last executing test programs: 2m2.289277373s ago: executing program 1 (id=393): syz_io_uring_setup(0x10e, &(0x7f00000006c0)={0x0, 0x1885, 0x80, 0x2, 0x200}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x19, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x16, 0x301, 0x70bd25, 0x0, {0x7}}, 0x14}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r3, 0x0, 0x0, 0x0, 0x80800}) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x980902, 0x8}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x487, 0x0, 0x9}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000180)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f00000007c0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x20000006}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) read$msr(r6, &(0x7f0000000180)=""/174, 0xae) 2m2.288605666s ago: executing program 1 (id=395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x37]}}]}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 2m2.138217659s ago: executing program 1 (id=396): r0 = socket(0x10, 0x3, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200)=0x11, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000380), 0xb, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x3, 0x0, 0x2, 0x2, "412d13cc00"}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) mkdir(0x0, 0x0) chdir(0x0) accept$unix(r0, 0x0, &(0x7f0000000240)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000f800030000000000fbe8150705e837282efe0868327a31a705ec9785472d9ed0524ebb7c0493a11143a02ee3153b3da6b3e51c1ee1ddb72382486cf7dc290e7944"], 0x830600) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x900) landlock_restrict_self(r3, 0x1) getpeername$packet(r3, &(0x7f0000000100), &(0x7f0000000140)=0x14) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89f0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x2, 0x3, 0xe, 0x100}, {0x8, 0x9, 0x7f, 0x80000000}]}, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r8, &(0x7f0000000540)=""/250, 0xfa) getsockopt$inet_pktinfo(r7, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x2f, 0xc, 0x7, {0x4, @sctp_ip4_spec={@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4e24, 0xf}, {0x0, @broadcast, 0x3b8, 0x5, [0xe48, 0x1]}, @udp_ip6_spec={@mcast2, @local, 0x4e23, 0x4e20, 0x6e}, {0x0, @multicast, 0xa, 0x55cd, [0x4, 0x8]}, 0x2, 0x4fb0}}}) write$binfmt_aout(r5, &(0x7f0000000480)=ANY=[@ANYRESDEC=r6, @ANYBLOB="ec0d07a20af686d55d560d0a647c0f5cadca86f156755500dbca0aa7110ba639d02506a2cea2144d86cad302470f965d5f916f4f8166361ffb6fcc785878915a5bf2922f84d479ed591200cf6125fba024a23f7d6cda82efe2a32eaf1e5c8c6bb0c9eec7971c", @ANYRES64=r0, @ANYRESHEX=r5, @ANYRES8=r5, @ANYRESDEC=r7, @ANYRES16, @ANYRESDEC=r6], 0xfdef) openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi3\x00', 0x10200, 0x0) ioctl$COMEDI_SUBDINFO(r3, 0x80486402, &(0x7f00000003c0)) 2m2.03533796s ago: executing program 1 (id=398): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='vfat\x00', 0x81, &(0x7f0000000100)='nfs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0xd) r2 = syz_open_dev$mouse(&(0x7f0000000200), 0x8, 0x428200) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0/../file0\x00'}) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) close_range(r2, r3, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000940)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) chdir(&(0x7f00000002c0)='./file0/file0\x00') 2m1.988179489s ago: executing program 1 (id=399): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x204, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) 2m1.709007668s ago: executing program 1 (id=402): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m1.67124192s ago: executing program 32 (id=402): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12.368770815s ago: executing program 2 (id=2298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xc, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x4, 0x0, 0x10000, 0x3e12, 0x1}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x1a3801, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000100)=@arm64={0x8, 0x4, 0x2, '\x00', 0xd10}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c110081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 12.026649733s ago: executing program 2 (id=2300): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x933d9f7ecc2f496a, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000240)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000002c0)={0x18, r1, 0x4, 0x0, &(0x7f0000000280)=[{0x7, 0xe}, {0x60, 0xe}, {0x7f, 0x4}, {0x9cb3, 0x5}]}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000002c0)={0x18, r1, 0x4, 0x0, &(0x7f0000000280)=[{0x7, 0xe}, {0x60, 0xe}, {0x7f, 0x4}, {0x9cb3, 0x5}]}) r2 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000000140)) (async) r3 = syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000100)=""/72, 0x4000, 0x800, 0x5, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000100)=""/72, 0x4000, 0x800, 0x5, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000020000000000000000000000098e63f769b8c5059993e704fc394e8ec3b8519a34e56696ec76aa982aae320ce5599c4a6458d43252fe99e56cb189ae4adcbe0baea7f29c1e16973d7206e3a03ee2e6257efb0addd9e5ff3f6e4aec5ab31b42e22d1f6c8bd53b2132917797dbe1ff4d547f2df43c96a510cd0b39325af35a0e588438f0163ea457e1c516534d06bac6dc0c50a998c48901550e9203258af9593cb3b50012a371562", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="60010000100013070000000000000000fe880000000000000000000000000001ac1e00010000000000000000000000004e2400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000049fac9826901026f0000aa0000000033000000240100000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007595000000000000240009000900000000000000090000000000000002000000000000007e000000000000004c0014007368613100"], 0x160}}, 0x0) (async) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="60010000100013070000000000000000fe880000000000000000000000000001ac1e00010000000000000000000000004e2400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000049fac9826901026f0000aa0000000033000000240100000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007595000000000000240009000900000000000000090000000000000002000000000000007e000000000000004c0014007368613100"], 0x160}}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0xfffffffffffffeca, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r8}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r13}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 12.026381504s ago: executing program 2 (id=2301): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000800)='bbr', 0x3) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x20000810) 11.962231135s ago: executing program 2 (id=2302): msgget$private(0x0, 0x51) (async) r0 = msgget$private(0x0, 0x51) msgrcv(r0, &(0x7f0000000000)={0x0, ""/43}, 0x33, 0x1, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x102, 0x20000}}}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x102, 0x20000}}}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000000c0)={0x1, @sliced={0xffff, [0x4, 0x8a, 0x7, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1, 0x9, 0x7, 0xaa, 0x3b1d, 0xffff, 0x49f9, 0x4, 0x4, 0xff, 0x2, 0x101, 0x1b7, 0x0, 0x2, 0x1, 0x0, 0x7be6, 0x4, 0x7, 0x0, 0x6, 0x4, 0x0, 0x40, 0x65f6, 0x6, 0x93b, 0x0, 0xff, 0x4, 0x4, 0x8, 0x9, 0xc, 0x8, 0xf, 0x5, 0xe717], 0x3}}) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400070001"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000400070001"], 0x50) timer_create(0x7, 0x0, &(0x7f0000000740)) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(r6, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x0, 0x0) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x0, 0x0) read$FUSE(r8, &(0x7f00000009c0)={0x2020}, 0x2020) (async) read$FUSE(r8, &(0x7f00000009c0)={0x2020}, 0x2020) r9 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xad1a, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x1}) (async) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb}, 0x94) msgget(0x3, 0x49) (async) msgget(0x3, 0x49) 11.770661039s ago: executing program 2 (id=2303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'geneve1\x00', @broadcast}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r2, &(0x7f0000000280)={0x6, 0x2d, 0x0, 0x3a, 0x0, 0x2c}, 0x48) io_uring_enter(r2, 0x6a56, 0xe4e1, 0x40, &(0x7f00000001c0)={[0xfffffffffffffff7]}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd25, 0x8, {0x0, 0x0, 0x0, r3, {0x0, 0x2400}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) 11.277824564s ago: executing program 2 (id=2304): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x20000, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'gretap0\x00'}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500080001000000"], 0x44}}, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bb, 0x20, 0x3, 0x1c5}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x104, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x80010, r1, 0xbfbac000) (async) r7 = userfaultfd(0x1) ioctl$UFFDIO_ZEROPAGE(r7, 0x40049409, 0x0) (async) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) (async) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="200501"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r9, 0x5b03, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) fcntl$getown(r9, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x6, 0x2, {}, {0xffffffffffffffff}, 0x10005, 0x400000800}) 11.204450668s ago: executing program 33 (id=2304): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x20000, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'gretap0\x00'}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500080001000000"], 0x44}}, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f0000000100)={0x0, 0x200089bb, 0x20, 0x3, 0x1c5}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x104, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x80010, r1, 0xbfbac000) (async) r7 = userfaultfd(0x1) ioctl$UFFDIO_ZEROPAGE(r7, 0x40049409, 0x0) (async) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) (async) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="200501"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r9, 0x5b03, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) fcntl$getown(r9, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x6, 0x2, {}, {0xffffffffffffffff}, 0x10005, 0x400000800}) 5.666414859s ago: executing program 4 (id=2334): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x7, &(0x7f0000000a00)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) (async) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f00000023c0)={0x2020}, 0x2020) 5.548926179s ago: executing program 4 (id=2336): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x1080, @none, 0x0, 0x2}, 0xe) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.548204746s ago: executing program 4 (id=2338): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40050}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001b00)="f4000900", 0x4}], 0x1}, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x4, 0x2) 5.414248214s ago: executing program 4 (id=2341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) (async, rerun: 32) syz_emit_ethernet(0x2e, &(0x7f0000000c00)={@broadcast, @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (rerun: 32) 5.390652183s ago: executing program 4 (id=2343): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x100) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x1, {0xe57e, 0x6150, 0xe9d, 0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x0, 0x40, 0x9, 0xff, {{0x16, 0x4, 0x3, 0x27, 0x58, 0x65, 0x0, 0x8, 0x4, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0xc, 0x22, 0x0, 0xb, [0xf, 0x40]}, @ssrr={0x89, 0xb, 0xb5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @noop, @cipso={0x86, 0x21, 0x3, [{0x6, 0x12, "1e9c23f27cae73d8eed4ff252847e6bf"}, {0x3, 0x9, "b91bf9400c5749"}]}, @lsrr={0x83, 0xb, 0xf9, [@remote, @local]}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) mremap(&(0x7f0000002000/0x4000)=nil, 0x200000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x9}]}, 0x28}}, 0x44880) 5.246248759s ago: executing program 4 (id=2345): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=@setlink={0x58, 0x13, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x58}}, 0x0) 4.276515576s ago: executing program 3 (id=2354): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="01ac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = syz_io_uring_setup(0x7cf0, &(0x7f0000000440)={0x0, 0x15d2, 0x30101, 0x0, 0x22a}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r5, 0xffffffffffffffff, 0x0, 0x0, 0x3}) io_uring_enter(r6, 0x7a98, 0x0, 0xffefff7f00000000, 0x0, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x4, 0x0}, 0x8) r11 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r11, &(0x7f0000001b40)={0x2020}, 0x205c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x20, &(0x7f0000000280)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbd6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x2, 0x1, 0x6, 0xb, 0x8, 0x10, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x64}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @jmp={0x5, 0x0, 0xd, 0xf, 0xa, 0x10, 0xfffffffffffffffc}], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x24, '\x00', r4, @lsm=0x1b, r9, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x1, &(0x7f0000000500)=[0x1, r11], &(0x7f0000000540)=[{0x5, 0x1, 0xe}], 0x10, 0x31b7}, 0x94) 3.64601134s ago: executing program 5 (id=2360): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x4f27, 0x7, 0x1, 0x16, 0x5, 0x5, 0x8, 0x3, 0xa, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xca9f, 0x3, 0x20001e58, 0xb, 0xe66, 0x3, 0x8, 0x4081, 0x0, 0xfffffff8]}) 3.64588784s ago: executing program 5 (id=2361): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000800)='bbr', 0x3) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) (fail_nth: 5) 3.559834272s ago: executing program 5 (id=2362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) (async) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="f10f070601c30f010254f36e6e01c3f30f09b99b0900000f32f20f79eb8fc878c0ce000fc79db4330000", 0x2a}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="f10f070601c30f010254f36e6e01c3f30f09b99b0900000f32f20f79eb8fc878c0ce000fc79db4330000", 0x2a}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0) 3.397832889s ago: executing program 5 (id=2365): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000400)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x4, @mcast1, 0xf11b}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x1, @mcast1, 0x4019}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x90}], 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000098b38f207d0710049668010203010efa7e71026db263fc090212000100000000"], 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x90) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r1, &(0x7f0000000280)=[{0x6, 0x82, 0x5, 0xff, @time={0x6, 0x4}, {0x40, 0x3d}, {0x3, 0x8}, @time=@tick=0xe}, {0x8, 0x65, 0x6, 0x8, @tick=0x5, {0x7, 0xfa}, {0x3, 0x4}, @raw8={"3b38f700c7b1dff3c99ffcc8"}}, {0x6, 0xfa, 0x6, 0x0, @time={0x8, 0x1}, {0x9, 0x2}, {0x6, 0xfa}, @result={0xfff, 0x6}}, {0x1, 0x7f, 0x10, 0x1, @time={0x0, 0x2}, {0x5, 0x1}, {0x9e, 0x8}, @raw8={"72d812f8b6ae19acbaa44894"}}, {0x18, 0x1, 0xba, 0x6, @time={0xffffff73, 0x410c}, {0x1, 0xe}, {0x9d, 0x8d}, @time=@tick=0x800}, {0x9, 0x7, 0x0, 0xfa, @tick=0x9, {0x3, 0x8}, {0x4}, @note={0x8, 0xa, 0x4, 0x16, 0x5575}}, {0x8, 0x9, 0x10, 0x5, @time={0x8, 0x7}, {0x81}, {0x5, 0x8e}, @quote={{0x6, 0xb}, 0x5, &(0x7f0000000240)={0x81, 0x3, 0x4, 0xff, @time={0x2, 0x300}, {0xb9, 0xff}, {0x7, 0x45}, @ext={0xa4, &(0x7f0000000180)="12c946f2cca11208e198ffb1a14c1720577cf75c62653c74a141dc417b712f52fc5504b74f3441b5573a9fca07b32c777a8918f799d943d5544ea5f5c228e3a104299d6c726f8d3409f0319d981ddde0ac7cef98d7ade0aea7fb0c2f586b5634b1a342886e0e41a202de52ce52db98cf37f573d49413f4b08a053ebf26042e9bac2b99d17e95470f600c82d62b2911f79df84ef14b2e8b793bf99ba922142e2841cc4a86"}}}}, {0x3, 0x4, 0xd, 0x7, @tick=0x4, {0xe2, 0x3}, {0x4e, 0x96}, @control={0x2e, 0x5, 0x3}}, {0x7f, 0xa9, 0x9, 0x8, @time={0x2bc72e01, 0xf92}, {0x9, 0x4}, {0x5e, 0xf9}, @quote={{0x1f, 0x6}, 0xc0}}, {0xa0, 0x20, 0xc0, 0x24, @tick, {0x5, 0x6}, {0x40, 0x1}, @connect={{0x41, 0x5}, {0xf3, 0x6}}}], 0x118) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) pwritev2(r3, &(0x7f0000000600)=[{&(0x7f00000004c0)="00c14175dba2d5ea0c834196ec4d425a8df9a3bbdb0a78bfe30f0b849e30cdee6ba3fdf54a1a5ec27ffdc8ecb34e22b6f89a8d7f1d7f75ad69ae01419168ebfc06", 0x41}, {&(0x7f0000000540)="2178a0ff901270f2ee29aecd489ad62ca63b7487eb0f00f4caabe2c6fa8b682a614a0fb6ca136435c440f2aa21d1deff1dbd84b302c93faa41c5a30e422494943474edecdf848f51f35abba447f20b78b40df9485951e949e788a29ae83d70a34c6b3477717d3cbe454e78f54d10512129cfd1b75d8ef11291", 0x79}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f00000005c0)="be", 0x1}], 0x4, 0x5, 0x3, 0x15) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000400)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x4, @mcast1, 