323804][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.848'. [ 155.373972][ T9021] macvlan0: mtu less than device minimum [ 155.507601][ T9028] netlink: 16 bytes leftover after parsing attributes in process `syz.2.852'. [ 155.727798][ T9044] erspan0: left allmulticast mode [ 155.730013][ T9044] erspan0: left promiscuous mode [ 155.733796][ T9044] bridge1: port 1(erspan0) entered disabled state [ 155.743573][ T9044] bond0: (slave team0): Releasing backup interface [ 155.749116][ T9044] bridge0: port 3(batadv0) entered disabled state [ 155.754083][ T9044] bridge_slave_0: left allmulticast mode [ 155.756706][ T9044] bridge_slave_0: left promiscuous mode [ 155.760581][ T9044] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.766084][ T9044] bridge_slave_1: left allmulticast mode [ 155.768507][ T9044] bridge_slave_1: left promiscuous mode [ 155.771132][ T9044] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.780004][ T9044] bond0: (slave bond_slave_0): Releasing backup interface [ 155.785694][ T9044] bond0: (slave bond_slave_1): Releasing backup interface [ 155.795960][ T9044] team0: Port device team_slave_0 removed [ 155.798863][ T9044] team0: Port device team_slave_1 removed [ 155.801016][ T9044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.803777][ T9044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.807569][ T9044] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.847210][ T9053] Bluetooth: hci4: Frame reassembly failed (-90) [ 155.850773][ T128] Bluetooth: hci4: Frame reassembly failed (-84) [ 155.853526][ T128] Bluetooth: hci4: Frame reassembly failed (-84) [ 156.191308][ T9074] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 156.286687][ T9080] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 156.387799][ T9084] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9084 comm=syz.3.865 [ 156.393736][ T9084] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=106 sclass=netlink_xfrm_socket pid=9084 comm=syz.3.865 [ 156.449819][ T9086] team0: Mode changed to "loadbalance" [ 156.458609][ T9087] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 156.458990][ T9086] IPVS: stopping backup sync thread 9087 ... [ 156.633765][ T9094] syzkaller0: entered promiscuous mode [ 156.636111][ T9094] syzkaller0: entered allmulticast mode [ 157.898065][ T5939] Bluetooth: hci4: command 0x1003 tx timeout [ 157.898129][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 157.931303][ T9101] kernel read not supported for file /policy (pid: 9101 comm: syz.0.870) [ 157.953035][ T9104] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 158.167942][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 158.167958][ T40] audit: type=1400 audit(1774640830.391:822): avc: denied { write } for pid=9110 comm="syz.2.874" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 158.268557][ T9117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.317885][ T9129] netlink: 'syz.3.878': attribute type 10 has an invalid length. [ 158.321209][ T9129] netlink: 40 bytes leftover after parsing attributes in process `syz.3.878'. [ 158.446885][ T40] audit: type=1400 audit(1774640830.671:823): avc: denied { remount } for pid=9132 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 158.477630][ T40] audit: type=1400 audit(1774640830.701:824): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 158.798812][ T9153] loop2: detected capacity change from 0 to 7 [ 158.807431][ T5931] Dev loop2: unable to read RDB block 7 [ 158.809684][ T5931] loop2: unable to read partition table [ 158.811879][ T5931] loop2: partition table beyond EOD, truncated [ 158.819890][ T9153] Dev loop2: unable to read RDB block 7 [ 158.822591][ T9153] loop2: unable to read partition table [ 158.826593][ T9153] loop2: partition table beyond EOD, truncated [ 158.830081][ T9153] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 158.876441][ T40] audit: type=1400 audit(1774640831.101:825): avc: denied { watch_mount } for pid=9155 comm="syz.3.888" path="/225" dev="tmpfs" ino=1206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 159.023906][ T9170] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 159.028316][ T9170] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 159.034285][ T9170] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 159.039069][ T9170] UDF-fs: Scanning with blocksize 512 failed [ 159.043469][ T9170] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 159.047269][ T9170] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 159.050940][ T9170] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 159.054065][ T9170] UDF-fs: Scanning with blocksize 1024 failed [ 159.060399][ T9170] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 159.064343][ T9170] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 159.068838][ T9170] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 159.072156][ T9170] UDF-fs: Scanning with blocksize 2048 failed [ 159.075309][ T9170] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 159.079297][ T9170] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 159.083247][ T9170] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 159.087673][ T9170] UDF-fs: Scanning with blocksize 4096 failed [ 159.090026][ T9170] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 159.154071][ T9173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.894'. [ 159.160493][ T40] audit: type=1326 audit(1774640831.381:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9172 comm="syz.2.894" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f018ff9c799 code=0x0 [ 159.793604][ T9176] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2139632632 (8558530528 ns) > initial count (4400489236 ns). Using initial count to start timer. [ 159.804225][ T9176] xt_hashlimit: size too large, truncated to 1048576 [ 160.085872][ T40] audit: type=1400 audit(1774640832.311:827): avc: denied { setattr } for pid=9182 comm="syz.2.897" name="/" dev="9p" ino=76546181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.263069][ T9194] netlink: 'syz.0.902': attribute type 4 has an invalid length. [ 160.347378][ T9200] netlink: 'syz.2.898': attribute type 5 has an invalid length. [ 160.384645][ T40] audit: type=1400 audit(1774640832.601:828): avc: denied { bind } for pid=9201 comm="syz.0.