0xf11b}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x1, @mcast1, 0x4019}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x90}], 0x94) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000098b38f207d0710049668010203010efa7e71026db263fc090212000100000000"], 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd7, 0xa, 0x0, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x2}, 0x90) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) (async) write$sndseq(r1, &(0x7f0000000280)=[{0x6, 0x82, 0x5, 0xff, @time={0x6, 0x4}, {0x40, 0x3d}, {0x3, 0x8}, @time=@tick=0xe}, {0x8, 0x65, 0x6, 0x8, @tick=0x5, {0x7, 0xfa}, {0x3, 0x4}, @raw8={"3b38f700c7b1dff3c99ffcc8"}}, {0x6, 0xfa, 0x6, 0x0, @time={0x8, 0x1}, {0x9, 0x2}, {0x6, 0xfa}, @result={0xfff, 0x6}}, {0x1, 0x7f, 0x10, 0x1, @time={0x0, 0x2}, {0x5, 0x1}, {0x9e, 0x8}, @raw8={"72d812f8b6ae19acbaa44894"}}, {0x18, 0x1, 0xba, 0x6, @time={0xffffff73, 0x410c}, {0x1, 0xe}, {0x9d, 0x8d}, @time=@tick=0x800}, {0x9, 0x7, 0x0, 0xfa, @tick=0x9, {0x3, 0x8}, {0x4}, @note={0x8, 0xa, 0x4, 0x16, 0x5575}}, {0x8, 0x9, 0x10, 0x5, @time={0x8, 0x7}, {0x81}, {0x5, 0x8e}, @quote={{0x6, 0xb}, 0x5, &(0x7f0000000240)={0x81, 0x3, 0x4, 0xff, @time={0x2, 0x300}, {0xb9, 0xff}, {0x7, 0x45}, @ext={0xa4, &(0x7f0000000180)="12c946f2cca11208e198ffb1a14c1720577cf75c62653c74a141dc417b712f52fc5504b74f3441b5573a9fca07b32c777a8918f799d943d5544ea5f5c228e3a104299d6c726f8d3409f0319d981ddde0ac7cef98d7ade0aea7fb0c2f586b5634b1a342886e0e41a202de52ce52db98cf37f573d49413f4b08a053ebf26042e9bac2b99d17e95470f600c82d62b2911f79df84ef14b2e8b793bf99ba922142e2841cc4a86"}}}}, {0x3, 0x4, 0xd, 0x7, @tick=0x4, {0xe2, 0x3}, {0x4e, 0x96}, @control={0x2e, 0x5, 0x3}}, {0x7f, 0xa9, 0x9, 0x8, @time={0x2bc72e01, 0xf92}, {0x9, 0x4}, {0x5e, 0xf9}, @quote={{0x1f, 0x6}, 0xc0}}, {0xa0, 0x20, 0xc0, 0x24, @tick, {0x5, 0x6}, {0x40, 0x1}, @connect={{0x41, 0x5}, {0xf3, 0x6}}}], 0x118) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) (async) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) (async) pwritev2(r3, &(0x7f0000000600)=[{&(0x7f00000004c0)="00c14175dba2d5ea0c834196ec4d425a8df9a3bbdb0a78bfe30f0b849e30cdee6ba3fdf54a1a5ec27ffdc8ecb34e22b6f89a8d7f1d7f75ad69ae01419168ebfc06", 0x41}, {&(0x7f0000000540)="2178a0ff901270f2ee29aecd489ad62ca63b7487eb0f00f4caabe2c6fa8b682a614a0fb6ca136435c440f2aa21d1deff1dbd84b302c93faa41c5a30e422494943474edecdf848f51f35abba447f20b78b40df9485951e949e788a29ae83d70a34c6b3477717d3cbe454e78f54d10512129cfd1b75d8ef11291", 0x79}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f00000005c0)="be", 0x1}], 0x4, 0x5, 0x3, 0x15) (async) 3.392139539s ago: executing program 3 (id=2367): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r5, 0x40480923, 0x200000000005) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f0000000600)={r5, 0xc, 0xb, "6f1a2e7aa2dfabf3c1a6ece6e5e3e16555c8f355525114622f47f6402c1dbdeb1774c40f1bb22e5eee1aa2a4637a201bcf475611b57fdbaa24ccbf575d5a80"}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000400)={0x22, r0, 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1d, &(0x7f0000000180)=@raw=[@ldst={0x1, 0x1, 0x2, 0xb, 0xa, 0x100, 0xffffffffffffffff}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x54d}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x190}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x652}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe6}], &(0x7f0000000040)='GPL\x00', 0xfff, 0xaa, &(0x7f0000000280)=""/170, 0x40f00, 0x1, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000000c0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)=[r4, r5, r6, r7, r8, r9], &(0x7f00000004c0)=[{0x3, 0x1, 0x6, 0x2}, {0x4, 0x3, 0x5}, {0x5, 0x5, 0x8, 0x3}, {0x1, 0x5, 0x8, 0xd}, {0x4, 0x1, 0xb}, {0x3, 0x5, 0x9, 0xc}], 0x10, 0x5754}, 0x94) 3.314240347s ago: executing program 3 (id=2368): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000a00"], 0x10b8}, 0xff00) 3.312554485s ago: executing program 3 (id=2369): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@ipv6_getnexthop={0x28, 0x6a, 0x4, 0x70bd27, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c010}, 0xc044) socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) (async) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r3) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x9e) r6 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x57, 0x0, 0x34, 0x0, 0x0, 0x64, 0x35, 0x0, 0x39, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x18}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r6, r3, r4, 0x0) (async) keyctl$KEYCTL_MOVE(0x1e, r6, r3, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) (async) setpgid(0x0, r7) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x80d00, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8, {0x8}}, './bus\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) pwrite64(0xffffffffffffffff, &(0x7f0000000200)="ed34bca0e8409b5be2f45d8e1b04ad7b2463d3f8f2ade2bd2ec4ae693224df798463458949068d5b450159e27b54fbc2b1dc616b43f71226adb65eb4dff1233ecc83645ab87d43f4a4f424a5c825b446d57f9fe3af6edee24c2bb97c904527e412e356b002f2cbb66302a715a3de", 0x6e, 0x7) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) 3.248996634s ago: executing program 3 (id=2370): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x5, 0x6, 0x7, 0x9}, 0x8, [0x0, 0xe, 0x9, 0xfffffffd, 0x3, 0x21, 0x5, 0x6, 0xe, 0x7119, 0x9650, 0x8, 0x8000, 0x81, 0x9, 0x7, 0xff, 0x0, 0x9, 0x401, 0xfffffff8, 0x6, 0x2, 0xffffffff, 0xbb, 0x2, 0x63, 0x3aaa, 0x5, 0x800, 0x5, 0x9cb, 0x2, 0x9, 0x1, 0x5, 0x9b07, 0x85, 0x9, 0x8, 0x8, 0x38, 0x1, 0x400, 0xe, 0x1, 0x7fff, 0x7c, 0x0, 0x9, 0x1, 0x5, 0x4, 0x4560, 0x4, 0x3, 0x9, 0x8, 0xb, 0x6, 0x822, 0x8, 0x9, 0x3], [0x60, 0x9, 0x382, 0x9, 0x4, 0x6, 0xffff9706, 0x1, 0x1, 0x2, 0xf8d5, 0xe50b, 0x8, 0x6, 0xfffffffb, 0x8f05, 0xa2, 0x1000, 0x7, 0xfffffffd, 0x7, 0x3, 0x5, 0x401, 0x401, 0x3, 0x40, 0x8, 0xec0, 0x508a, 0xcc185596, 0xffffffff, 0x7fff, 0x7, 0xa, 0x9, 0x1, 0x2, 0x6, 0x9, 0x2, 0xffff, 0x4, 0x3, 0x7, 0x3, 0x9, 0xffffff81, 0x2, 0x5, 0x8, 0x2, 0xfffffff9, 0x31, 0x7, 0x0, 0xffffffff, 0xca, 0x8ace, 0x9b, 0xfffffffd, 0x745e, 0x5, 0x2], [0x7, 0x8, 0xed86, 0x7c, 0x2, 0x6efb, 0x7, 0x4, 0x3, 0x2, 0x2, 0x5, 0x4, 0x0, 0x1, 0xfffffff1, 0x922, 0x80000001, 0x81, 0x5, 0xff, 0x401, 0xd, 0x6, 0x9, 0x5, 0x1, 0x1e282bd8, 0x1, 0x0, 0x0, 0xfffffffd, 0xd79, 0x0, 0xffffff29, 0x5, 0x3, 0x0, 0x16b9, 0xb, 0x7, 0x0, 0x8001, 0x3, 0x2, 0x0, 0x8, 0x5, 0x7, 0x100, 0x3, 0x1ff, 0x3ff, 0x8, 0xc, 0x2, 0x3, 0x3, 0x5, 0x2, 0x3, 0x464, 0x80000001, 0x7], [0x401, 0x1000, 0x1000, 0xfffffffe, 0x0, 0x1, 0x6, 0x5, 0x3, 0x9, 0x7, 0xffffff7e, 0x530, 0x7fff, 0x401, 0xe, 0x2, 0x5, 0x4e0, 0x57, 0x3, 0x9, 0xfffffffe, 0x101, 0x2, 0x0, 0x85, 0x4, 0x3ff, 0xa, 0x2, 0x7ff, 0x3d9e, 0x2, 0xeb0, 0x0, 0x9, 0x4, 0x3, 0x6, 0x9, 0x6, 0xdb0b, 0x5, 0x9, 0x1, 0x280000, 0x1ff, 0x0, 0x80, 0x2b, 0x1ff, 0x9, 0x401, 0x2, 0xfff, 0x1, 0x1ff, 0xb26, 0x4, 0x4, 0x80, 0x7]}, 0x45c) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101290000090509"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3d1a0987f70e06d038e7ff7fc6e5539b3272078b089b080f384b090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef3195201c0fde8d178708c523c921b1b5d500f0d30090936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc90da8196c28d920bab05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d21487b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a158b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae7183cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a799567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461600000000000000206ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f86b8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a75500000000d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) modify_ldt$write(0x1, &(0x7f0000000040)={0xc, 0x0, 0x400}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94) syz_usb_connect$cdc_ncm(0x3, 0x7f, &(0x7f0000000e00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x5, 0x40, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xf, 0x8, 0x4}, {0x6, 0x24, 0x1a, 0x4}, [@acm={0x4, 0x24, 0x2, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x3, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x7f, 0x1}}}}}}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000e80)={0xa, 0x6, 0x250, 0x7f, 0xf9, 0x4, 0x20, 0x5}, 0xea, &(0x7f0000000ec0)={0x5, 0xf, 0xea, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "6d72da982f46e63f41e28df56aa3ab39"}, @generic={0xbc, 0x10, 0xa, "b1d81e6461e40d10530ef9e483678f05523c1ae41a961b291b25599841f4104ed9d3c80aa2708c5d6cd7f564fa82d868efe493a25624242420b0cc751f0d2a1643c31e470b43c4b3b36e8f6c628b3b2169f315099ce3df8609745ab153266d9437069161d3aa42d4208439e2a5d01f4a015857ae2499178b2d2c8bc5da8c0d750bc4613ed265df4e2f15214c6d77300cbf804581e0ade4875b537c46e500870b1133dc4e7cb4015e898afe623c30bd68f3951aa715c6c705f0"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x4, 0xfffb}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x7f, 0x6, 0xd3, 0x7}, @ptm_cap={0x3}]}, 0x1, [{0xc9, &(0x7f0000002080)=@string={0xc9, 0x3, "c7b3883b10696cf8a19ed088f9d06d7fdcea210740c798cb2cf2eb7ed32910e67ce2f499b2c5c11df00628242fde4d41f564e15fad624ab206e1cde2026640f52ec35c96e7d0cccf02064f49a01339f1e367f35e6209a78e48c79a52244b1c1a0758ef3da97f91ee5583313f78d48e21406ec66e577316dc2ffa25fa0606a51e11528985de5580ef495d790b9e1380fa730ee0ad9c9515f8ff3e75adf068bcce7711f29758e8bf1659df53a18879a0c2095181e2466918fa9361b4f1c6b726775316693c7bb73f"}}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0xd0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0x29, 0x5, 0x0) 1.506476855s ago: executing program 0 (id=2373): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x29, 0x5, 0xe6, 0x8, 0x51, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x80, 0x0, 0x10001}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x82, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000b00)={'syztnl2\x00', r1, 0x29, 0x7, 0x7, 0x0, 0x8, @remote, @ipv4={'\x00', '\xff\xff', @empty}, 0x80, 0x1, 0x5, 0x2}}) r10 = syz_open_procfs$pagemap(0x0, &(0x7f0000000bc0)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r10, 0x4018f50b, &(0x7f0000000c00)={0x1, 0x8}) pwritev(r0, &(0x7f0000000980)=[{&(0x7f0000000000)="855fb09d2cff44c73722b147a2cd0575e4c6f1a73cb1c3c6a59c6a51685f567e3a48fbd5c69a0759f5e4a2f03e6ef56cb46a1b25afadec8b20a5ea8597d98504999fdee692aa23d1a0d9d096326d1cc488297c8c00c143dfdb75b73d64988e9d7239e622d412093672c609849b1045201b073572efc4655e764e8418b367e422bbb0a99ffdcab75abae32fc5c4bb085f0352cc2162c79fab55bd3b3e3b5e12657b65d16128483c6279861adb", 0xac}, {&(0x7f00000000c0)="e7c06f46f61fe165a1a2e55259482750e880cc9fb0fd0fd7a0bcaa9b46c5951fa1e13c0fbea7318e15357cad2f5b825adbcc1b16631319179eef8518478aa6d5c85fd90c5998bf5de5b9a41dc5381a207f72182577a61981fbfbd48ff5214d271f383b53d64ade85927da6c96a18cbd3462e1d3e9a34e7d4a7e15dadd709a0", 0x7f}, {&(0x7f0000000140)="90d25cd724b839b0aefbc66e693d79c996b90ca5e8bfb6dc37255f8fc7eb", 0x1e}, {&(0x7f0000000180)="007ac23be10b6ab852e7921aaaf13a590d6e4cf138e17f071d96f998a0629e3919bab8ea9790b69369a779c698e56e0c146968aec0d01e92aa04c7ded716d7c8a37030fc1654dbab9a29fa2dd52b936f743b6244c2b21f29d00ddd763a018d68deadb47068fd51db7253d144c77df283c021e472bd0169e6f8bb0e6117ed47e6988049c6baadbf", 0x87}, {&(0x7f0000000240)="557ab359437dbb9d58eddc2f5cde137cafa51268b51428a7f98095a624e575da36d83b964b45ba2a9bbd11bac9f471a1b908791d9b134bf2b1b6c5a7e86b0ff309522fcce8be5cace9334800415e442cdc458b15b93e5a7d8d8d922a5ebf49d511e66721dc1af33a88722487843244925700c0f59976526eb1d60eb626b490403ee77371ff5a252c790703192d1b00f4b598908eb72b00491f0fb7dd7ee95986f54f16daab9a0ee054bf438d745884a7166e324d508a31c3165539e076081841dd4de270b6b5ae361a54cdb72eab42cd9616f15e550ffc75fca6249e27d76734a56c14ad3b748bb3bfbda6dac35a5f0d641665e28527f6afe54ad13350eeff", 0xff}, {&(0x7f0000000340)="84d39df186964a00207591ee476ebb5ed9b7ac109f1e65f89931ec981d4edbc20a8ecd877551ef36e30e2d3ec17729b5c0fc05913cda0b015fb3a01c4db9c809f0f9e93bc348018857815283b2d48829f31009f77c03de78497e7cee8d9faf36205730d0a16d97a42b81b07607d37ce6afc7fae9738bf9e558de2ba2f87dad777f330dbfeef88832d20a8bb6aab18e6606abac53306f0bff9980bff78618bf88debfabf6c63531f4b7993b2bc063273efe356b7ef7e5040cf9f33c701ff31154e7fce30996d7abd60b15189c67a708c9ed8cf8b6307071fb5f38708093d5e741082bb7627e48673588a4a6456d61cd46ceb3", 0xf2}, {&(0x7f0000000440)="439d574d5c6d2d02d8d4fcfcd3ef99905e5da51befc6faf2c689fa095b9b4161b6926055fb202c17429c908a6c26", 0x2e}, {&(0x7f0000000480)='c(', 0x2}], 0x8, 0x5, 0x9) r11 = memfd_secret(0x80000) setsockopt$inet6_int(r11, 0x29, 0x18, &(0x7f0000000a00)=0x5, 0x4) 1.3365954s ago: executing program 0 (id=2374): r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "e5c7f20eae1fae974c170f6484d0a76b00489afd264e961114174dd08e6a34da6c9cb5dcb0fcccd12f9b47b8ea086c1c1c593c15de9400"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0x0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) ppoll(&(0x7f0000000000)=[{r1, 0x4242}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) shutdown(r1, 0x1) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$get_security(0x11, r2, &(0x7f0000000200)=""/197, 0xc5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x80) mremap(&(0x7f0000f75000/0x2000)=nil, 0x2000, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) 1.240234781s ago: executing program 0 (id=2375): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x30000}]}, 0x1c}}, 0x8000) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x9c, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000240), &(0x7f0000000380), 0x8, 0x63, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@getchain={0x24, 0x66, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0x1}, {0x0, 0x10}, {0x1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000400)="e970d6ea0600000000284b6819cd4222f0cc540000007a12e5cdb79f49f1aed79adc3252825a86a526a3501fb1dd8dff3e90d6f5", 0x34}], 0x1) (async) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 1.165441459s ago: executing program 0 (id=2376): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="f26cbaa10066b80100000066efbaf80c66b8043b0a8b66efbafc0c66b80600000066ef0f23220f01cbff21baa100b818bbef0fdb5483f33e85542cb800008ec0", 0x40}], 0x1, 0x21, &(0x7f0000000080)=[@efer={0x2, 0x1000}], 0x1) (async) ioctl$KVM_CAP_X86_GUEST_MODE(r0, 0x4068aea3, &(0x7f00000000c0)) (async, rerun: 32) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) (rerun: 32) ioctl$CDROM_MEDIA_CHANGED(r2, 0x5325, 0x6) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000001c0)={0x454, 0x3f3, 0x20, 0x70bd29, 0x25dfdbfc, {0x1, 0x0, 0x30, [0x4, 0x40, 0x80000000, 0x8bfd, 0x3, 0x39b0, 0x4ec74eb2, 0x1, 0x0, 0x9984, 0x732d, 0x3ff, 0x5, 0x7351, 0xff, 0x6, 0x80000001, 0x3, 0x9, 0x1, 0x10000, 0x95, 0x2, 0x7, 0xc, 0x4, 0xd09, 0x3, 0x0, 0x8, 0xc, 0x7fffffff, 0x2, 0x8001, 0x6, 0xffffff80, 0x2, 0x8, 0x2, 0x1, 0x0, 0x4, 0xfffffffa, 0xa92d, 0x3, 0x7, 0x1000, 0x9, 0x2, 0xffff, 0x10000, 0x5, 0x5c, 0x5, 0x1, 0x6, 0xc, 0xff, 0x10, 0x42, 0x4, 0x874, 0x8, 0xb3], [0x10, 0xac8, 0xffff8001, 0x4, 0x5, 0x6, 0xcdb5, 0x4, 0x4, 0x3, 0x2, 0x7fffffff, 0x5, 0x2, 0xdc, 0xbb, 0x1, 0xc00, 0x10000, 0x6ae, 0xb, 0x2, 0x7ff, 0x4, 0x7fffffff, 0x10f, 0x9, 0x6, 0xd03, 0xa, 0x0, 0x5, 0x8000, 0x4, 0x6, 0x9, 0x8dc2, 0x2, 0x10000, 0x6, 0xff, 0x8, 0x4, 0x0, 0x4, 0xfffffffd, 0x4, 0x2, 0x3a, 0x800, 0x40, 0x200, 0x4, 0x0, 0x2, 0x5, 0x9d0, 0x101, 0x8, 0x7ac0, 0xe48d0f5, 0x9, 0x9, 0xfffffff7], [0xffffffff, 0x19a76132, 0x8, 0x9, 0x8, 0x11, 0x9, 0xbb, 0x0, 0xffffffff, 0x1, 0x3, 0x4ae, 0x400, 0x8, 0x0, 0xfffffffe, 0x377, 0x7, 0x8, 0xb5e, 0xfffffffd, 0x2, 0x5, 0x9, 0x2, 0xfffffffe, 0x5, 0x2, 0x1, 0xffff, 0x10, 0x6, 0x6, 0x1, 0x1, 0x9, 0x1, 0xf6, 0x2, 0x5, 0x1, 0x1, 0x4, 0x3, 0x6, 0x2, 0x9, 0x46d, 0x7, 0x1, 0xfffffff6, 0x1, 0x7000000, 0x0, 0x6, 0x7, 0x0, 0xffff, 0xbd38, 0x80000001, 0x8, 0xd7, 0x80000001], [0x50e11488, 0x5, 0x1, 0xfffffffd, 0x19, 0x6, 0x81, 0x7, 0x2, 0xe2d, 0x1, 0xe7, 0xe9, 0x7, 0x4e, 0x8, 0x73, 0x1, 0xa, 0x7, 0x5, 0x6, 0x8, 0x2fc, 0x101, 0x4, 0x2, 0x9, 0xfffffa8a, 0x0, 0x1, 0x7fff, 0x1, 0x8, 0x81, 0x6, 0x9, 0x3, 0x2, 0x2, 0x4, 0x45, 0x240, 0x8, 0x8, 0x3, 0x3, 0x0, 0x200, 0x5, 0x1, 0x81, 0x5, 0x16e9, 0xd, 0x4, 0xeb, 0x0, 0x10, 0x1ff, 0x5, 0x8, 0x40, 0x2], 0x34, ['-(+/:\'\x00', '/dev/ubi_ctrl\x00', '/dev/ubi_ctrl\x00', '/dev/ubi_ctrl\x00', '%&\x00']}, ["", "", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x4000040}, 0x8) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000006c0)=@sr0, r3, &(0x7f00000007c0)) (async) connect$unix(r2, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r2) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x80, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffff416}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe5c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) (async) lgetxattr(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=@random={'btrfs.', '/dev/sr0\x00'}, &(0x7f0000000a80)=""/235, 0xeb) (async) splice(r1, &(0x7f0000000b80)=0x8, r1, &(0x7f0000000bc0)=0xfffffffffffffffc, 0x0, 0x3) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000000c00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c80)=""/48, 0x30}], 0x1}, 