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 160.427276][ T9212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.906'. [ 160.580132][ T9216] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 160.583724][ T9216] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 160.589142][ T9216] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 160.589255][ T40] audit: type=1400 audit(1774640832.811:829): avc: denied { firmware_load } for pid=9215 comm="syz.0.907" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 160.672893][ T9217] kvm: MONITOR instruction emulated as NOP! [ 160.719527][ T10] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 160.844950][ T10] usb 7-1: device descriptor read/64, error -71 [ 161.084940][ T10] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 161.225047][ T10] usb 7-1: device descriptor read/64, error -71 [ 161.345003][ T10] usb usb7-port1: attempt power cycle [ 161.639322][ T9224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.909'. [ 161.705360][ T10] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 161.725510][ T10] usb 7-1: device descriptor read/8, error -71 [ 161.974700][ T10] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 161.995268][ T10] usb 7-1: device descriptor read/8, error -71 [ 162.073009][ T9241] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.105996][ T10] usb usb7-port1: unable to enumerate USB device [ 162.171977][ T9241] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.266216][ T9241] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.345519][ T9241] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 162.410129][ T128] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.421014][ T61] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.431275][ T61] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.442308][ T61] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.616950][ T9249] loop5: detected capacity change from 0 to 7 [ 162.624987][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 162.628452][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 162.632590][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 162.636377][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 162.640122][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 162.643991][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 162.647456][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 162.651140][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 162.653865][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 162.657642][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 162.660317][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 162.664043][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 162.669032][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 162.676336][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 162.679410][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 162.681946][ T9249] ldm_validate_partition_table(): Disk read failed. [ 162.684479][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 162.687685][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 162.690477][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 162.693522][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 162.696748][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 162.701932][ T9249] Dev loop5: unable to read RDB block 0 [ 162.705615][ T9249] loop5: unable to read partition table [ 162.708572][ T9249] loop5: partition table beyond EOD, truncated [ 162.710674][ T9249] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 162.780437][ T40] audit: type=1400 audit(1774640835.001:830): avc: denied { append } for pid=9257 comm="syz.3.920" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 162.795349][ T9258] program syz.3.920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.861440][ T9261] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 162.866113][ T9261] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 162.909808][ T9264] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 162.947642][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.923'. [ 162.977915][ T9266] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9266 comm=syz.0.923 [ 163.014443][ T40] audit: type=1800 audit(1774640835.231:831): pid=9268 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.924" name="bus" dev="tmpfs" ino=324 res=0 errno=0 [ 163.416288][ T9315] netlink: 32 bytes leftover after parsing attributes in process `syz.3.936'. [ 163.458617][ T9318] fuse: Bad value for 'user_id' [ 163.460555][ T9318] fuse: Bad value for 'user_id' [ 163.497849][ T9325] 9pnet_fd: Insufficient options for proto=fd [ 163.596696][ T9336] binder: 9335:9336 ioctl c0306201 0 returned -14 [ 163.599550][ T9337] binder: 9335:9337 ioctl c0189375 2000000001c0 returned -22 [ 163.835608][ T40] audit: type=1400 audit(1774640836.051:832): avc: denied { write } for pid=9353 comm="syz.2.947" lport=46487 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 163.845788][ T40] audit: type=1400 audit(1774640836.071:833): avc: denied { setopt } for pid=9353 comm="syz.2.947" lport=46487 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 163.860981][ T9356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.948'. [ 163.867235][ T9356] overlayfs: missing 'workdir' [ 163.869722][ T9356] netlink: 'syz.3.948': attribute type 64 has an invalid length. [ 163.872838][ T9356] netlink: 'syz.3.948': attribute type 4 has an invalid length. [ 163.876208][ T9356] netlink: 152 bytes leftover after parsing attributes in process `syz.3.948'. [ 164.004132][ T40] audit: type=1400 audit(1774640836.221:834): avc: denied { ioctl } for pid=9358 comm="syz.2.949" path="socket:[29951]" dev="sockfs" ino=29951 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.012419][ T40] audit: type=1400 audit(1774640836.231:835): avc: denied { accept } for pid=9358 comm="syz.2.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.052946][ T40] audit: type=1400 audit(1774640836.271:836): avc: denied { mounton } for pid=9361 comm="syz.2.950" path="/bus" dev="ramfs" ino=29961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 164.071456][ T9365] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 164.073811][ T9365] overlayfs: failed to set xattr on upper [ 164.084608][ T9365] overlayfs: ...falling back to index=off. [ 164.086495][ T9365] overlayfs: ...falling back to uuid=null. [ 164.088700][ T9365] overlayfs: conflicting lowerdir path [ 164.161682][ T9372] kvm: pic: non byte write [ 164.164291][ T9372] kvm: pic: level sensitive irq not supported [ 164.165672][ T9372] kvm: pic: non byte write [ 164.378158][ T40] audit: type=1400 audit(1774640836.601:837): avc: denied { accept } for pid=9386 comm="syz.3.958" lport=44335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.443481][ T9390] netlink: 44 bytes leftover after parsing attributes in process `syz.3.959'. [ 164.624826][ T9398] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 165.356464][ T9402] program syz.3.962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.360189][ T9402] ata1.00: non-matching transfer count (32/0) [ 165.639942][ T40] audit: type=1400 audit(1774640837.861:838): avc: denied { bind } for pid=9417 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 165.647171][ T40] audit: type=1400 audit(1774640837.861:839): avc: denied { listen } for pid=9417 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 165.792069][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 165.806850][ T40] audit: type=1400 audit(1774640838.031:840): avc: denied { unmount } for pid=5934 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 165.938682][ T9428] faux_driver vkms: [drm] Unknown color mode 257; guessing buffer size. [ 165.942295][ T9428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.970'. [ 166.106640][ T5939] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.116339][ T5939] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.119435][ T5939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.122451][ T5939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.128844][ T5939] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.149853][ T6710] syz_tun (unregistering): left promiscuous mode [ 166.282882][ T9433] chnl_net:caif_netlink_parms(): no params data found [ 166.314398][ T9449] netlink: 'syz.2.975': attribute type 8 has an invalid length. [ 166.409092][ T9460] dvmrp1: entered allmulticast mode [ 166.411067][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.415173][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.418522][ T9433] bridge_slave_0: entered allmulticast mode [ 166.421875][ T9433] bridge_slave_0: entered promiscuous mode [ 166.429271][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.431685][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.434339][ T9433] bridge_slave_1: entered allmulticast mode [ 166.437427][ T9433] bridge_slave_1: entered promiscuous mode [ 166.455840][ T9459] dvmrp1: left allmulticast mode [ 166.470682][ T9433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.475640][ T9433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.493937][ T9433] team0: Port device team_slave_0 added [ 166.498356][ T9433] team0: Port device team_slave_1 added [ 166.517998][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.520334][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.529189][ T9433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.534400][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.977'. [ 166.540441][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.543902][ T9463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.977'. [ 166.546353][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.555290][ T9433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.580277][ T9433] hsr_slave_0: entered promiscuous mode [ 166.582555][ T9433] hsr_slave_1: entered promiscuous mode [ 166.585487][ T9433] debugfs: 'hsr0' already exists in 'hsr' [ 166.587612][ T9433] Cannot create hsr debugfs directory [ 166.698334][ T9433] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.707539][ T9433] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.712045][ T9433] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.716657][ T9433] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.741374][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.743803][ T9433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.746589][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.748842][ T9433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.781510][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.790056][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.792902][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.800468][ T9433] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.809884][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.812808][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.819456][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.822458][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.831386][ T9479] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.979'. [ 166.949623][ T9433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.077222][ T9433] veth0_vlan: entered promiscuous mode [ 167.082800][ T9433] veth1_vlan: entered promiscuous mode [ 167.099126][ T9433] veth0_macvtap: entered promiscuous mode [ 167.103362][ T9433] veth1_macvtap: entered promiscuous mode [ 167.113225][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.119523][ T9433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.127573][ T128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.131584][ T128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.135183][ T128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.139403][ T128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.181479][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.185642][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.198749][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.202332][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.252788][ T9491] netlink: 40 bytes leftover after parsing attributes in process `syz.4.971'. [ 167.270139][ T9491] netlink: 20 bytes leftover after parsing attributes in process `syz.4.971'. [ 167.366423][ T40] audit: type=1400 audit(1774640839.581:841): avc: denied { search } for pid=9495 comm="syz.4.981" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 167.442571][ T9502] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 167.445699][ T9502] overlayfs: failed to set xattr on upper [ 167.447625][ T9502] overlayfs: ...falling back to redirect_dir=nofollow. [ 167.450591][ T9502] overlayfs: ...falling back to index=off. [ 167.454135][ T9502] overlayfs: ...falling back to uuid=null. [ 167.473975][ T9502] overlay: Unknown parameter 'dont_hash' [ 167.716720][ T9512] tipc: Started in network mode [ 167.718345][ T9512] tipc: Node identity 7fff, cluster identity 4711 [ 167.720395][ T9512] tipc: Node number set to 32767 [ 168.183688][ T9521] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=272 sclass=netlink_xfrm_socket pid=9521 comm=syz.0.989 [ 168.193990][ T9520] kvm: kvm [9519]: vcpu0, guest rIP: 0x9137 Unhandled WRMSR(0x11e) = 0xbe702111 [ 168.215562][ T5942] Bluetooth: hci4: command tx timeout [ 168.453233][ T9535] sit0: entered promiscuous mode [ 168.461807][ T9535] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 168.466379][ T9535] netlink: 1 bytes leftover after parsing attributes in process `syz.0.993'. [ 168.469088][ T9537] hpfs: hpfs_map_sector(): read error [ 168.530940][ T9535] netlink: 124 bytes leftover after parsing attributes in process `syz.0.993'. [ 168.609332][ T9554] IPv6: syztnl0: Disabled Multicast RS [ 169.018699][ T9585] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1007'. [ 169.181976][ T9592] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 169.636401][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 169.636414][ T40] audit: type=1400 audit(1774640841.861:847): avc: denied { bind } for pid=9611 comm="syz.2.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.650310][ T40] audit: type=1400 audit(1774640841.871:848): avc: denied { getopt } for pid=9611 comm="syz.2.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.294796][ T5942] Bluetooth: hci4: command tx timeout [ 171.831689][ T9577] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.889623][ T40] audit: type=1400 audit(1774640844.111:849): avc: denied { rename } for pid=9628 comm="syz.2.1019" name="file0" dev="tmpfs" ino=1594 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 171.967385][ T9644] syzkaller0: entered promiscuous mode [ 171.969161][ T9644] syzkaller0: entered allmulticast mode [ 172.082236][ T9652] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1023'. [ 172.094054][ T9652] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 172.374653][ T5942] Bluetooth: hci4: command tx timeout [ 172.780820][ T9694] syzkaller0: entered promiscuous mode [ 172.784681][ T9694] syzkaller0: entered allmulticast mode [ 172.792325][ T40] audit: type=1400 audit(1774640845.011:850): avc: denied { relabelfrom } for pid=9692 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 172.804655][ T40] audit: type=1400 audit(1774640845.011:851): avc: denied { relabelto } for pid=9692 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 173.852321][ T40] audit: type=1400 audit(1774640846.071:852): avc: denied { getopt } for pid=9711 comm="syz.4.