0x5}, {{&(0x7f0000000d00)=@sco={0x1f, @none}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d80)=""/248, 0xf8}, {&(0x7f0000000e80)=""/197, 0xc5}, {&(0x7f0000000f80)=""/58, 0x3a}, {&(0x7f0000000fc0)=""/89, 0x59}], 0x4, &(0x7f0000001080)=""/16, 0x10}, 0x2}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/197, 0xc5}, {&(0x7f00000011c0)=""/176, 0xb0}], 0x2, &(0x7f00000012c0)=""/212, 0xd4}, 0xbf}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f00000013c0)=""/9, 0x9}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x6}, {{&(0x7f0000002440)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002800)=[{&(0x7f00000024c0)=""/248, 0xf8}, {&(0x7f00000025c0)=""/164, 0xa4}, {&(0x7f0000002680)}, {&(0x7f00000026c0)=""/121, 0x79}, {&(0x7f0000002740)=""/134, 0x86}], 0x5, &(0x7f0000002880)=""/126, 0x7e}, 0x7fff}], 0x5, 0x2, &(0x7f0000002a40)={0x77359400}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000002a80)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000002ac0)={0x0, 0x0, r5}) (async) fremovexattr(r5, &(0x7f0000002b00)=@known='trusted.overlay.origin\x00') (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x18, 0x1411, 0x2, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x800) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x28, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async, rerun: 64) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000002d40)={0x8280000000000000, 0x10000, 0x75c, 0x0, 0x13}) (async, rerun: 64) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002d80), 0x404001, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000002dc0)) (async) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000002e00)) (async) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000002fc0)={0x0, 0xea60}, 0x10) (async) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000003000)={0x1000, 0x850b, 0x9, 0x4, 0x9, "60529c6b3fb7614253f7ad053c4611ba52645f"}) write$cgroup_freezer_state(r6, &(0x7f0000003040)='FREEZING\x00', 0x9) fchmodat(r6, &(0x7f0000003080)='./file0\x00', 0x0) (async) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f00000030c0)={0x3, 0x6, 0xf02, 0x400, 0x18, 0x4}) fsetxattr(r2, &(0x7f0000003100)=@random={'trusted.', 'trusted.overlay.origin\x00'}, &(0x7f0000003140)='/dev/ubi_ctrl\x00', 0xe, 0x0) 1.164254468s ago: executing program 0 (id=2377): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x800, {0x0, 0x0, 0x0, 0x4, 0xfff, 0x0, 0x0, 0x16, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) pwrite64(r0, &(0x7f0000000280)="d0", 0x1, 0x474) 1.037122984s ago: executing program 0 (id=2378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x22, 0x2, 0x3) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 150.025611ms ago: executing program 5 (id=2379): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0x20000006}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r5, &(0x7f0000000100), 0xfffffd79) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000002580)=[@free_buffer={0x40046307}], 0x0, 0x0, 0x0}) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_START(r9, 0x5402) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000140)={0x0, 0xc74, [0x80000000007, 0x80000001, 0x9, 0x7, 0x8, 0x7]}) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ioctl$SNDCTL_TMR_TEMPO(r9, 0xc0045405, &(0x7f0000001080)=0x8f) sendmmsg(r1, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="a0a4a4", 0x3}], 0x1}}], 0x1, 0x0) 503.824µs ago: executing program 3 (id=2380): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r0 = socket(0x10, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @local}, &(0x7f0000000140)=0xc) sendmsg$nl_route(r0, &(0x7f00000192c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000019280)={&(0x7f0000019200)=ANY=[@ANYBLOB="48000000720000042c000000", @ANYRES32=r3, @ANYBLOB="080001000000000008000100010000000800010000000000080001000100000008000100010000000800010001000000"], 0x48}, 0x1, 0x0, 0x0, 0x4c042}, 0x4000000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4058040) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = dup3(r2, r4, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000019240)=ANY=[], 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', r3, @fallback=0x1b}, 0x94) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r7, 0x101, 0x2, &(0x7f00000029c0)=0x2, 0x4) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r9 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x0, 0x7, 0xffeffffe}, {0x16}]}, 0x10) sendto$inet6(r9, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) write$selinux_load(r6, &(0x7f0000000080)={0xf97cff8c, 0x3700, 'SE Linux', "2d185423bfe87441073ad81995e24cc2"}, 0x20) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000180)={0x60, 0x17, 0x6, 0x1, 0x0, 0x2, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a124, 0x60, {0x0, 0x100}}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 0s ago: executing program 5 (id=2381): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c4) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$9p_unix(&(0x7f0000000440)='./file0/file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x121f408, 0x0) kernel console output (not intermixed with test programs): T40] audit: type=1400 audit(503.257:28610): avc: denied { execute } for pid=11252 comm="syz.2.1508" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 506.512001][ T6449] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 506.610814][ T40] audit: type=1400 audit(503.388:28611): avc: denied { shutdown } for pid=11267 comm="syz.2.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 506.683104][ T6449] usb 5-1: Using ep0 maxpacket: 8 [ 506.686239][ T6449] usb 5-1: config 0 interface 0 has no altsetting 0 [ 506.688486][ T6449] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 506.691217][ T6449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.695791][ T6449] usb 5-1: config 0 descriptor?? [ 506.723874][ T40] audit: type=1400 audit(503.491:28612): avc: denied { write } for pid=11278 comm="syz.4.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 506.921793][ T6062] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 507.091666][T11290] binder: 11289:11290 ioctl c0306201 200000000480 returned -14 [ 507.101416][ T6062] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 507.104889][ T6062] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 507.108335][ T6062] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 507.114355][ T6062] usb 7-1: string descriptor 0 read error: -22 [ 507.116447][ T6062] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.119246][ T6062] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.125730][T11275] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 507.129402][ T6449] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 507.343540][ T6062] cdc_ncm 7-1:1.0: bind() failure [ 507.352217][ T6062] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 507.354399][ T6062] cdc_ncm 7-1:1.1: bind() failure [ 507.359467][ T6062] usb 7-1: USB disconnect, device number 15 [ 507.415510][ T74] usb 5-1: USB disconnect, device number 8 [ 507.500675][T11298] netlink: 'syz.3.1523': attribute type 11 has an invalid length. [ 507.638027][T11308] xt_time: unknown flags 0xf4 [ 507.761839][T11316] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 507.883443][T11321] loop2: detected capacity change from 0 to 7 [ 507.889685][ T6006] Dev loop2: unable to read RDB block 7 [ 507.892530][ T6006] loop2: unable to read partition table [ 507.895340][ T6006] loop2: partition table beyond EOD, truncated [ 507.898813][T11321] Dev loop2: unable to read RDB block 7 [ 507.901009][T11321] loop2: unable to read partition table [ 507.904002][T11321] loop2: partition table beyond EOD, truncated [ 507.907656][T11321] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 507.911546][T11321] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11321 comm=syz.3.1530 [ 507.917617][T11321] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 508.048367][T11330] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.159141][ T40] audit: type=1400 audit(504.838:28613): avc: denied { connect } for pid=11339 comm="syz.0.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 508.264695][T11357] xt_hashlimit: invalid rate [ 508.269228][T11358] Invalid ELF header type: 3 != 1 [ 508.269413][T11357] Invalid ELF header type: 3 != 1 [ 508.271237][ T40] audit: type=1400 audit(504.941:28614): avc: denied { module_load } for pid=11355 comm="syz.0.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 508.367002][T11354] block nbd2: NBD_DISCONNECT [ 508.450097][T11377] netlink: 'syz.2.1549': attribute type 7 has an invalid length. [ 508.576208][T11385] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 508.578680][T11385] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 508.581223][T11385] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 508.583628][T11385] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 508.589738][T11384] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 508.592877][T11384] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 508.595488][T11384] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 508.599609][T11384] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 508.895950][ T1347] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 508.939366][T11413] delete_channel: no stack [ 508.946215][T11402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.950835][T11402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.037870][T11422] netlink: 'syz.3.1564': attribute type 1 has an invalid length. [ 509.056421][ T1347] usb 7-1: device descriptor read/64, error -71 [ 509.361343][T11448] Device name not specified. [ 509.361343][T11448] [ 509.538832][T11467] IPVS: length: 119 != 8 [ 509.602829][T11474] tipc: Cannot configure node identity twice [ 509.609629][T11476] netlink: 'syz.4.1581': attribute type 83 has an invalid length. [ 509.829613][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.531845][T11525] PM: Enabling pm_trace changes system date and time during resume. [ 510.531845][T11525] PM: Correct system time has to be restored manually after resume. [ 510.820363][T11538] netlink: 'syz.2.1602': attribute type 3 has an invalid length. [ 510.903540][T11540] futex_wake_op: syz.4.1604 tries to shift op by -1; fix this program [ 511.016491][T11554] __nla_validate_parse: 17 callbacks suppressed [ 511.016503][T11554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1608'. [ 511.139611][T11559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=75 sclass=netlink_route_socket pid=11559 comm=syz.2.1609 [ 511.318280][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 511.538853][T11618] netlink: 'syz.2.1632': attribute type 1 has an invalid length. [ 511.559975][T11618] 8021q: adding VLAN 0 to HW filter on device bond6 [ 511.577450][T11618] bond6: (slave geneve2): making interface the new active one [ 511.581937][T11618] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 511.638428][T11631] netlink: 'syz.3.1634': attribute type 7 has an invalid length. [ 511.640954][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1634'. [ 511.678954][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 511.678966][ T40] audit: type=1400 audit(508.131:28621): avc: denied { append } for pid=11634 comm="syz.2.1636" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 511.731434][T11635] IPv6: sit1: Disabled Multicast RS [ 511.733727][T11635] sit1: entered allmulticast mode [ 511.871392][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1637'. [ 511.874524][T11648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11648 comm=syz.3.1637 [ 512.307174][T11690] vlan0: entered promiscuous mode [ 512.314801][ T40] audit: type=1400 audit(508.720:28622): avc: denied { bind } for pid=11688 comm="syz.0.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 513.147935][T11688] delete_channel: no stack [ 513.168679][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 513.279254][ T6062] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 513.417175][T11719] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 513.452319][ T6062] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 513.455397][ T6062] usb 7-1: config 0 interface 0 has no altsetting 0 [ 513.459153][ T6062] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 513.462884][ T6062] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 513.465432][ T6062] usb 7-1: Product: syz [ 513.466744][ T6062] usb 7-1: Manufacturer: syz [ 513.468202][ T6062] usb 7-1: SerialNumber: syz [ 513.470901][ T6062] usb 7-1: config 0 descriptor?? [ 513.477501][ T6062] usb 7-1: selecting invalid altsetting 0 [ 513.509890][T11722] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 513.513570][ T40] audit: type=1400 audit(509.842:28623): avc: denied { relabelto } for pid=11721 comm="syz.3.1660" name="cpu.stat" dev="tmpfs" ino=1870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 513.525306][ T40] audit: type=1400 audit(509.852:28624): avc: denied { associate } for pid=11721 comm="syz.3.1660" name="cpu.stat" dev="tmpfs" ino=1870 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 513.545732][ T40] audit: type=1400 audit(509.852:28625): avc: denied { append } for pid=11721 comm="syz.3.1660" path="/337/cpu.stat" dev="tmpfs" ino=1870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 513.589186][ T40] audit: type=1400 audit(509.908:28626): avc: denied { unlink } for pid=5988 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=1870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 513.694106][ T1347] usb 7-1: USB disconnect, device number 18 [ 513.913522][T11734] x_tables: duplicate underflow at hook 2 [ 513.920539][T11734] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1664'. [ 514.023883][T11739] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 514.180024][T11748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1668'. [ 514.268885][ T40] audit: type=1400 audit(510.553:28627): avc: denied { create } for pid=11752 comm="syz.2.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 514.275976][ T40] audit: type=1400 audit(510.553:28628): avc: denied { ioctl } for pid=11752 comm="syz.2.1670" path="socket:[42991]" dev="sockfs" ino=42991 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 514.284750][ T40] audit: type=1400 audit(510.553:28629): avc: denied { getopt } for pid=11752 comm="syz.2.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 514.350112][T11757] kvm: pic: single mode not supported [ 514.352252][T11757] kvm: pic: non byte read [ 514.357783][T11757] kvm: pic: non byte read [ 514.361359][T11757] kvm: pic: non byte read [ 514.364705][T11757] kvm: pic: non byte read [ 514.475897][ T40] audit: type=1400 audit(510.740:28630): avc: denied { relabelfrom } for pid=11762 comm="syz.2.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 514.659401][T11774] kvm: kvm [11773]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 514.662884][T11774] kvm: kvm [11773]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 515.006493][T11774] kvm_intel: kvm [11773]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x9cbf [ 515.024187][T11774] kvm: kvm [11773]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xcabf [ 515.027251][T11774] kvm: kvm [11773]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x78ae [ 515.047147][T11774] kvm: kvm [11773]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x835b [ 515.064164][T11774] kvm: kvm [11773]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1b4a [ 515.067844][T11774] kvm: kvm [11773]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x553a [ 515.586957][T11804] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1684'. [ 516.344951][T11838] veth6: entered promiscuous mode [ 516.410694][T11849] netlink: 'syz.2.1697': attribute type 64 has an invalid length. [ 516.415251][T11849] netlink: 'syz.2.1697': attribute type 4 has an invalid length. [ 516.417865][T11849] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1697'. [ 516.519393][T11859] netlink: 'syz.2.1699': attribute type 10 has an invalid length. [ 516.522894][T11859] netlink: 'syz.2.1699': attribute type 10 has an invalid length. [ 516.526518][T11859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1699'. [ 516.560092][T11863] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1700'. [ 516.563834][T11863] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1700'. [ 516.573795][T11852] SELinux: failed to load policy [ 516.626824][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1700'. [ 516.712382][T11872] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1702'. [ 516.850648][T11881] Cannot find del_set index 2 as target [ 516.906532][T11890] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 516.975644][T11900] netlink: 'syz.4.1709': attribute type 1 has an invalid length. [ 516.983983][T11900] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 517.143425][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 517.143440][ T40] audit: type=1400 audit(513.238:28634): avc: denied { shutdown } for pid=11906 comm="syz.4.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 517.183275][ T40] audit: type=1400 audit(513.275:28635): avc: denied { getopt } for pid=11915 comm="syz.0.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 517.221824][ T40] audit: type=1400 audit(513.313:28636): avc: denied { accept } for pid=11924 comm="syz.0.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 517.351388][T11933] overlayfs: failed to clone upperpath [ 517.417251][T11939] dvmrp17: entered allmulticast mode [ 517.420263][T11939] dvmrp17: left allmulticast mode [ 517.530200][T11942] netlink: 'syz.4.1720': attribute type 4 has an invalid length. [ 517.537998][T11942] netlink: 'syz.4.1720': attribute type 4 has an invalid length. [ 517.633933][T11950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1723'. [ 517.668838][T11951] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11951 comm=syz.4.1723 [ 517.668841][T11950] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11950 comm=syz.4.1723 [ 517.669012][T11946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1722'. [ 517.669492][T11946] x_tables: duplicate underflow at hook 2 [ 517.897560][T11959] netlink: 'syz.4.1725': attribute type 13 has an invalid length. [ 517.900183][T11959] netlink: 'syz.4.1725': attribute type 17 has an invalid length. [ 517.910363][T11959] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 518.253850][T11967] overlayfs: overlapping lowerdir path [ 518.287020][ T40] audit: type=1400 audit(514.304:28637): avc: denied { setopt } for pid=11973 comm="syz.3.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 518.323877][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1730'. [ 518.490859][T11986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.495713][T11986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.499851][T11986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.503582][T11986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.507873][T11986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.513212][T11986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.517235][T11986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.521219][T11986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.527412][T11986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.532495][T11986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.758839][T11989] syzkaller1: entered promiscuous mode [ 518.761357][T11989] syzkaller1: entered allmulticast mode [ 519.245971][T12043] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1747'. [ 519.371813][T12052] program syz.2.1749 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.737254][T12054] SELinux: security_context_str_to_sid () failed with errno=-22 [ 519.979972][T12074] hid-generic 0003:0627:0001.0001: pid 12074 passed too short report [ 520.193547][T12099] overlayfs: failed to clone upperpath [ 520.196531][T12099] overlayfs: failed to clone lowerpath [ 520.349107][T12117] bond3: option mode: invalid value (8) [ 520.352898][T12117] bond3 (unregistering): Released all slaves [ 520.738434][ T40] audit: type=1400 audit(516.596:28638): avc: denied { map } for pid=12157 comm="syz.2.1780" path="/dev/ptmx" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 520.745928][ T40] audit: type=1400 audit(516.596:28639): avc: denied { execute } for pid=12157 comm="syz.2.1780" path="/dev/ptmx" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 520.782091][T12163] fuse: Unknown parameter 'ethtool' [ 521.105199][ T40] audit: type=1400 audit(516.951:28640): avc: denied { getopt } for pid=12203 comm="syz.2.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 521.217007][T12224] gtp0: entered promiscuous mode [ 521.500172][ T6048] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 521.500593][ T1347] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 521.671280][ T6048] usb 5-1: Using ep0 maxpacket: 16 [ 521.672593][ T1347] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 521.675722][ T6048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.676163][ T1347] usb 7-1: config 0 has no interface number 0 [ 521.676188][ T1347] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 521.676200][ T1347] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 521.680882][ T6048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.683591][ T1347] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 521.683613][ T1347] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 521.683628][ T1347] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 521.683641][ T1347] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 521.683662][ T1347] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 521.683674][ T1347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.684986][ T1347] usb 7-1: config 0 descriptor?? [ 521.688322][ T6048] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 521.693102][T12226] raw-gadget.7 gadget.2: fail, usb_ep_enable returned -22 [ 521.695985][ T6048] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 521.701186][T12226] raw-gadget.7 gadget.2: fail, usb_ep_enable returned -22 [ 521.705550][ T6048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.718902][ T1347] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 521.725251][ T6048] usb 5-1: config 0 descriptor?? [ 521.799412][T12241] Mount JFS Failure: -22 [ 521.804439][T12240] __nla_validate_parse: 1 callbacks suppressed [ 521.804510][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1800'. [ 521.936742][ T6062] usb 7-1: USB disconnect, device number 19 [ 521.949003][ T6062] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 521.952444][T12249] pimreg3: entered allmulticast mode [ 522.001692][T12249] 9pnet_fd: Insufficient options for proto=fd [ 522.187373][ T6048] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 522.190280][ T6048] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 522.194061][ T6048] shield 0003:0955:7214.0008: item fetching failed at offset 2/5 [ 522.199050][ T6048] shield 0003:0955:7214.0008: Parse failed [ 522.201485][ T6048] shield 0003:0955:7214.0008: probe with driver shield failed with error -22 [ 522.244504][T12265] QAT: Invalid ioctl -2145626081 [ 522.398067][T12224] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1795'. [ 522.406987][ T6449] usb 5-1: USB disconnect, device number 9 [ 522.647673][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1815'. [ 522.711438][T12294] netlink: 'syz.4.1816': attribute type 10 has an invalid length. [ 522.715543][T12294] wlan1: mtu less than device minimum [ 522.717935][T12294] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 522.752673][T12296] netlink: 'syz.4.1817': attribute type 10 has an invalid length. [ 522.756050][T12296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1817'. [ 522.759959][T12296] batadv0: entered promiscuous mode [ 522.762345][T12296] batadv0: entered allmulticast mode [ 522.764772][T12296] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 524.042529][ T40] audit: type=1400 audit(519.692:28641): avc: denied { ioctl } for pid=12314 comm="syz.4.1825" path="socket:[43697]" dev="sockfs" ino=43697 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 524.060491][ T40] audit: type=1400 audit(519.711:28642): avc: denied { ioctl } for pid=12314 comm="syz.4.1825" path="socket:[43699]" dev="sockfs" ino=43699 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 524.209910][T12340] netlink: 'syz.4.1832': attribute type 18 has an invalid length. [ 524.213277][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 524.217787][T12340] netlink: 'syz.4.1832': attribute type 18 has an invalid length. [ 524.220399][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 524.321178][T12347] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1833'. [ 524.435126][ T40] audit: type=1400 audit(520.057:28643): avc: denied { getopt } for pid=12362 comm="syz.4.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 524.470422][T12365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1842'. [ 524.530033][T12367] xt_hashlimit: overflow, rate too high: 0 [ 524.537768][T12370] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 524.540579][T12370] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 524.544105][T12370] vhci_hcd vhci_hcd.0: Device attached [ 524.550019][T12370] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 524.552890][T12370] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 524.556291][T12370] vhci_hcd vhci_hcd.0: Device attached [ 524.559124][T12373] vhci_hcd: connection closed [ 524.559201][T12371] vhci_hcd: connection closed [ 524.561001][ T6064] vhci_hcd: stop threads [ 524.564064][ T6064] vhci_hcd: release socket [ 524.565991][ T6064] vhci_hcd: disconnect device [ 524.570367][ T6064] vhci_hcd: stop threads [ 524.572226][ T6064] vhci_hcd: release socket [ 524.574193][ T6064] vhci_hcd: disconnect device [ 524.616030][T12378] ./file0: Can't lookup blockdev [ 524.643266][ T74] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 524.662060][T12380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1847'. [ 524.667636][T12380] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12380 comm=syz.4.1847 [ 524.713005][T12382] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1848'. [ 524.796885][T12384] fuse: Bad value for 'rootmode' [ 524.825178][ T74] usb 7-1: Using ep0 maxpacket: 32 [ 524.828060][ T74] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 524.830779][ T74] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.835036][ T74] usb 7-1: config 0 descriptor?? [ 524.840133][ T74] as10x_usb: device has been detected [ 524.842657][ T74] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 524.854170][ T74] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 524.863977][ T74] as10x_usb: error during firmware upload part1 [ 524.866243][ T74] Registered device nBox DVB-T Dongle [ 525.057868][ T6449] usb 7-1: USB disconnect, device number 20 [ 525.075976][ T6449] Unregistered device nBox DVB-T Dongle [ 525.077500][ T6449] as10x_usb: device has been disconnected [ 525.222063][T12342] 9pnet_fd: p9_fd_create_tcp (12342): problem connecting socket to 127.0.0.1 [ 525.264521][T12391] kvm: user requested TSC rate below hardware speed [ 525.264676][T12392] kvm: user requested TSC rate below hardware speed [ 525.689694][T12415] policy can only be matched on NF_INET_PRE_ROUTING [ 525.689711][T12415] unable to load match [ 525.813001][T12429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=637 sclass=netlink_route_socket pid=12429 comm=syz.2.1863 [ 525.823356][T12429] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 525.827949][T12429] qnx6: wrong signature (magic) in superblock #1. [ 525.830916][T12429] qnx6: unable to read the first superblock [ 525.935501][T12446] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 525.988457][T12451] netlink: 'syz.2.1871': attribute type 6 has an invalid length. [ 526.070082][ T40] audit: type=1400 audit(521.591:28644): avc: denied { name_bind } for pid=12461 comm="syz.2.1874" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 526.071579][T12468] overlayfs: cannot append lower layer [ 526.613757][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.616876][T12493] IPv6: NLM_F_CREATE should be set when creating new route [ 526.619292][T12493] IPv6: NLM_F_CREATE should be set when creating new route [ 526.622535][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.625034][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.627454][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.629867][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.632620][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.635245][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.637694][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.640114][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.642644][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.645209][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.647597][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.650271][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.655623][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.658038][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.660288][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.662575][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.665154][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.667420][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.669679][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.671935][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.674234][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.676769][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.679044][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.681348][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.683647][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.685960][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.688239][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.690544][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.692815][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.695128][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.697968][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.700241][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.702506][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.704802][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.707162][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.709466][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.711805][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.714138][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.716548][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.718968][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.721343][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.723697][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.726023][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.728587][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.730915][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.733282][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.735715][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.738079][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.740460][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.742733][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.744988][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.747220][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.749521][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.751833][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.754043][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.756261][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.758562][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.761508][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.763754][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.766011][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.768294][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.770741][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.773145][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.775483][T12493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.811123][ T40] audit: type=1400 audit(522.283:28645): avc: denied { cmd } for pid=12496 comm="syz.4.1885" path="socket:[49283]" dev="sockfs" ino=49283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 526.817971][ T40] audit: type=1400 audit(522.283:28646): avc: denied { name_bind } for pid=12496 comm="syz.4.1885" path="socket:[49287]" dev="sockfs" ino=49287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 527.479114][ T6281] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 527.482378][ T6281] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 527.485389][ T6281] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 527.488607][ T6281] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 527.517505][T12509] netlink: 'syz.4.1889': attribute type 3 has an invalid length. [ 528.759632][T12534] __nla_validate_parse: 70 callbacks suppressed [ 528.759650][T12534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1897'. [ 528.766057][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1897'. [ 529.109580][T12550] /dev/sr0: Can't open blockdev [ 529.285688][T12558] netlink: 75 bytes leftover after parsing attributes in process `syz.4.1903'. [ 529.319781][T12558] can: request_module (can-proto-0) failed. [ 529.346412][ T40] audit: type=1400 audit(524.650:28647): avc: denied { ioctl } for pid=12560 comm="syz.4.1904" path="socket:[48413]" dev="sockfs" ino=48413 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 529.405873][T12569] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1906'. [ 529.511690][T12580] SELinux: policydb version -1695576906 does not match my version range 15-35 [ 529.514369][T12580] SELinux: failed to load policy [ 530.212081][T12623] overlayfs: failed to resolve './bus': -2 [ 530.222850][ T74] libceph: connect (1)[c::]:6789 error -13 [ 530.226296][ T74] libceph: mon0 (1)[c::]:6789 connect error [ 530.330083][ T40] audit: type=1400 audit(525.567:28648): avc: denied { shutdown } for pid=12625 comm="syz.4.1925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 530.366941][T12632] netlink: 'syz.4.1925': attribute type 10 has an invalid length. [ 530.369486][T12632] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1925'. [ 530.377185][T12632] team0: entered promiscuous mode [ 530.379738][T12632] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.502139][ T74] libceph: connect (1)[c::]:6789 error -13 [ 530.504153][ T74] libceph: mon0 (1)[c::]:6789 connect error [ 530.595466][T12642] sd 0:0:0:0: PR command failed: 1026 [ 530.597256][T12642] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 530.600107][T12642] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 530.917075][T12667] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3661369084 (58581905344 ns) > initial count (6261409168 ns). Using initial count to start timer. [ 530.955966][T12670] input: syz0 as /devices/virtual/input/input20 [ 531.047188][ T74] libceph: connect (1)[c::]:6789 error -13 [ 531.049224][ T74] libceph: mon0 (1)[c::]:6789 connect error [ 531.108644][T12626] ceph: No mds server is up or the cluster is laggy [ 531.193355][T12681] netlink: 'syz.4.1938': attribute type 1 has an invalid length. [ 531.278525][T12681] bond3: (slave geneve3): making interface the new active one [ 531.284034][T12681] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 531.287818][ T6279] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.291003][ T6279] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.294001][ T6279] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.296637][ T6279] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 531.343408][T12689] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 531.355428][T12689] block device autoloading is deprecated and will be removed. [ 531.355550][T12693] Invalid ELF header type: 2 != 1 [ 531.404325][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 531.407678][T12698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12698 comm=syz.2.1944 [ 531.444659][T12685] md: superblock version 1702065510 not known [ 531.446960][T12685] md: couldn't set array info. -22 [ 531.451198][T12689] blkio.reset_stats is deprecated [ 531.498970][ T40] audit: type=1400 audit(526.670:28649): avc: denied { read } for pid=12704 comm="syz.2.