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 174.001420][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1032'. [ 174.006054][ T9716] Unknown options in mask b7f2 [ 174.454799][ T5942] Bluetooth: hci4: command tx timeout [ 174.889079][ T9631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 174.954995][ T40] audit: type=1400 audit(1774640847.181:853): avc: denied { getopt } for pid=9721 comm="syz.4.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.977692][ T40] audit: type=1400 audit(1774640847.201:854): avc: denied { read } for pid=9719 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 175.004588][ T40] audit: type=1400 audit(1774640847.221:855): avc: denied { getopt } for pid=9721 comm="syz.4.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 175.032538][ T9728] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1033'. [ 175.115498][ T40] audit: type=1400 audit(1774640847.341:856): avc: denied { ioctl } for pid=9729 comm="syz.2.1038" path="socket:[33889]" dev="sockfs" ino=33889 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 175.196927][ T9743] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1039'. [ 175.265198][ T40] audit: type=1400 audit(1774640847.491:857): avc: denied { read write } for pid=9739 comm="syz.3.1041" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 175.278354][ T40] audit: type=1400 audit(1774640847.491:858): avc: denied { open } for pid=9739 comm="syz.3.1041" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 175.282443][ T9748] bridge2: entered promiscuous mode [ 175.285174][ T9749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1040'. [ 175.288288][ T40] audit: type=1400 audit(1774640847.491:859): avc: denied { ioctl } for pid=9739 comm="syz.3.1041" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 175.289677][ T9748] bridge2: entered allmulticast mode [ 176.077225][ T40] audit: type=1400 audit(1774640848.291:860): avc: denied { mount } for pid=9775 comm="syz.2.1048" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 176.180386][ T9781] mac80211_hwsim hwsim8 ;: renamed from wlan0 [ 176.186806][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 176.259469][ T9783] bond1: Unable to set up delay as MII monitoring is disabled [ 176.264990][ T9783] bond1 (unregistering): Released all slaves [ 176.308387][ T9785] netlink: set zone limit has 4 unknown bytes [ 176.338579][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 176.345353][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 176.350545][ T24] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 49286, setting to 1024 [ 176.368850][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 176.371865][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 176.376863][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.383591][ T24] usb 5-1: config 0 descriptor?? [ 176.801379][ T24] hid_parser_main: 4090 callbacks suppressed [ 176.801403][ T24] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 176.807458][ T24] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 176.810378][ T24] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 176.813389][ T24] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 176.816794][ T24] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 176.821395][ T24] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 176.996885][ T6093] usb 5-1: USB disconnect, device number 7 [ 177.334734][ T1028] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 177.484687][ T1028] usb 7-1: Using ep0 maxpacket: 16 [ 177.488999][ T1028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.493510][ T1028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.498272][ T1028] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.504033][ T1028] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 177.507804][ T1028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.521198][ T1028] usb 7-1: config 0 descriptor?? [ 177.942692][ T1028] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 177.949537][ T1028] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 177.952900][ T1028] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 177.956869][ T1028] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 177.961516][ T1028] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 177.965830][ T1028] HID 045e:07da: Invalid code 65791 type 1 [ 177.976916][ T1028] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0006/input/input22 [ 177.997659][ T1028] microsoft 0003:045E:07DA.0006: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 178.006968][ T1028] usb 7-1: USB disconnect, device number 10 [ 178.029712][ T9810] fido_id[9810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/7-1/report_descriptor': No such file or directory [ 178.273416][ T9817] trusted_key: encrypted_key: insufficient parameters specified [ 178.339563][ T9759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.529953][ T9833] 8021q: VLANs not supported on wg1 [ 178.604675][ T9838] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=85 sclass=netlink_xfrm_socket pid=9838 comm=syz.0.1065 [ 178.621836][ T40] audit: type=1400 audit(1774640850.841:861): avc: denied { setopt } for pid=9841 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 178.838748][ T9857] program syz.0.1069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.839891][ T40] audit: type=1400 audit(1774640851.061:862): avc: denied { write } for pid=9852 comm="syz.3.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 179.506911][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 179.697744][ T9918] netlink: 'syz.3.1091': attribute type 1 has an invalid length. [ 179.848220][ T9924] netlink: 'syz.4.1093': attribute type 16 has an invalid length. [ 179.852263][ T9924] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1093'. [ 180.215255][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.519889][ T9951] binder: 9946:9951 ioctl c0306201 200000000080 returned -14 [ 180.755630][ T9961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=9961 comm=syz.4.1107 [ 180.816931][ T9964] netlink: 880 bytes leftover after parsing attributes in process `syz.4.1108'. [ 180.916665][ T9965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1109'. [ 180.920328][ T9965] 8021q: VLANs not supported on lo [ 180.923182][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 180.923197][ T40] audit: type=1400 audit(1774640853.141:864): avc: denied { accept } for pid=9962 comm="syz.3.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.425564][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 181.592024][ T10] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 181.594998][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.597491][ T10] usb 9-1: Product: syz [ 181.598856][ T10] usb 9-1: Manufacturer: syz [ 181.600414][ T10] usb 9-1: SerialNumber: syz [ 181.615425][ T10] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 181.664834][ T6018] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 181.870726][ T6093] usb 9-1: USB disconnect, device number 2 [ 182.294749][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.708628][ T6018] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 182.712128][ T6018] ath9k_htc: Failed to initialize the device [ 182.720027][ T6093] usb 9-1: ath9k_htc: USB layer deinitialized [ 182.739324][T10010] netlink: 'syz.4.1122': attribute type 64 has an invalid length. [ 182.742545][T10010] netlink: 'syz.4.1122': attribute type 4 has an invalid length. [ 182.745918][T10010] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1122'. [ 183.290271][T10020] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 183.300854][T10020] bond1 (unregistering): Released all slaves [ 183.447675][T10026] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 184.284373][T10033] syzkaller1: entered promiscuous mode [ 184.286007][T10033] syzkaller1: entered allmulticast mode [ 184.363410][T10036] xt_hashlimit: size too large, truncated to 1048576 [ 184.550109][T10049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1135'. [ 184.558087][T10047] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 184.579084][ T40] audit: type=1400 audit(1774640856.781:865): avc: denied { execmod } for pid=10048 comm="syz.0.1135" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 184.627758][ T40] audit: type=1400 audit(1774640856.851:866): avc: denied { create } for pid=10050 comm="syz.0.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 184.665502][T10051] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 184.668928][ T40] audit: type=1400 audit(1774640856.891:867): avc: denied { ioctl } for pid=10050 comm="syz.0.1136" path="socket:[36978]" dev="sockfs" ino=36978 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 184.804442][T10066] openvswitch: netlink: IP tunnel dst address not specified [ 184.834442][T10066] gfs2: gfs2 mount does not exist [ 184.993562][ T40] audit: type=1400 audit(1774640857.211:868): avc: denied { read } for pid=10070 comm="syz.4.1141" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 185.004725][ T40] audit: type=1400 audit(1774640857.211:869): avc: denied { open } for pid=10070 comm="syz.4.1141" path="/59/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 185.034600][ T40] audit: type=1400 audit(1774640857.251:870): avc: denied { unmount } for pid=9433 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 185.044864][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 185.047745][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1143'. [ 185.050549][T10077] netlink: 'syz.0.1143': attribute type 11 has an invalid length. [ 185.137759][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1146'. [ 185.140959][T10081] netlink: 'syz.0.1146': attribute type 30 has an invalid length. [ 185.151217][ T165] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.154465][ T165] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.158399][ T165] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.161303][ T165] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.202467][T10085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=153 sclass=netlink_route_socket pid=10085 comm=syz.2.1144 [ 185.212594][T10085] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 185.216612][T10085] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 185.219931][T10085] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 185.322000][ T40] audit: type=1400 audit(1774640857.541:871): avc: denied { map } for pid=10086 comm="syz.0.1148" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.334828][ T5939] Bluetooth: hci3: command 0x0406 tx timeout [ 185.336570][ T40] audit: type=1400 audit(1774640857.551:872): avc: denied { getopt } for pid=10086 comm="syz.0.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 186.225695][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 186.232823][T10106] netlink: 'syz.4.1153': attribute type 30 has an invalid length. [ 186.252892][ T61] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.256933][ T61] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.260393][ T61] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.263510][ T61] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.329772][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1155'. [ 186.344906][T10114] tmpfs: Cannot change global quota limit on remount [ 186.384387][T10115] mtd partition "" doesn't have enough space: 0x20003 < 0x6000000000000, disabled [ 186.411970][T10115] ftl_cs: FTL header not found. [ 186.518973][ T40] audit: type=1400 audit(1774640858.741:873): avc: denied { read } for pid=10126 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.777154][T10141] overlayfs: regular lower layers cannot follow data lower layers [ 186.783051][T10141] gfs2: error -5 reading superblock [ 187.295773][T10168] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 187.384621][ T1028] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 187.436434][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1177'. [ 187.471247][T10177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1177'. [ 187.499244][T10177] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1177'. [ 187.524659][ T1028] usb 9-1: device descriptor read/64, error -71 [ 187.556018][ T40] audit: type=1400 audit(1774640859.781:874): avc: denied { bind } for pid=10179 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.603390][T10184] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1179'. [ 187.772859][T10192] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 187.784777][ T1028] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 187.824680][ T6093] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 187.934588][ T1028] usb 9-1: device descriptor read/64, error -71 [ 187.977556][T10197] netlink: 'syz.3.1183': attribute type 2 has an invalid length. [ 188.006170][ T6093] usb 5-1: config 0 has no interfaces? [ 188.008660][ T6093] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 188.014586][ T6093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.028768][T10199] geneve1: entered allmulticast mode [ 188.034580][ T6093] usb 5-1: config 0 descriptor?? [ 188.045152][ T1028] usb usb9-port1: attempt power cycle [ 188.183643][ T40] audit: type=1400 audit(1774640860.401:875): avc: denied { ioctl } for pid=10205 comm="syz.2.1186" path="socket:[36863]" dev="sockfs" ino=36863 ioctlcmd=0x6f01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 188.259574][T10181] kvm: kvm [10179]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 188.271054][T10181] kvm: kvm [10179]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 188.303987][T10215] SET target dimension over the limit! [ 188.384670][ T1028] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 188.401671][ T6093] usb 5-1: USB disconnect, device number 8 [ 188.405190][ T1028] usb 9-1: device descriptor read/8, error -71 [ 188.482558][ T40] audit: type=1400 audit(1774640860.701:876): avc: granted { setsecparam } for pid=10221 comm="syz.2.1189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 188.496120][ T40] audit: type=1400 audit(1774640860.711:877): avc: denied { write } for pid=10221 comm="syz.2.