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 531.517546][ T6449] IPVS: starting estimator thread 0... [ 531.610497][T12714] netlink: 'syz.2.1949': attribute type 14 has an invalid length. [ 531.624206][T12711] IPVS: using max 46 ests per chain, 110400 per kthread [ 531.679960][T12719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=12719 comm=syz.2.1950 [ 531.826648][T12729] IPVS: set_ctl: invalid protocol: 94 172.30.0.1:20002 [ 531.829160][T12729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45072 sclass=netlink_route_socket pid=12729 comm=syz.0.1952 [ 531.862038][T12734] ip6tnl2: entered promiscuous mode [ 531.863812][T12734] ip6tnl2: entered allmulticast mode [ 531.900383][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'. [ 532.378202][T12760] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.1962'. [ 532.428995][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1965'. [ 532.431764][T12771] netlink: 'syz.2.1965': attribute type 11 has an invalid length. [ 532.434555][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1965'. [ 532.437892][T12771] netlink: 'syz.2.1965': attribute type 11 has an invalid length. [ 532.557272][T12788] kvm: user requested TSC rate below hardware speed [ 532.562187][T12789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 532.569597][T12789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 532.575253][T12789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 532.581741][T12789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 532.587868][T12789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 532.595307][T12789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 532.603929][T12789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 532.605246][T12793] overlayfs: failed to resolve './file0': -2 [ 532.609798][T12789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 532.617435][T12789] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 532.892595][ T40] audit: type=1326 audit(527.970:28650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12827 comm="syz.0.1982" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb93eb8eec9 code=0x0 [ 533.143066][ T40] audit: type=1400 audit(528.204:28651): avc: denied { lock } for pid=12845 comm="syz.2.1987" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 533.735970][T12863] netlink: 'syz.4.1993': attribute type 32 has an invalid length. [ 533.939361][ T40] audit: type=1400 audit(528.953:28652): avc: denied { execute } for pid=12870 comm="syz.0.1996" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 534.426093][ T40] audit: type=1326 audit(529.411:28653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12684 comm="syz.3.1939" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51c18eec9 code=0x7fc00000 [ 534.521426][T12863] bond4: option coupled_control: invalid value (128) [ 534.525723][ T40] audit: type=1400 audit(529.495:28654): avc: denied { getopt } for pid=12882 comm="syz.3.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 534.526401][T12863] bond4 (unregistering): Released all slaves [ 534.566563][ T40] audit: type=1400 audit(529.542:28655): avc: denied { read } for pid=12887 comm="syz.3.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 534.871430][ T5991] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 534.876899][ T5991] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 534.880426][ T5991] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 534.883967][ T5991] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 534.886790][ T5991] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 534.896903][ T5292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 534.900858][ T5292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 534.903220][ T5292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 534.905748][ T5292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 534.908635][ T5292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 534.958241][T12912] __nla_validate_parse: 4 callbacks suppressed [ 534.958253][T12912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2007'. [ 534.988402][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2007'. [ 535.035299][T12903] chnl_net:caif_netlink_parms(): no params data found [ 535.073874][T12383] syz_tun (unregistering): left promiscuous mode [ 535.120965][T12903] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.123221][T12903] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.125413][T12903] bridge_slave_0: entered allmulticast mode [ 535.128093][T12903] bridge_slave_0: entered promiscuous mode [ 535.131265][T12903] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.133545][T12903] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.135737][T12903] bridge_slave_1: entered allmulticast mode [ 535.138273][T12903] bridge_slave_1: entered promiscuous mode [ 535.163006][T12922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20224 sclass=netlink_route_socket pid=12922 comm=syz.0.2008 [ 535.175135][T12903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.179850][T12903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.215044][T12903] team0: Port device team_slave_0 added [ 535.218368][T12903] team0: Port device team_slave_1 added [ 535.253438][T12903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.255629][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.263706][T12903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.267901][T12903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.270267][T12903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.278084][T12903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.323021][T12924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2009'. [ 535.327020][T12924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2009'. [ 535.333350][T12924] gretap0: entered promiscuous mode [ 535.336201][T12924] gretap0: left promiscuous mode [ 535.343498][T12903] hsr_slave_0: entered promiscuous mode [ 535.347132][T12903] hsr_slave_1: entered promiscuous mode [ 535.349217][T12903] debugfs: 'hsr0' already exists in 'hsr' [ 535.350917][T12903] Cannot create hsr debugfs directory [ 535.451015][T12903] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.454623][T12903] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 535.457609][T12903] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 535.463230][ T40] audit: type=1400 audit(530.374:28656): avc: denied { setopt } for pid=12926 comm="syz.2.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 535.521418][T12932] SELinux: failed to load policy [ 535.527405][T12932] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2011'. [ 535.530259][T12932] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2011'. [ 535.532934][T12932] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2011'. [ 535.558084][T12903] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.561547][T12903] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 535.564614][T12903] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 535.643816][T12903] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.646839][T12903] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 535.649914][T12903] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 535.673727][T12943] loop6: detected capacity change from 0 to 524287999 [ 535.680276][T12943] Buffer I/O error on dev loop6, logical block 0, async page read [ 535.682860][T12943] Buffer I/O error on dev loop6, logical block 0, async page read [ 535.685608][T12943] Buffer I/O error on dev loop6, logical block 0, async page read [ 535.689052][T12943] Buffer I/O error on dev loop6, logical block 0, async page read [ 535.692643][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 535.695695][T12943] Buffer I/O error on dev loop6, logical block 0, async page read [ 535.701654][T12943] Buffer I/O error on dev loop6, logical block 0, async page read [ 535.705025][T12943] Buffer I/O error on dev loop6, logical block 0, async page read [ 535.709715][T12943] Buffer I/O error on dev loop6, logical block 0, async page read [ 535.710750][T12903] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.713027][T12943] Buffer I/O error on dev loop6, logical block 0, async page read [ 535.715982][T12903] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 535.721895][T12903] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 535.794547][ T40] audit: type=1400 audit(530.692:28657): avc: denied { write } for pid=12949 comm="syz.2.2017" name="001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 535.807332][ T40] audit: type=1400 audit(530.702:28658): avc: denied { getopt } for pid=12949 comm="syz.2.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 535.837578][T12903] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 535.847695][T12903] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 535.853988][T12903] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 535.873192][T12903] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 535.880967][T12955] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2020'. [ 535.922103][T12903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.931474][T12903] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.940007][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.942275][ T6267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.958682][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.961012][ T6267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.112506][T12903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.121209][T12973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2022'. [ 536.140881][ T40] audit: type=1400 audit(531.011:28659): avc: denied { mounton } for pid=12992 comm="syz.2.2028" path="/491/file0" dev="tmpfs" ino=2677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 536.247099][T12903] veth0_vlan: entered promiscuous mode [ 536.251474][T12903] veth1_vlan: entered promiscuous mode [ 536.272119][T12903] veth0_macvtap: entered promiscuous mode [ 536.276369][T12903] veth1_macvtap: entered promiscuous mode [ 536.284587][T12903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.297940][T12903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.304891][ T6268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.307754][ T6268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.322812][ T6268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.327300][ T6268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.369929][ T6261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.372821][ T6261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.382990][T13009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2031'. [ 536.402970][ T6449] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 536.409426][ T6261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.416316][ T6261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.541607][T13022] overlayfs: missing 'lowerdir' [ 536.579952][ T6449] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 536.582753][ T6449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.585485][ T6449] usb 5-1: Product: syz [ 536.586916][ T6449] usb 5-1: Manufacturer: syz [ 536.588439][ T6449] usb 5-1: SerialNumber: syz [ 536.590347][T13030] autofs: Unknown parameter './file0' [ 536.593602][ T6449] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 536.616503][ T6449] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 536.752075][T13037] sp0: Synchronizing with TNC [ 536.773047][T13043] netlink: 'syz.4.2039': attribute type 1 has an invalid length. [ 536.840866][T12999] random: crng reseeded on system resumption [ 536.841251][ T40] audit: type=1400 audit(531.656:28660): avc: denied { write } for pid=12998 comm="syz.0.2029" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 536.849340][ T40] audit: type=1400 audit(531.656:28661): avc: denied { ioctl } for pid=12998 comm="syz.0.2029" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 536.861581][T12999] netlink: 'syz.0.2029': attribute type 2 has an invalid length. [ 536.866773][T12999] nbd: must specify a device to reconfigure [ 536.881197][ T34] usb 5-1: USB disconnect, device number 10 [ 537.010148][T13059] loop4: detected capacity change from 0 to 2560 [ 537.017898][ T6006] ldm_validate_partition_table(): Disk read failed. [ 537.020127][ T6006] Dev loop4: unable to read RDB block 0 [ 537.022093][ T6006] loop4: unable to read partition table [ 537.038136][ T5341] ldm_validate_partition_table(): Disk read failed. [ 537.040417][ T5341] Dev loop4: unable to read RDB block 0 [ 537.042330][ T5341] loop4: unable to read partition table [ 537.108617][ T5292] Bluetooth: hci4: command tx timeout [ 537.490411][ T40] audit: type=1400 audit(532.273:28662): avc: denied { create } for pid=13073 comm="syz.2.2049" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 537.717971][ T6449] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 537.720942][ T6449] ath9k_htc: Failed to initialize the device [ 537.724445][ T34] usb 5-1: ath9k_htc: USB layer deinitialized [ 537.850184][T13094] IPVS: set_ctl: invalid protocol: 8 172.30.1.4:20003 [ 538.045508][T13101] tmpfs: Cannot change global quota limit on remount [ 538.238872][ T40] audit: type=1400 audit(532.966:28663): avc: denied { mount } for pid=13117 comm="syz.4.2064" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 538.247169][ T40] audit: type=1400 audit(532.966:28664): avc: denied { mounton } for pid=13117 comm="syz.4.2064" path="/12/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 538.255570][ T40] audit: type=1400 audit(532.994:28665): avc: denied { unmount } for pid=12903 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 538.302159][T13122] kvm: kvm [13120]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x40000040) = 0x0 [ 538.347826][T13122] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3661369084 (58581905344 ns) > initial count (6261409168 ns). Using initial count to start timer. [ 538.360899][T13122] kvm: kvm [13120]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 538.364223][T13122] kvm: kvm [13120]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 538.487684][T13133] pim6reg: left allmulticast mode [ 538.723535][T13149] pimreg: entered allmulticast mode [ 538.724806][T13147] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 538.729876][T13147] overlayfs: failed to set xattr on upper [ 538.734393][T13147] overlayfs: ...falling back to redirect_dir=nofollow. [ 538.736836][T13147] overlayfs: ...falling back to index=off. [ 538.738976][T13147] overlayfs: ...falling back to uuid=null. [ 538.741272][T13147] overlayfs: ...falling back to xino=off. [ 538.851391][ T40] audit: type=1400 