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 188.567741][ T40] audit: type=1400 audit(1774640860.791:878): avc: denied { mount } for pid=10225 comm="syz.2.1190" name="/" dev="rpc_pipefs" ino=35654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 188.581924][ T40] audit: type=1400 audit(1774640860.801:879): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 188.664760][ T1028] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 188.699601][ T1028] usb 9-1: device descriptor read/8, error -71 [ 188.760665][T10235] Invalid/unusable pipe [ 188.804968][ T1028] usb usb9-port1: unable to enumerate USB device [ 188.899937][T10243] netlink: 'syz.3.1196': attribute type 1 has an invalid length. [ 188.924114][ T40] audit: type=1400 audit(1774640861.141:880): avc: denied { map } for pid=10240 comm="syz.2.1195" path="socket:[37892]" dev="sockfs" ino=37892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 189.017220][T10249] netlink: 'syz.0.1197': attribute type 3 has an invalid length. [ 189.020149][T10249] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 189.162566][T10251] tipc: Started in network mode [ 189.164641][T10251] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 189.168249][T10251] tipc: Enabling of bearer rejected, failed to enable media [ 189.262425][T10258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2094 sclass=netlink_route_socket pid=10258 comm=syz.3.1199 [ 189.361800][ T40] audit: type=1400 audit(1774640861.581:881): avc: denied { attach_queue } for pid=10262 comm="syz.0.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 189.455222][T10271] program syz.3.1202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.507360][T10273] QAT: failed to copy from user. [ 189.654256][T10285] syzkaller0: entered promiscuous mode [ 189.656887][T10285] syzkaller0: entered allmulticast mode [ 189.781896][ T40] audit: type=1400 audit(1774640862.001:882): avc: denied { mounton } for pid=10294 comm="syz.3.1206" path="/311/file1" dev="autofs" ino=37209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 190.238239][T10308] program syz.4.1212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.584044][T10292] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 190.586728][T10292] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 190.591979][T10292] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 190.594190][T10292] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 190.597234][T10292] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 190.601603][T10292] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 190.603944][T10292] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 190.607310][T10292] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 190.728872][T10335] __nla_validate_parse: 5 callbacks suppressed [ 190.728887][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'. [ 190.777382][T10346] dvmrp0: entered allmulticast mode [ 190.922511][T10366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10366 comm=syz.2.1231 [ 191.064600][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 191.114075][T10392] sctp: [Deprecated]: syz.4.1238 (pid 10392) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.114075][T10392] Use struct sctp_sack_info instead [ 191.121117][T10392] netlink: 'syz.4.1238': attribute type 10 has an invalid length. [ 191.125004][T10392] team0: Device ipvlan1 failed to register rx_handler [ 191.135287][T10389] xt_ipcomp: unknown flags 1D [ 191.224861][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 191.228117][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.234600][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 191.238056][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.243192][ T24] usb 5-1: config 0 descriptor?? [ 191.255932][T10400] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.259369][T10400] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.329606][T10400] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.334378][T10400] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.355214][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 191.409980][T10400] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.413393][T10400] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.451867][ T24] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 191.471568][T10400] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.475001][T10400] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.507673][ T10] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 191.511938][ T10] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.517545][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.520520][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.531679][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.566725][ T1155] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.569484][ T1155] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.582285][ T1155] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.584854][ T1155] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.589782][ T10] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 191.593389][ T1155] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.596079][ T1155] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.613857][ T1155] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.616819][ T1155] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.707464][T10405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.710360][T10405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.740496][ T29] usb 7-1: USB disconnect, device number 11 [ 191.799025][T10349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1226'. [ 191.894915][ T5942] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.974652][ T7010] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 192.028219][T10411] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 192.150178][T10416] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1245'. [ 192.614825][ T5942] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.614860][ T5939] Bluetooth: hci3: command 0x0406 tx timeout [ 192.618098][ T5942] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.664191][T10437] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1251'. [ 192.766223][T10441] Bluetooth: MGMT ver 1.23 [ 192.984646][ T7010] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 193.084229][T10445] tap0: tun_chr_ioctl cmd 1074025677 [ 193.088461][T10445] tap0: linktype set to 780 [ 193.090837][T10445] tap0: tun_chr_ioctl cmd 1074025672 [ 193.093018][T10445] tap0: ignored: set checksum disabled [ 193.097141][T10445] netlink: 'syz.2.1255': attribute type 1 has an invalid length. [ 193.114091][T10445] bond1: entered promiscuous mode [ 193.116578][T10445] bond1: entered allmulticast mode [ 193.118453][T10445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.126340][T10445] erspan1: entered allmulticast mode [ 193.130192][T10445] bond1: (slave erspan1): making interface the new active one [ 193.132566][T10445] erspan1: entered promiscuous mode [ 193.135400][T10445] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 193.154750][ T7010] usb 9-1: config 252 has an invalid interface number: 141 but max is 1 [ 193.157563][ T7010] usb 9-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 193.161394][ T7010] usb 9-1: config 252 has 1 interface, different from the descriptor's value: 2 [ 193.164463][ T7010] usb 9-1: config 252 has no interface number 0 [ 193.167096][ T7010] usb 9-1: config 252 interface 141 altsetting 6 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 193.170514][ T7010] usb 9-1: config 252 interface 141 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 193.174150][ T7010] usb 9-1: config 252 interface 141 altsetting 6 has an endpoint descriptor with address 0x19, changing to 0x9 [ 193.179679][ T7010] usb 9-1: config 252 interface 141 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 193.183190][ T7010] usb 9-1: config 252 interface 141 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 193.188221][ T7010] usb 9-1: config 252 interface 141 has no altsetting 0 [ 193.192645][ T7010] usb 9-1: New USB device found, idVendor=045e, idProduct=046d, bcdDevice=64.07 [ 193.195954][ T7010] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.213308][ T7010] usb 9-1: Product: Б [ 193.219045][ T7010] usb 9-1: Manufacturer: 씁㕎꘡챆ᘕ㈏毅㉛셳䓟㼻ᄦԐ먅ᙴ剳㠛Ồ爗嚻ಠǍဏ䬞ᄖྍ諓췛꾱ᙲ盕⟗낉䃕⽲ㇳ켂璁䨑믳⮝鷉韶ꍙං돐ꉦ呅퇇⚛ﲟ孂盡亮喥欂銸΀꣼謩﴾鏚ᬭ嶃៤購圐ᗍ₳份ꩿ㾎 [ 193.229755][ T7010] usb 9-1: SerialNumber: ы [ 193.230436][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 193.230452][ T40] audit: type=1400 audit(2000000002.270:885): avc: denied { append } for pid=10449 comm="syz.2.1256" path="/345/file0/blkio.bfq.io_wait_time_recursive" dev="9p" ino=76546207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 193.234315][T10450] syz.2.1256 (10450): attempted to duplicate a private mapping with mremap. This is not supported. [ 193.243414][ T40] audit: type=1400 audit(2000000002.270:886): avc: denied { map } for pid=10449 comm="syz.2.1256" path="/345/file0/blkio.bfq.io_wait_time_recursive" dev="9p" ino=76546207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 193.259926][T10430] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 193.262599][T10430] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 193.390651][T10451] ------------[ cut here ]------------ [ 193.392692][T10451] kernel BUG at fs/netfs/iterator.c:248! [ 193.394482][T10451] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 193.397036][T10451] CPU: 3 UID: 0 PID: 10451 Comm: syz.2.1256 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.403173][T10451] Tainted: [L]=SOFTLOCKUP [ 193.404673][T10451] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 193.407939][T10451] RIP: 0010:netfs_limit_iter+0x100d/0x1100 [ 193.409868][T10451] Code: ff e9 a4 f4 ff ff 48 89 de 48 c7 c7 a0 c9 ab 8e e8 b8 f1 73 fe e9 59 f6 ff ff e8 1e e5 b1 ff e9 6f f6 ff ff e8 54 56 45 ff 90 <0f> 0b e8 7c e4 b1 ff e9 cd f9 ff ff 4c 89 f6 48 c7 c7 20 ca ab 8e [ 193.417997][T10451] RSP: 0018:ffffc900056cecd8 EFLAGS: 00010293 [ 193.420666][T10451] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff82c3923b [ 193.423919][T10451] RDX: ffff8880601a8000 RSI: ffffffff82c3a16c RDI: ffff8880601a8000 [ 193.426633][T10451] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000005 [ 193.429662][T10451] R10: 0000000000000003 R11: 0000000000000000 R12: 000000007fffffff [ 193.432634][T10451] R13: 1ffff92000ad9da1 R14: ffff88803e496ba0 R15: ffff8880633a8000 [ 193.435520][T10451] FS: 00007f0190e266c0(0000) GS:ffff8880d663e000(0000) knlGS:0000000000000000 [ 193.439524][T10451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.442279][T10451] CR2: 0000200000000100 CR3: 0000000042747000 CR4: 0000000000352ef0 [ 193.445650][T10451] DR0: 0000000000000000 DR1: 00000000000022f7 DR2: 0000000000000000 [ 193.449016][T10451] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 193.452520][T10451] Call Trace: [ 193.454000][T10451] [ 193.455044][T10451] ? do_raw_spin_lock+0x128/0x260 [ 193.457188][T10451] ? find_held_lock+0x2b/0x80 [ 193.458872][T10451] ? __pfx_netfs_limit_iter+0x10/0x10 [ 193.460640][T10451] ? do_raw_spin_unlock+0x145/0x1e0 [ 193.462364][T10451] ? _raw_spin_unlock+0x28/0x50 [ 193.464108][T10451] ? netfs_prepare_write+0x486/0x7a0 [ 193.466299][T10451] netfs_unbuffered_write+0x25d/0x2080 [ 193.468587][T10451] netfs_unbuffered_write_iter_locked+0x801/0xab0 [ 193.471281][T10451] netfs_unbuffered_write_iter+0x40c/0x710 [ 193.473786][T10451] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 193.476525][T10451] v9fs_file_write_iter+0xbf/0x100 [ 193.478713][T10451] __kernel_write_iter+0x2ac/0x920 [ 193.480466][T10451] ? __pfx___kernel_write_iter+0x10/0x10 [ 193.482886][T10451] ? kasan_save_stack+0x3f/0x50 [ 193.484932][T10451] ? kasan_save_stack+0x30/0x50 [ 193.486970][T10451] ? exit_to_user_mode_loop+0x86/0x4a0 [ 193.489294][T10451] ? do_syscall_64+0x67c/0xf80 [ 193.491408][T10451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.494033][T10451] __kernel_write+0xf6/0x140 [ 193.496098][T10451] ? __pfx___kernel_write+0x10/0x10 [ 193.498341][T10451] dump_emit+0x21f/0x330 [ 193.500205][T10451] ? __pfx_dump_emit+0x10/0x10 [ 193.502400][T10451] elf_core_dump+0x2127/0x3d10 [ 193.504565][T10451] ? __pfx_elf_core_dump+0x10/0x10 [ 193.506912][T10451] ? kasan_save_stack+0x3f/0x50 [ 193.509038][T10451] ? kasan_save_stack+0x30/0x50 [ 193.511073][T10451] ? __kasan_kmalloc+0xaa/0xb0 [ 193.512828][T10451] ? __kvmalloc_node_noprof+0x360/0xa00 [ 193.514575][T10451] ? vfs_coredump+0x2105/0x5570 [ 193.516201][T10451] ? do_syscall_64+0x67c/0xf80 [ 193.518034][T10451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.520282][T10451] ? vfs_coredump+0x27bc/0x5570 [ 193.521955][T10451] vfs_coredump+0x27bc/0x5570 [ 193.523617][T10451] ? bpf_ksym_find+0x128/0x1c0 [ 193.525179][T10451] ? __pfx_vfs_coredump+0x10/0x10 [ 193.526823][T10451] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 193.528847][T10451] ? __lock_acquire+0x4a5/0x2630 [ 193.530493][T10451] ? css_rstat_updated+0x1ce/0x5a0 [ 193.532387][T10451] ? unwind_get_return_address+0x59/0xa0 [ 193.534525][T10451] ? update_cfs_rq_load_avg+0x51/0x550 [ 193.536565][T10451] ? __lock_acquire+0x4a5/0x2630 [ 193.538173][T10451] ? css_rstat_updated+0x1ce/0x5a0 [ 193.539812][T10451] ? __pfx_css_rstat_updated+0x10/0x10 [ 193.541549][T10451] ? set_next_entity+0x11e/0x9c0 [ 193.543166][T10451] ? __lock_acquire+0x4a5/0x2630 [ 193.544773][T10451] ? rcu_is_watching+0x12/0xc0 [ 193.546304][T10451] ? irqentry_exit+0x180/0x670 [ 193.547846][T10451] ? lockdep_hardirqs_on+0x78/0x100 [ 193.549503][T10451] ? irqentry_exit+0x180/0x670 [ 193.551096][T10451] ? finish_task_switch.isra.0+0x20e/0xb80 [ 193.553378][T10451] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 193.555805][T10451] ? __lock_acquire+0x4a5/0x2630 [ 193.557589][T10451] ? map_id_range_up+0x2ce/0x3b0 [ 193.559503][T10451] ? __pfx_map_id_range_up+0x10/0x10 [ 193.561215][T10451] ? proc_coredump_connector+0x2d3/0x4f0 [ 193.563349][T10451] ? __pfx_proc_coredump_connector+0x10/0x10 [ 193.565684][T10451] ? rcu_is_watching+0x12/0xc0 [ 193.567451][T10451] get_signal+0x1f2a/0x21e0 [ 193.568896][T10451] ? __asan_memset+0x23/0x50 [ 193.570836][T10451] ? __pfx_get_signal+0x10/0x10 [ 193.572287][T10451] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 193.574105][T10451] arch_do_signal_or_restart+0x91/0x7a0 [ 193.575989][T10451] ? __pfx_get_timespec64+0x10/0x10 [ 