audit(533.536:28666): avc: denied { map } for pid=13159 comm="syz.2.2078" path="socket:[54361]" dev="sockfs" ino=54361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 538.983552][T13170] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 538.986214][T13170] overlayfs: missing 'lowerdir' [ 538.991831][T13158] sch_tbf: peakrate 3 is lower than or equals to rate 3 ! [ 539.005986][T13158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=13158 comm=syz.0.2077 [ 539.016611][T13173] dlm: no locking on control device [ 539.274728][T13192] comedi: valid board names for 8255 driver are: [ 539.276776][T13192] 8255 [ 539.277714][T13192] comedi: valid board names for vmk80xx driver are: [ 539.280483][T13192] vmk80xx [ 539.281493][T13192] comedi: valid board names for usbduxsigma driver are: [ 539.283689][T13192] usbduxsigma [ 539.284810][T13192] comedi: valid board names for usbduxfast driver are: [ 539.286939][T13192] usbduxfast [ 539.288054][T13192] comedi: valid board names for usbdux driver are: [ 539.290614][T13192] usbdux [ 539.291569][T13192] comedi: valid board names for ni6501 driver are: [ 539.293569][T13192] ni6501 [ 539.294503][T13192] comedi: valid board names for dt9812 driver are: [ 539.296550][T13192] dt9812 [ 539.297465][T13192] comedi: valid board names for ni_labpc_cs driver are: [ 539.299618][T13192] ni_labpc_cs [ 539.301529][T13192] comedi: valid board names for ni_daq_700 driver are: [ 539.303922][T13192] ni_daq_700 [ 539.305040][T13192] comedi: valid board names for labpc_pci driver are: [ 539.307768][T13192] labpc_pci [ 539.309165][T13192] comedi: valid board names for adl_pci9118 driver are: [ 539.313171][T13192] pci9118dg [ 539.314277][T13192] pci9118hg [ 539.315353][T13192] pci9118hr [ 539.316446][T13192] comedi: valid board names for 8255_pci driver are: [ 539.318345][T13192] 8255_pci [ 539.319346][T13192] comedi: valid board names for s526 driver are: [ 539.321334][T13192] s526 [ 539.322528][T13192] comedi: valid board names for multiq3 driver are: [ 539.324676][T13192] multiq3 [ 539.325676][T13192] comedi: valid board names for pcmuio driver are: [ 539.327753][T13192] pcmuio48 [ 539.328839][T13192] pcmuio96 [ 539.330398][T13192] comedi: valid board names for pcmmio driver are: [ 539.333443][ T5292] Bluetooth: hci4: command tx timeout [ 539.335616][T13192] pcmmio [ 539.336560][T13192] comedi: valid board names for pcmda12 driver are: [ 539.338588][T13192] pcmda12 [ 539.339567][T13192] comedi: valid board names for pcmad driver are: [ 539.341527][T13192] pcmad12 [ 539.342597][T13192] pcmad16 [ 539.343714][T13192] comedi: valid board names for ni_labpc driver are: [ 539.345779][T13192] lab-pc-1200 [ 539.346875][T13192] lab-pc-1200ai [ 539.348063][T13192] lab-pc+ [ 539.349051][T13192] comedi: valid board names for atmio16 driver are: [ 539.350996][T13192] atmio16 [ 539.352016][T13192] atmio16d [ 539.353063][T13192] comedi: valid board names for ni_at_ao driver are: [ 539.355461][T13192] at-ao-6 [ 539.356484][T13192] at-ao-10 [ 539.357481][T13192] comedi: valid board names for ni_at_a2150 driver are: [ 539.359545][T13192] ni_at_a2150 [ 539.360573][T13192] comedi: valid board names for adq12b driver are: [ 539.362590][T13192] adq12b [ 539.363566][T13192] comedi: valid board names for mpc624 driver are: [ 539.366028][T13192] mpc624 [ 539.367049][T13192] comedi: valid board names for c6xdigio driver are: [ 539.369206][T13192] c6xdigio [ 539.370210][T13192] comedi: valid board names for aio_iiro_16 driver are: [ 539.372341][T13192] aio_iiro_16 [ 539.373398][T13192] comedi: valid board names for aio_aio12_8 driver are: [ 539.375922][T13192] aio_aio12_8 [ 539.377008][T13192] aio_ai12_8 [ 539.378066][T13192] aio_ao12_4 [ 539.379115][T13192] comedi: valid board names for fl512 driver are: [ 539.381071][T13192] fl512 [ 539.381994][T13192] comedi: valid board names for dmm32at driver are: [ 539.383971][T13192] dmm32at [ 539.384961][T13192] comedi: valid board names for dt282x driver are: [ 539.387349][T13192] dt2821 [ 539.388273][T13192] dt2821-f [ 539.389254][T13192] dt2821-g [ 539.390247][T13192] dt2823 [ 539.391155][T13192] dt2824-pgh [ 539.392194][T13192] dt2824-pgl [ 539.393224][T13192] dt2825 [ 539.394160][T13192] dt2827 [ 539.395121][T13192] dt2828 [ 539.396106][T13192] dt2829 [ 539.397534][T13192] dt21-ez [ 539.398653][T13192] dt23-ez [ 539.399707][T13192] dt24-ez [ 539.400749][T13192] dt24-ez-pgl [ 539.401917][T13192] comedi: valid board names for dt2817 driver are: [ 539.404074][T13192] dt2817 [ 539.405062][T13192] comedi: valid board names for dt2815 driver are: [ 539.408760][T13192] dt2815 [ 539.409768][T13192] comedi: valid board names for dt2814 driver are: [ 539.411882][T13192] dt2814 [ 539.412914][T13192] comedi: valid board names for dt2811 driver are: [ 539.415015][T13192] dt2811-pgh [ 539.416197][T13192] dt2811-pgl [ 539.417316][T13192] comedi: valid board names for dt2801 driver are: [ 539.419456][T13192] dt2801 [ 539.420400][T13192] comedi: valid board names for das6402 driver are: [ 539.422531][T13192] das6402-12 [ 539.423682][T13192] das6402-16 [ 539.424832][T13192] comedi: valid board names for das1800 driver are: [ 539.426974][T13192] das-1701st [ 539.428093][T13192] das-1701st-da [ 539.429406][T13192] das-1702st [ 539.430509][T13192] das-1702st-da [ 539.431692][T13192] das-1702hr [ 539.432793][T13192] das-1702hr-da [ 539.433977][T13192] das-1701ao [ 539.435105][T13192] das-1702ao [ 539.436288][T13192] das-1801st [ 539.437406][T13192] das-1801st-da [ 539.438584][T13192] das-1802st [ 539.439975][T13192] das-1802st-da [ 539.441150][T13192] das-1802hr [ 539.442310][T13192] das-1802hr-da [ 539.443514][T13192] das-1801hc [ 539.444543][T13192] das-1802hc [ 539.445911][T13192] das-1801ao [ 539.447299][T13192] das-1802ao [ 539.448594][T13192] comedi: valid board names for das800 driver are: [ 539.451015][T13192] das-800 [ 539.452037][T13192] cio-das800 [ 539.453088][T13192] das-801 [ 539.454069][T13192] cio-das801 [ 539.455159][T13192] das-802 [ 539.456165][T13192] cio-das802 [ 539.457424][T13192] cio-das802/16 [ 539.458697][T13192] comedi: valid board names for isa-das08 driver are: [ 539.460832][T13192] isa-das08 [ 539.461884][T13192] das08-pgm [ 539.462922][T13192] das08-pgh [ 539.463952][T13192] das08-pgl [ 539.464973][T13192] das08-aoh [ 539.466227][T13192] das08-aol [ 539.467249][T13192] das08-aom [ 539.468274][T13192] das08/jr-ao [ 539.469378][T13192] das08jr-16-ao [ 539.470551][T13192] pc104-das08 [ 539.471712][T13192] das08jr/16 [ 539.472744][T13192] comedi: valid board names for das16m1 driver are: [ 539.474723][T13192] das16m1 [ 539.475772][T13192] comedi: valid board names for dac02 driver are: [ 539.477689][T13192] dac02 [ 539.478607][T13192] comedi: valid board names for rti802 driver are: [ 539.480611][T13192] rti802 [ 539.481621][T13192] comedi: valid board names for rti800 driver are: [ 539.483779][T13192] rti800 [ 539.484725][T13192] rti815 [ 539.485685][T13192] comedi: valid board names for pcm3724 driver are: [ 539.487695][T13192] pcm3724 [ 539.488683][T13192] comedi: valid board names for pcl818 driver are: [ 539.490665][T13192] pcl818l [ 539.491658][T13192] pcl818h [ 539.492732][T13192] pcl818hd [ 539.493787][T13192] pcl818hg [ 539.494784][T13192] pcl818 [ 539.495646][T13192] pcl718 [ 539.496580][T13192] pcm3718 [ 539.497537][T13192] comedi: valid board names for pcl816 driver are: [ 539.499447][T13192] pcl816 [ 539.500344][T13192] pcl814b [ 539.501272][T13192] comedi: valid board names for pcl812 driver are: [ 539.503472][T13192] pcl812 [ 539.504369][T13192] pcl812pg [ 539.505395][T13192] acl8112pg [ 539.506400][T13192] acl8112dg [ 539.507367][T13192] acl8112hg [ 539.508438][T13192] a821pgl [ 539.509554][T13192] a821pglnda [ 539.510547][T13192] a821pgh [ 539.511492][T13192] a822pgl [ 539.512423][T13192] a822pgh [ 539.513405][T13192] a823pgl [ 539.514397][T13192] a823pgh [ 539.515390][T13192] pcl813 [ 539.516347][T13192] pcl813b [ 539.517260][T13192] acl8113 [ 539.518182][T13192] iso813 [ 539.519061][T13192] acl8216 [ 539.519992][T13192] a826pg [ 539.520871][T13192] comedi: valid board names for pcl730 driver are: [ 539.522778][T13192] pcl730 [ 539.523682][T13192] iso730 [ 539.524775][T13192] acl7130 [ 539.525746][T13192] pcm3730 [ 539.526663][T13192] pcl725 [ 539.527567][T13192] p8r8dio [ 539.528497][T13192] acl7225b [ 539.529493][T13192] p16r16dio [ 539.530452][T13192] pcl733 [ 539.531333][T13192] pcl734 [ 539.532253][T13192] opmm-1616-xt [ 539.533303][T13192] pearl-mm-p [ 539.534307][T13192] ir104-pbf [ 539.535492][T13192] comedi: valid board names for pcl726 driver are: [ 539.538573][T13192] pcl726 [ 539.540008][T13192] pcl727 [ 539.540941][T13192] pcl728 [ 539.542192][T13192] acl6126 [ 539.543529][T13192] acl6128 [ 539.544993][T13192] comedi: valid board names for pcl724 driver are: [ 539.547735][T13192] pcl724 [ 539.548927][T13192] pcl722 [ 539.549880][T13192] pcl731 [ 539.551158][T13192] acl7122 [ 539.552532][T13192] acl7124 [ 539.553750][T13192] pet48dio [ 539.554858][T13192] pcmio48 [ 539.556276][T13192] onyx-mm-dio [ 539.557466][T13192] comedi: valid board names for pcl711 driver are: [ 539.559959][T13192] pcl711 [ 539.561275][T13192] pcl711b [ 539.562621][T13192] acl8112hg [ 539.564013][T13192] acl8112dg [ 539.565443][T13192] comedi: valid board names for amplc_pc263 driver are: [ 539.568525][T13192] pc263 [ 539.569584][T13192] comedi: valid board names for amplc_pc236 driver are: [ 539.571772][T13192] pc36at [ 539.572719][T13192] comedi: valid board names for amplc_dio200 driver are: [ 539.574922][T13192] pc212e [ 539.575927][T13192] pc214e [ 539.576893][T13192] pc215e [ 539.577871][T13192] pc218e [ 539.578928][T13192] pc272e [ 539.579897][T13192] comedi: valid board names for comedi_parport driver are: [ 539.582300][T13192] comedi_parport [ 539.583490][T13192] comedi: valid board names for comedi_test driver are: [ 539.585695][T13192] comedi_test [ 539.586782][T13192] comedi: valid board names for comedi_bond driver are: [ 539.589308][T13192] comedi_bond [ 540.512089][T13229] 9pnet_fd: Insufficient options for proto=fd [ 540.925218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 540.946620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 541.010733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 541.137633][ T5292] Bluetooth: hci4: Unable to find connection for big 0x00 [ 541.143033][T13267] program syz.4.2111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.276760][T13289] pim6reg13: entered allmulticast mode [ 541.513001][ T157] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 541.566604][ T5292] Bluetooth: hci4: command tx timeout [ 541.636609][T13296] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 541.686018][ T157] usb 7-1: unable to get BOS descriptor or descriptor too short [ 541.689020][ T157] usb 7-1: not running at top speed; connect to a high speed hub [ 541.692344][ T157] usb 7-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 541.696767][ T157] usb 7-1: config 1 interface 0 has no altsetting 0 [ 541.700658][ T157] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 541.703509][ T157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.706243][ T157] usb 7-1: Product: syz [ 541.707563][ T157] usb 7-1: Manufacturer: syz [ 541.709003][ T157] usb 7-1: SerialNumber: syz [ 541.932083][ T157] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 541.937991][ T157] usb 7-1: USB disconnect, device number 21 [ 542.273644][T13302] ipip0: entered promiscuous mode [ 542.382137][T13309] __nla_validate_parse: 11 callbacks suppressed [ 542.382148][T13309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2121'. [ 542.591422][T13331] netlink: 'syz.2.2129': attribute type 4 has an invalid length. [ 542.610835][T13331] netlink: 'syz.2.2129': attribute type 4 has an invalid length. [ 542.862161][T13345] bridge8: entered promiscuous mode [ 542.863897][T13345] bridge8: entered allmulticast mode [ 543.279853][T13362] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 543.282309][T13362] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 543.286226][T13362] vhci_hcd vhci_hcd.0: Device attached [ 543.289354][T13363] vhci_hcd: connection closed [ 543.289661][ T6268] vhci_hcd: stop threads [ 543.292836][ T6268] vhci_hcd: release socket [ 543.294220][ T6268] vhci_hcd: disconnect device [ 543.312474][T13366] ubi31: attaching mtd0 [ 543.315301][T13366] ubi31: scanning is finished [ 543.316846][T13366] ubi31: empty MTD device detected [ 543.507849][T13366] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 543.779945][ T5292] Bluetooth: hci4: command tx timeout [ 543.912304][T13382] xt_connbytes: Forcing CT accounting to be enabled [ 543.955720][T13384] fuse: Unknown parameter '' [ 544.215076][ T6081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.217736][ T6081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.337558][T13413] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2156'. [ 544.495121][T13420] netlink: 'syz.0.2159': attribute type 25 has an invalid length. [ 544.624009][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 544.624026][ T40] audit: type=1400 audit(538.943:28688): avc: denied { name_connect } for pid=13432 comm="syz.0.2163" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 544.703314][T13439] bridge_slave_0: left allmulticast mode [ 544.705692][T13439] bridge_slave_0: left promiscuous mode [ 544.708546][T13439] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.709806][T13435] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2164'. [ 544.718415][T13439] bond0: (slave bond_slave_0): Releasing backup interface [ 544.725818][T13439] bond0: (slave bond_slave_1): Releasing backup interface [ 544.733852][T13439] team0: Port device team_slave_0 removed [ 544.742868][T13439] team0: Port device team_slave_1 removed [ 544.746054][T13439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.748906][T13439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.753925][T13439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.756872][T13439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.761414][T13439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 544.827168][T13450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2169'. [ 544.979621][T13476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2176'. [ 544.983776][T13476] : renamed from vlan0 [ 545.169763][T13490] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2180'. [ 545.172722][T13490] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2180'. [ 545.306892][T13490] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2180'. [ 545.310785][T13490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2180'. [ 545.422453][T13505] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 545.424991][T13507] syz.3.2184: calling unsupported SCSI_IOCTL_SEND_COMMAND [ 545.427142][ T40] audit: type=1400 audit(539.691:28689): avc: denied { read append } for pid=13504 comm="syz.3.2184" name="2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 545.427185][ T40] audit: type=1400 audit(539.691:28690): avc: denied { open } for pid=13504 comm="syz.3.2184" path="/dev/bsg/2:0:0:0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 545.427611][T13505] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 545.456020][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2186'. [ 545.538091][ T40] audit: type=1400 audit(539.803:28691): avc: denied { prog_load } for pid=13520 comm="syz.2.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 545.598399][T13528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=212 sclass=netlink_route_socket pid=13528 comm=syz.2.2192 [ 545.659802][ T40] audit: type=1400 audit(539.906:28692): avc: denied { prog_run } for pid=13533 comm="syz.2.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 545.666731][ T40] audit: type=1400 audit(539.916:28693): avc: denied { map_create } for pid=13533 comm="syz.2.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 545.672826][ T40] audit: type=1400 audit(539.916:28694): avc: denied { map_read map_write } for pid=13533 comm="syz.2.