193.577781][T10451] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 193.579934][T10451] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 193.581914][T10451] exit_to_user_mode_loop+0x86/0x4a0 [ 193.583721][T10451] do_syscall_64+0x67c/0xf80 [ 193.585370][T10451] ? clear_bhb_loop+0x40/0x90 [ 193.586944][T10451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.588914][T10451] RIP: 0033:0x7f018ff5cfce [ 193.590468][T10451] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.597464][T10451] RSP: 002b:00007f0190e25f58 EFLAGS: 00000346 ORIG_RAX: 00000000000000e6 [ 193.600236][T10451] RAX: fffffffffffffdfc RBX: 00007f0190e266c0 RCX: 00007f018ff5cfce [ 193.602857][T10451] RDX: 00007f0190e25fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.606465][T10451] RBP: 00007f0190032c99 R08: 0000000000000000 R09: 0000000000000000 [ 193.609262][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.611863][T10451] R13: 00007f0190216038 R14: 00007f0190215fa0 R15: 00007fff292e19e8 [ 193.614474][T10451] [ 193.615740][T10451] Modules linked in: [ 193.617227][T10451] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 193.624625][ T40] audit: type=1400 audit(2000000002.660:887): avc: denied { write } for pid=5917 comm="syz-executor" path="pipe:[7382]" dev="pipefs" ino=7382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 193.642983][ T7010] usb 9-1: USB disconnect, device number 8 [ 193.649403][T10451] RIP: 0010:netfs_limit_iter+0x100d/0x1100 [ 193.651443][T10451] Code: ff e9 a4 f4 ff ff 48 89 de 48 c7 c7 a0 c9 ab 8e e8 b8 f1 73 fe e9 59 f6 ff ff e8 1e e5 b1 ff e9 6f f6 ff ff e8 54 56 45 ff 90 <0f> 0b e8 7c e4 b1 ff e9 cd f9 ff ff 4c 89 f6 48 c7 c7 20 ca ab 8e [ 193.684572][T10451] RSP: 0018:ffffc900056cecd8 EFLAGS: 00010293 [ 193.686836][T10451] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff82c3923b [ 193.689592][T10451] RDX: ffff8880601a8000 RSI: ffffffff82c3a16c RDI: ffff8880601a8000 [ 193.704720][T10451] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000005 [ 193.707298][T10451] R10: 0000000000000003 R11: 0000000000000000 R12: 000000007fffffff [ 193.709848][T10451] R13: 1ffff92000ad9da1 R14: ffff88803e496ba0 R15: ffff8880633a8000 [ 193.712895][T10451] FS: 00007f0190e266c0(0000) GS:ffff8880d633e000(0000) knlGS:0000000000000000 [ 193.716030][ T58] usb 5-1: USB disconnect, device number 9 [ 193.725070][T10451] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.727302][T10451] CR2: 00005571db8ba578 CR3: 0000000042747000 CR4: 0000000000352ef0 [ 193.730168][T10451] Kernel panic - not syncing: Fatal exception [ 193.733412][T10451] Kernel Offset: disabled [ 193.735014][T10451] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:47:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff8880396628c0 RCX=ffffffff829332f4 RDX=1ffff110072cc520 RSI=ffffffff82933302 RDI=ffff888039662900 RBP=00000000040e0003 RSP=ffffc900062dfe50 R8 =0000000000000007 R9 =0000000000000000 R10=ffff8880396628c0 R11=0000000000000000 R12=ffffffffffffffff R13=000055a20d718600 R14=dffffc0000000000 R15=0000000000000002 RIP=ffffffff8293332a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f28859dac80 ffffffff 00c00000 GS =0000 ffff8880d633e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f018ffe9e80 CR3=0000000024c8e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000202 Opmask01=0000000000081fff Opmask02=00000000ffffdfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a20d718600 000055a20d718600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 16170f120a1a1311 00010004157f1c03 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c00727474617465 6763740070726770 7465736374005954 544353434f495400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c00575151445140 4246510055574255 5140564651005954 544353434f495400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000c5a64 RBX=ffff88801e6d24c0 RCX=ffffffff8b90dc75 RDX=0000000000000001 RSI=ffffffff8c1b1420 RDI=ffffffff81dea654 RBP=0000000000000000 RSP=ffffc90000177df0 R8 =0000000000000000 R9 =ffffed100d4a679d R10=ffff88806a533ceb R11=0000000000000001 R12=0000000000000001 R13=ffffed1003cda498 R14=0000000000000001 R15=ffffffff90d9b710 RIP=ffffffff8b90c5df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d643e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0a993e9e80 CR3=0000000059781000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000e73e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb8b4d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde3039a76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffde3039a76 00007ffde3039a7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb7e3327c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb7e332bc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb7e33420 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb7e332ae ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb7fec600 00007f4bb7fec5e0 00007f4bb7fec5e8 00007f4bb7fec618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4bb7fec5f8 00007f4bb7fec5c8 00007f4bb7fec600 00007f4bb7fec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff81fc9402 RDX=ffff88801d3b8000 RSI=ffffffff81fc93dc RDI=ffff88801d3b8000 RBP=ffff88806a742de0 RSP=ffffc900007cf1c8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=000000000000761b R12=0000000000000003 R13=ffffed100d4e85bd R14=0000000000000001 R15=ffff88806a63c440 RIP=ffffffff81fc93de RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d653e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f01901aa570 CR3=0000000024c8e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000040000202 Opmask01=0000000000081fff Opmask02=00000000ffffdfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a20d718600 000055a20d718600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 16170f120a1a1311 00010004157f1c03 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c00727474617465 6763740070726770 7465736374005954 544353434f495400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c00575151445140 4246510055574255 5140564651005954 544353434f495400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857a6015 RDI=ffffffff9b4a7b80 RBP=ffffffff9b4a7b40 RSP=ffffc900056ce5b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000036 R14=0000000000000010 R15=ffffffff857a5fb0 RIP=ffffffff857a603f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f0190e266c0 ffffffff 00c00000 GS =0000 ffff8880d663e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000100 CR3=0000000042747000 CR4=00352ef0 DR0=0000000000000000 DR1=00000000000022f7 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000fefcf800 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6e69 5f65676173752e42 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff292e1ed6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff292e1ed6 00007fff292e1edc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f019003327c ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01900332bc ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0190033420 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f01900332ae ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000098 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000098 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000