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 545.722472][ T40] audit: type=1400 audit(539.972:28695): avc: denied { read } for pid=13542 comm="syz.2.2196" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 545.732085][ T40] audit: type=1400 audit(539.972:28696): avc: denied { open } for pid=13542 comm="syz.2.2196" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 545.732129][ T40] audit: type=1400 audit(539.972:28697): avc: denied { ioctl } for pid=13542 comm="syz.2.2196" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 545.779751][T13551] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 545.817137][T13560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.821019][T13560] batadv_slave_0: entered promiscuous mode [ 546.451243][T13591] netlink: 'syz.2.2209': attribute type 10 has an invalid length. [ 546.677660][T13600] tmpfs: Unknown parameter 'mpl' [ 547.182162][ T157] Process accounting resumed [ 547.235407][T13614] mkiss: ax0: crc mode is auto. [ 547.287029][ T6088] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 547.469396][ T6088] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 547.472027][ T6088] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 547.474793][ T6088] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 547.479895][ T6088] usb 7-1: config 1 has no interface number 0 [ 547.482426][ T6088] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 547.487064][ T6088] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 547.493279][ T6088] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 547.497028][ T6088] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.504802][ T6088] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 547.569137][T13632] team0: Device gtp0 is of different type [ 548.258812][ T34] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 548.288506][T13669] tmpfs: Group quota inode hardlimit too large. [ 548.421106][ T34] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 548.424748][ T34] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 548.428900][ T34] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 548.432953][ T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 548.437433][ T34] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 548.443620][ T34] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 548.447347][ T34] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 548.450608][ T34] usb 9-1: Product: syz [ 548.452467][ T34] usb 9-1: Manufacturer: syz [ 548.462380][ T34] cdc_wdm 9-1:1.0: skipping garbage [ 548.464610][ T34] cdc_wdm 9-1:1.0: skipping garbage [ 548.469276][ T34] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 548.471755][ T34] cdc_wdm 9-1:1.0: Unknown control protocol [ 548.728822][T13687] __nla_validate_parse: 7 callbacks suppressed [ 548.728840][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2229'. [ 548.784293][ C3] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 548.908776][T13694] netlink: 'syz.3.2239': attribute type 5 has an invalid length. [ 549.020789][T13700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2242'. [ 549.054227][T13710] comedi: valid board names for 8255 driver are: [ 549.056356][T13710] 8255 [ 549.057303][T13710] comedi: valid board names for vmk80xx driver are: [ 549.059413][T13710] vmk80xx [ 549.060477][T13710] comedi: valid board names for usbduxsigma driver are: [ 549.062896][T13710] usbduxsigma [ 549.064043][T13710] comedi: valid board names for usbduxfast driver are: [ 549.066181][T13710] usbduxfast [ 549.067273][T13710] comedi: valid board names for usbdux driver are: [ 549.069463][T13710] usbdux [ 549.070496][T13710] comedi: valid board names for ni6501 driver are: [ 549.074610][T13710] ni6501 [ 549.075675][T13710] comedi: valid board names for dt9812 driver are: [ 549.077752][T13710] dt9812 [ 549.078759][T13710] comedi: valid board names for ni_labpc_cs driver are: [ 549.081147][T13710] ni_labpc_cs [ 549.082611][T13710] comedi: valid board names for ni_daq_700 driver are: [ 549.084788][T13710] ni_daq_700 [ 549.085773][T13710] comedi: valid board names for labpc_pci driver are: [ 549.087700][T13710] labpc_pci [ 549.088768][T13710] comedi: valid board names for adl_pci9118 driver are: [ 549.090673][T13710] pci9118dg [ 549.091670][T13710] pci9118hg [ 549.092678][T13710] pci9118hr [ 549.093636][T13710] comedi: valid board names for 8255_pci driver are: [ 549.095798][T13710] 8255_pci [ 549.096945][T13710] comedi: valid board names for s526 driver are: [ 549.098970][T13710] s526 [ 549.099931][T13710] comedi: valid board names for multiq3 driver are: [ 549.102047][T13710] multiq3 [ 549.103085][T13710] comedi: valid board names for pcmuio driver are: [ 549.105204][T13710] pcmuio48 [ 549.106267][T13710] pcmuio96 [ 549.107344][T13710] comedi: valid board names for pcmmio driver are: [ 549.109447][T13710] pcmmio [ 549.110434][T13710] comedi: valid board names for pcmda12 driver are: [ 549.112572][T13710] pcmda12 [ 549.113606][T13710] comedi: valid board names for pcmad driver are: [ 549.115756][T13710] pcmad12 [ 549.116808][T13710] pcmad16 [ 549.117894][T13710] comedi: valid board names for ni_labpc driver are: [ 549.120028][T13710] lab-pc-1200 [ 549.121165][T13710] lab-pc-1200ai [ 549.122357][T13710] lab-pc+ [ 549.123391][T13710] comedi: valid board names for atmio16 driver are: [ 549.125503][T13710] atmio16 [ 549.126529][T13710] atmio16d [ 549.127690][T13710] comedi: valid board names for ni_at_ao driver are: [ 549.129972][T13710] at-ao-6 [ 549.131044][T13710] at-ao-10 [ 549.132205][T13710] comedi: valid board names for ni_at_a2150 driver are: [ 549.134494][T13710] ni_at_a2150 [ 549.135919][T13710] comedi: valid board names for adq12b driver are: [ 549.138149][T13710] adq12b [ 549.139135][T13710] comedi: valid board names for mpc624 driver are: [ 549.141222][T13710] mpc624 [ 549.142207][T13710] comedi: valid board names for c6xdigio driver are: [ 549.144395][T13710] c6xdigio [ 549.145449][T13710] comedi: valid board names for aio_iiro_16 driver are: [ 549.147690][T13710] aio_iiro_16 [ 549.148826][T13710] comedi: valid board names for aio_aio12_8 driver are: [ 549.151003][T13710] aio_aio12_8 [ 549.152280][T13710] aio_ai12_8 [ 549.153456][T13710] aio_ao12_4 [ 549.154586][T13710] comedi: valid board names for fl512 driver are: [ 549.156612][T13710] fl512 [ 549.157826][T13710] comedi: valid board names for dmm32at driver are: [ 549.160156][T13710] dmm32at [ 549.161205][T13710] comedi: valid board names for dt282x driver are: [ 549.163306][T13710] dt2821 [ 549.164327][T13710] dt2821-f [ 549.165437][T13710] dt2821-g [ 549.166530][T13710] dt2823 [ 549.167596][T13710] dt2824-pgh [ 549.168669][T13710] dt2824-pgl [ 549.169731][T13710] dt2825 [ 549.170695][T13710] dt2827 [ 549.171762][T13710] dt2828 [ 549.172742][T13710] dt2829 [ 549.173721][T13710] dt21-ez [ 549.174790][T13710] dt23-ez [ 549.175830][T13710] dt24-ez [ 549.176861][T13710] dt24-ez-pgl [ 549.177993][T13710] comedi: valid board names for dt2817 driver are: [ 549.180302][T13710] dt2817 [ 549.181383][T13710] comedi: valid board names for dt2815 driver are: [ 549.183707][T13710] dt2815 [ 549.184744][T13710] comedi: valid board names for dt2814 driver are: [ 549.186790][T13710] dt2814 [ 549.187797][T13710] comedi: valid board names for dt2811 driver are: [ 549.189896][T13710] dt2811-pgh [ 549.190928][T13710] dt2811-pgl [ 549.191997][T13710] comedi: valid board names for dt2801 driver are: [ 549.193948][T13710] dt2801 [ 549.194914][T13710] comedi: valid board names for das6402 driver are: [ 549.196979][T13710] das6402-12 [ 549.198203][T13710] das6402-16 [ 549.199299][T13710] comedi: valid board names for das1800 driver are: [ 549.201516][T13710] das-1701st [ 549.202543][T13710] das-1701st-da [ 549.203659][T13710] das-1702st [ 549.204672][T13710] das-1702st-da [ 549.205799][T13710] das-1702hr [ 549.206872][T13710] das-1702hr-da [ 549.208071][T13710] das-1701ao [ 549.209173][T13710] das-1702ao [ 549.210316][T13710] das-1801st [ 549.211446][T13710] das-1801st-da [ 549.212665][T13710] das-1802st [ 549.213848][T13710] das-1802st-da [ 549.215121][T13710] das-1802hr [ 549.216353][T13710] das-1802hr-da [ 549.217581][T13710] das-1801hc [ 549.218727][T13710] das-1802hc [ 549.219876][T13710] das-1801ao [ 549.221007][T13710] das-1802ao [ 549.222131][T13710] comedi: valid board names for das800 driver are: [ 549.224172][T13710] das-800 [ 549.225221][T13710] cio-das800 [ 549.226330][T13710] das-801 [ 549.227380][T13710] cio-das801 [ 549.228534][T13710] das-802 [ 549.229598][T13710] cio-das802 [ 549.230728][T13710] cio-das802/16 [ 549.232004][T13710] comedi: valid board names for isa-das08 driver are: [ 549.234151][T13710] isa-das08 [ 549.235331][T13710] das08-pgm [ 549.236438][T13710] das08-pgh [ 549.237543][T13710] das08-pgl [ 549.238637][T13710] das08-aoh [ 549.239738][T13710] das08-aol [ 549.240815][T13710] das08-aom [ 549.241921][T13710] das08/jr-ao [ 549.243095][T13710] das08jr-16-ao [ 549.244322][T13710] pc104-das08 [ 549.245456][T13710] das08jr/16 [ 549.246516][T13710] comedi: valid board names for das16m1 driver are: [ 549.248600][T13710] das16m1 [ 549.249636][T13710] comedi: valid board names for dac02 driver are: [ 549.251618][T13710] dac02 [ 549.252537][T13710] comedi: valid board names for rti802 driver are: [ 549.254747][T13710] rti802 [ 549.255853][T13710] comedi: valid board names for rti800 driver are: [ 549.257965][T13710] rti800 [ 549.258986][T13710] rti815 [ 549.260000][T13710] comedi: valid board names for pcm3724 driver are: [ 549.262110][T13710] pcm3724 [ 549.263136][T13710] comedi: valid board names for pcl818 driver are: [ 549.265225][T13710] pcl818l [ 549.266219][T13710] pcl818h [ 549.267282][T13710] pcl818hd [ 549.268353][T13710] pcl818hg [ 549.269357][T13710] pcl818 [ 549.270297][T13710] pcl718 [ 549.271251][T13710] pcm3718 [ 549.272288][T13710] comedi: valid board names for pcl816 driver are: [ 549.274251][T13710] pcl816 [ 549.275299][T13710] pcl814b [ 549.276342][T13710] comedi: valid board names for pcl812 driver are: [ 549.278509][T13710] pcl812 [ 549.279528][T13710] pcl812pg [ 549.280579][T13710] acl8112pg [ 549.281709][T13710] acl8112dg [ 549.282789][T13710] acl8112hg [ 549.283883][T13710] a821pgl [ 549.284930][T13710] a821pglnda [ 549.286066][T13710] a821pgh [ 549.287107][T13710] a822pgl [ 549.288169][T13710] a822pgh [ 549.289194][T13710] a823pgl [ 549.290192][T13710] a823pgh [ 549.291240][T13710] pcl813 [ 549.292269][T13710] pcl813b [ 549.293296][T13710] acl8113 [ 549.294325][T13710] iso813 [ 549.295357][T13710] acl8216 [ 549.296423][T13710] a826pg [ 549.297412][T13710] comedi: valid board names for pcl730 driver are: [ 549.299490][T13710] pcl730 [ 549.300549][T13710] iso730 [ 549.301660][T13710] acl7130 [ 549.302785][T13710] pcm3730 [ 549.303933][T13710] pcl725 [ 549.304972][T13710] p8r8dio [ 549.306041][T13710] acl7225b [ 549.307307][T13710] p16r16dio [ 549.308477][T13710] pcl733 [ 549.309466][T13710] pcl734 [ 549.310465][T13710] opmm-1616-xt [ 549.311671][T13710] pearl-mm-p [ 549.312775][T13710] ir104-pbf [ 549.313852][T13710] comedi: valid board names for pcl726 driver are: [ 549.315943][T13710] pcl726 [ 549.316931][T13710] pcl727 [ 549.317994][T13710] pcl728 [ 549.318986][T13710] acl6126 [ 549.320027][T13710] acl6128 [ 549.321064][T13710] comedi: valid board names for pcl724 driver are: [ 549.323111][T13710] pcl724 [ 549.324098][T13710] pcl722 [ 549.325065][T13710] pcl731 [ 549.326024][T13710] acl7122 [ 549.327036][T13710] acl7124 [ 549.328184][T13710] pet48dio [ 549.329212][T13710] pcmio48 [ 549.330228][T13710] onyx-mm-dio [ 549.331375][T13710] comedi: valid board names for pcl711 driver are: [ 549.333450][T13710] pcl711 [ 549.334416][T13710] pcl711b [ 549.335425][T13710] acl8112hg [ 549.336497][T13710] acl8112dg [ 549.337567][T13710] comedi: valid board names for amplc_pc263 driver are: [ 549.339774][T13710] pc263 [ 549.340704][T13710] comedi: valid board names for amplc_pc236 driver are: [ 549.342846][T13710] pc36at [ 549.343838][T13710] comedi: valid board names for amplc_dio200 driver are: [ 549.346026][T13710] pc212e [ 549.347011][T13710] pc214e [ 549.348017][T13710] pc215e [ 549.349019][T13710] pc218e [ 549.350080][T13710] pc272e [ 549.351125][T13710] comedi: valid board names for comedi_parport driver are: [ 549.353444][T13710] comedi_parport [ 549.354641][T13710] comedi: valid board names for comedi_test driver are: [ 549.356807][T13710] comedi_test [ 549.357951][T13710] comedi: valid board names for comedi_bond driver are: [ 549.360122][T13710] comedi_bond [ 549.594747][T13727] 9pnet_virtio: no channels available for device syz [ 549.772066][T13730] /dev/sr0: Can't open blockdev [ 550.233831][ T6088] snd_usb_pod 7-1:1.1: set_interface failed [ 550.237060][ T6088] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 550.239988][ T6088] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 550.244972][ T6088] usb 7-1: USB disconnect, device number 22 [ 550.926217][T13746] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 550.928244][T13746] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 550.932664][T13746] vhci_hcd vhci_hcd.0: Device attached [ 550.939885][T13754] vhci_hcd: cannot find the pending unlink 1023 [ 550.947184][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 550.947199][ T40] audit: type=1400 audit(544.864:28709): avc: denied { ioctl } for pid=13745 comm="syz.0.2257" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 551.030093][T13757] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2258'. [ 551.188117][ T34] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 551.190866][ T40] audit: type=1400 audit(545.088:28710): avc: denied { lock } for pid=13745 comm="syz.0.2257" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 551.198576][T13754] vhci_hcd: connection reset by peer [ 551.201822][ T6267] vhci_hcd: stop threads [ 551.203208][ T6267] vhci_hcd: release socket [ 551.204754][ T6267] vhci_hcd: disconnect device [ 551.221828][ T6088] usb 9-1: USB disconnect, device number 4 [ 551.302583][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2263'. [ 551.309397][T13773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13773 comm=syz.0.2263 [ 551.582674][ T40] audit: type=1400 audit(545.453:28711): avc: denied { name_bind } for pid=13780 comm="syz.0.2266" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 551.615896][ T6088] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 551.666935][T13785] 9pnet_virtio: no channels available for device syz [ 551.788258][ T6088] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 551.791680][ T6088] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.796072][ T6088] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 551.799481][ T6088] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.845330][T13788] loop6: detected capacity change from 0 to 1 [ 551.848757][ T6006] loop6: [POWERTEC] p1 p2 p3 p4 [ 551.850601][ T6006] loop6: p1 start 327691 is beyond EOD, truncated [ 551.853132][ T6006] loop6: p2 size 1680801792 extends beyond EOD, truncated [ 551.856682][ T6006] loop6: p3 size 655360 extends beyond EOD, truncated [ 551.861070][ T6006] loop6: p4 size 1140850688 extends beyond EOD, truncated [ 551.875361][T13788] loop6: [POWERTEC] p1 p2 p3 p4 [ 551.877234][T13788] loop6: p1 start 327691 is beyond EOD, truncated [ 551.879526][T13788] loop6: p2 size 1680801792 extends beyond EOD, truncated [ 551.883570][T13788] loop6: p3 size 655360 extends beyond EOD, truncated [ 551.888389][T13788] loop6: p4 size 1140850688 extends beyond EOD, truncated [ 551.916872][T13480] udevd[13480]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 551.917582][T12905] udevd[12905]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 551.918845][ T6006] udevd[6006]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 551.936440][T13790] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2269'. [ 551.939875][ T6006] udevd[6006]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 551.939974][T12905] udevd[12905]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 551.942593][T13480] udevd[13480]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 552.018999][T13769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.023118][T13769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.027197][T13769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.031480][T13769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.035531][T13769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.038863][T13769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.042150][T13769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.044731][ T40] audit: type=1400 audit(545.893:28712): avc: denied { ioctl } for pid=13794 comm="syz.2.2271" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 552.045029][T13795] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2271'. [ 552.046296][T13769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.049156][T13769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.049427][T13769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.062677][ T6088] usb 9-1: usb_control_msg returned -32 [ 552.068340][ T6088] usbtmc 9-1:16.0: can't read capabilities [ 552.114676][ T10] usb 9-1: USB disconnect, device number 5 [ 552.438964][T13821] netlink: 'syz.0.2278': attribute type 12 has an invalid length. [ 552.673241][T13832] pim6reg: entered allmulticast mode [ 552.756410][T13832] pim6reg: left allmulticast mode [ 553.087391][ T40] audit: type=1400 audit(546.856:28713): avc: denied { setattr } for pid=13847 comm="syz.0.2286" path="socket:[56730]" dev="sockfs" ino=56730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 553.096636][ T40] audit: type=1400 audit(546.856:28714): avc: denied { write } for pid=13847 comm="syz.0.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 553.118559][T13851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2287'. [ 554.034876][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2291'. [ 554.267133][ T40] audit: type=1400 audit(547.969:28715): avc: denied { create } for pid=13873 comm="syz.2.2293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 554.274609][ T40] audit: type=1400 audit(547.969:28716): avc: denied { create } for pid=13873 comm="syz.2.2293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 554.278487][T13880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.282797][ T40] audit: type=1400 audit(547.969:28717): avc: denied { create } for pid=13873 comm="syz.2.2293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 554.283617][T13880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.293611][ T40] audit: type=1400 audit(547.969:28718): avc: denied { write } for pid=13873 comm="syz.2.2293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 554.294912][T13880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.305923][T13880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.587626][ T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 554.769738][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 554.775987][ T10] usb 9-1: config index 0 descriptor too short (expected 44135, got 45) [ 554.778597][ T10] usb 9-1: config 14 has too many interfaces: 61, using maximum allowed: 32 [ 554.781937][ T10] usb 9-1: config 14 has an invalid descriptor of length 52, skipping remainder of the config [ 554.785100][ T10] usb 9-1: config 14 has 0 interfaces, different from the descriptor's value: 61 [ 554.788041][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 554.790953][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.012146][ T10] usb 9-1: string descriptor 0 read error: -71 [ 555.014923][ T10] usb 9-1: USB disconnect, device number 6 [ 555.291104][T13889] netlink: 'syz.2.2297': attribute type 1 has an invalid length. [ 555.295320][T13889] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2297'. [ 555.300706][T13889] netlink: 'syz.2.2297': attribute type 1 has an invalid length. [ 555.304161][T13889] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2297'. [ 555.348716][T13893] syzkaller1: entered promiscuous mode [ 555.350992][T13893] syzkaller1: entered allmulticast mode [ 555.755290][T13906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2302'. [ 555.775740][T13906] bond7: entered promiscuous mode [ 555.778205][T13906] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.808901][T13906] veth5: entered promiscuous mode [ 555.811465][T13906] bond7: (slave veth5): Enslaving as an active interface with an up link [ 555.827937][ T1347] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 555.840546][T13908] veth7: entered promiscuous mode [ 555.843366][T13908] bond7: (slave veth7): Enslaving as an active interface with an up link [ 555.997393][ T1347] usb 9-1: Using ep0 maxpacket: 16 [ 556.001853][ T1347] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 46080, setting to 1024 [ 556.006408][ T1347] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 556.010736][ T1347] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 556.016013][ T1347] usb 9-1: config 1 interface 0 has no altsetting 0 [ 556.027742][ T1347] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 556.031667][ T1347] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.034994][ T1347] usb 9-1: Product: syz [ 556.036745][ T1347] usb 9-1: Manufacturer: syz [ 556.038639][ T1347] usb 9-1: SerialNumber: syz [ 556.044902][T13897] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 556.264992][ T1347] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 556.486992][ T1347] usb 9-1: USB disconnect, device number 7 [ 556.493463][ T1347] usblp0: removed [ 556.633782][ T5991] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 556.637046][ T5991] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 556.640683][ T5991] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 556.643809][ T5991] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 556.646584][ T5991] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 556.683124][ T34] vhci_hcd: vhci_device speed not set [ 556.731715][ T6267] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.844703][T13911] chnl_net:caif_netlink_parms(): no params data found [ 556.871963][ T6267] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.977456][ T6267] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.985510][T13911] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.988596][T13911] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.991715][T13911] bridge_slave_0: entered allmulticast mode [ 556.995449][T13911] bridge_slave_0: entered promiscuous mode [ 556.999914][T13911] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.003008][T13911] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.005987][T13911] bridge_slave_1: entered allmulticast mode [ 557.008623][T13911] bridge_slave_1: entered promiscuous mode [ 557.055647][ T6267] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.086221][T13911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.095907][T13911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.160702][T13911] team0: Port device team_slave_0 added [ 557.166063][T13911] team0: Port device team_slave_1 added [ 557.187523][T13924] afs: Unknown parameter '0x0000000000000000' [ 557.218358][T13911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.221205][T13911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.230443][T13911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.236051][T13911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.238370][T13911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.247680][T13911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.257813][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 557.257824][ T40] audit: type=1400 audit(550.757:28723): avc: denied { bind } for pid=13925 comm="syz.4.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 557.341703][T13932] program syz.4.2311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 557.344430][T13911] hsr_slave_0: entered promiscuous mode [ 557.351000][T13911] hsr_slave_1: entered promiscuous mode [ 557.353925][T13911] debugfs: 'hsr0' already exists in 'hsr' [ 557.356564][T13911] Cannot create hsr debugfs directory [ 558.113295][ T6267] bond2 (unregistering): (slave gretap1): Releasing active interface [ 558.214001][ T6267] bond6 (unregistering): (slave geneve2): Releasing active interface [ 558.346048][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2315'. [ 558.842608][ T5991] Bluetooth: hci2: command tx timeout [ 559.271004][ T6267] bond0 (unregistering): left allmulticast mode [ 559.273628][ T6267] bond_slave_0: left allmulticast mode [ 559.275918][ T6267] bond_slave_1: left allmulticast mode [ 559.278199][ T6267] macvlan0: left allmulticast mode [ 559.283083][ T6267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.325725][ T6267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.348885][ T6267] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 559.399026][ T6267] bond0 (unregistering): Released all slaves [ 559.405609][ T6267] bond1 (unregistering): Released all slaves [ 559.414795][ T6267] bond2 (unregistering): Released all slaves [ 559.502376][ T6267] bond3 (unregistering): Released all slaves [ 559.513285][ T6267] bond4 (unregistering): Released all slaves [ 559.586695][ T6267] bond5 (unregistering): Released all slaves [ 559.666331][ T6267] bond6 (unregistering): Released all slaves [ 559.752166][ T6267] bond7 (unregistering): (slave veth5): Releasing backup interface [ 559.804845][ T6267] veth5: left promiscuous mode [ 559.808237][ T6267] bond7 (unregistering): (slave veth7): Releasing backup interface [ 559.848061][ T6267] veth7: left promiscuous mode [ 559.852213][ T6267] bond7 (unregistering): Released all slaves [ 559.903656][T13946] netlink: 'syz.4.2315': attribute type 1 has an invalid length. [ 559.906865][T13946] netlink: 'syz.4.2315': attribute type 2 has an invalid length. [ 559.974819][ T6267] tipc: Disabling bearer [ 559.978514][ T6267] tipc: Left network mode [ 560.043686][T13911] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 560.049044][T13911] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 560.055516][T13911] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 560.075802][T13911] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 560.123738][T13911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.132932][T13911] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.136483][T13968] Driver unsupported XDP return value 0 on prog (id 360) dev N/A, expect packet loss! [ 560.138272][ T6268] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.142891][ T6268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.150002][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.152270][ T6268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.240332][T13911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 560.250350][T13972] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2320'. [ 560.446334][T13976] geneve1: entered allmulticast mode [ 560.482629][T13997] FAULT_INJECTION: forcing a failure. [ 560.482629][T13997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.486841][T13997] CPU: 1 UID: 0 PID: 13997 Comm: syz.4.2325 Not tainted syzkaller #0 PREEMPT(full) [ 560.486857][T13997] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 560.486865][T13997] Call Trace: [ 560.486869][T13997] [ 560.486873][T13997] dump_stack_lvl+0x16c/0x1f0 [ 560.486910][T13997] should_fail_ex+0x512/0x640 [ 560.486932][T13997] _copy_from_user+0x2e/0xd0 [ 560.486950][T13997] copy_msghdr_from_user+0x98/0x160 [ 560.486970][T13997] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 560.486989][T13997] ? __pfx__kstrtoull+0x10/0x10 [ 560.487004][T13997] ___sys_sendmsg+0xfe/0x1d0 [ 560.487020][T13997] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.487042][T13997] ? find_held_lock+0x2b/0x80 [ 560.487064][T13997] __sys_sendmmsg+0x200/0x420 [ 560.487081][T13997] ? __pfx___sys_sendmmsg+0x10/0x10 [ 560.487101][T13997] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 560.487123][T13997] ? fput+0x9b/0xd0 [ 560.487136][T13997] ? ksys_write+0x1ac/0x250 [ 560.487145][T13997] ? __pfx_ksys_write+0x10/0x10 [ 560.487156][T13997] __x64_sys_sendmmsg+0x9c/0x100 [ 560.487173][T13997] ? lockdep_hardirqs_on+0x7c/0x110 [ 560.487196][T13997] do_syscall_64+0xcd/0xfa0 [ 560.487242][T13997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.487260][T13997] RIP: 0033:0x7f03d038eec9 [ 560.487275][T13997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.487292][T13997] RSP: 002b:00007f03d1245038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 560.487307][T13997] RAX: ffffffffffffffda RBX: 00007f03d05e5fa0 RCX: 00007f03d038eec9 [ 560.487314][T13997] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 560.487320][T13997] RBP: 00007f03d1245090 R08: 0000000000000000 R09: 0000000000000000 [ 560.487326][T13997] R10: 0000000020000810 R11: 0000000000000246 R12: 0000000000000001 [ 560.487332][T13997] R13: 00007f03d05e6038 R14: 00007f03d05e5fa0 R15: 00007fff06501e68 [ 560.487346][T13997] [ 560.569703][ T6267] hsr_slave_0: left promiscuous mode [ 560.572612][ T6267] hsr_slave_1: left promiscuous mode [ 560.582372][ T6267] veth1_vlan: left allmulticast mode [ 560.584129][ T6267] veth1_macvtap: left promiscuous mode [ 560.586529][ T6267] veth0_macvtap: left promiscuous mode [ 560.588309][ T6267] veth1_vlan: left promiscuous mode [ 560.762162][T14008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2326'. [ 561.055472][ T5991] Bluetooth: hci2: command tx timeout [ 561.325680][T14012] EXT4-fs (nbd3): unable to read superblock [ 561.408909][T14011] block device autoloading is deprecated and will be removed. [ 561.459911][T14016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65530 sclass=netlink_route_socket pid=14016 comm=syz.3.2329 [ 561.874301][T13911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.906073][T14023] x_tables: duplicate underflow at hook 2 [ 561.940245][T14028] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2332'. [ 561.966727][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2331'. [ 561.969960][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2331'. [ 561.993695][T14034] FAULT_INJECTION: forcing a failure. [ 561.993695][T14034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.001431][T14034] CPU: 1 UID: 0 PID: 14034 Comm: syz.0.2333 Not tainted syzkaller #0 PREEMPT(full) [ 562.001452][T14034] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 562.001461][T14034] Call Trace: [ 562.001467][T14034] [ 562.001473][T14034] dump_stack_lvl+0x16c/0x1f0 [ 562.001501][T14034] should_fail_ex+0x512/0x640 [ 562.001529][T14034] _copy_from_user+0x2e/0xd0 [ 562.001554][T14034] move_addr_to_kernel+0x65/0x170 [ 562.001575][T14034] __copy_msghdr+0x386/0x470 [ 562.001598][T14034] copy_msghdr_from_user+0xc1/0x160 [ 562.001621][T14034] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 562.001654][T14034] ? __pfx__kstrtoull+0x10/0x10 [ 562.001677][T14034] ___sys_sendmsg+0xfe/0x1d0 [ 562.001701][T14034] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.001736][T14034] ? find_held_lock+0x2b/0x80 [ 562.001775][T14034] __sys_sendmmsg+0x200/0x420 [ 562.001802][T14034] ? __pfx___sys_sendmmsg+0x10/0x10 [ 562.001832][T14034] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 562.001866][T14034] ? fput+0x9b/0xd0 [ 562.001886][T14034] ? ksys_write+0x1ac/0x250 [ 562.001899][T14034] ? __pfx_ksys_write+0x10/0x10 [ 562.001920][T14034] __x64_sys_sendmmsg+0x9c/0x100 [ 562.001945][T14034] ? lockdep_hardirqs_on+0x7c/0x110 [ 562.001970][T14034] do_syscall_64+0xcd/0xfa0 [ 562.001996][T14034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.002014][T14034] RIP: 0033:0x7fb93eb8eec9 [ 562.002027][T14034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.002043][T14034] RSP: 002b:00007fb93f9d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 562.002060][T14034] RAX: ffffffffffffffda RBX: 00007fb93ede5fa0 RCX: 00007fb93eb8eec9 [ 562.002071][T14034] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 562.002081][T14034] RBP: 00007fb93f9d4090 R08: 0000000000000000 R09: 0000000000000000 [ 562.002090][T14034] R10: 0000000020000810 R11: 0000000000000246 R12: 0000000000000001 [ 562.002100][T14034] R13: 00007fb93ede6038 R14: 00007fb93ede5fa0 R15: 00007ffd45e84478 [ 562.002125][T14034] [ 562.091257][T13911] veth0_vlan: entered promiscuous mode [ 562.097005][T13911] veth1_vlan: entered promiscuous mode [ 562.119731][T13911] veth0_macvtap: entered promiscuous mode [ 562.125582][T13911] veth1_macvtap: entered promiscuous mode [ 562.139311][T13911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.144937][T13911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.152379][T14045] geneve2: entered promiscuous mode [ 562.154079][T14045] geneve2: entered allmulticast mode [ 562.174506][ T6268] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.178257][ T6268] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.184578][ T6268] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.187255][ T6268] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.239285][ T6260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.242739][ T6260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.268286][ T6035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.270761][ T6035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.293718][T14060] FAULT_INJECTION: forcing a failure. [ 562.293718][T14060] name failslab, interval 1, probability 0, space 0, times 1 [ 562.298880][T14060] CPU: 2 UID: 0 PID: 14060 Comm: syz.0.2342 Not tainted syzkaller #0 PREEMPT(full) [ 562.298896][T14060] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 562.298902][T14060] Call Trace: [ 562.298906][T14060] [ 562.298910][T14060] dump_stack_lvl+0x16c/0x1f0 [ 562.298935][T14060] should_fail_ex+0x512/0x640 [ 562.298951][T14060] ? __kmalloc_cache_noprof+0x5f/0x780 [ 562.298973][T14060] should_failslab+0xc2/0x120 [ 562.298990][T14060] __kmalloc_cache_noprof+0x72/0x780 [ 562.299011][T14060] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 562.299035][T14060] ? tcp_sendmsg_fastopen+0x24d/0x750 [ 562.299057][T14060] tcp_sendmsg_fastopen+0x24d/0x750 [ 562.299082][T14060] mptcp_sendmsg+0x14d0/0x1ec0 [ 562.299111][T14060] ? sock_has_perm+0x259/0x2f0 [ 562.299134][T14060] ? __pfx_sock_has_perm+0x10/0x10 [ 562.299160][T14060] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 562.299178][T14060] ? __might_fault+0xe3/0x190 [ 562.299229][T14060] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 562.299254][T14060] ? __import_iovec+0x1dd/0x650 [ 562.299273][T14060] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 562.299288][T14060] inet_sendmsg+0x11c/0x140 [ 562.299303][T14060] ____sys_sendmsg+0x973/0xc70 [ 562.299316][T14060] ? copy_msghdr_from_user+0x10a/0x160 [ 562.299331][T14060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.299345][T14060] ? __pfx__kstrtoull+0x10/0x10 [ 562.299362][T14060] ___sys_sendmsg+0x134/0x1d0 [ 562.299378][T14060] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.299400][T14060] ? find_held_lock+0x2b/0x80 [ 562.299423][T14060] __sys_sendmmsg+0x200/0x420 [ 562.299441][T14060] ? __pfx___sys_sendmmsg+0x10/0x10 [ 562.299462][T14060] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 562.299485][T14060] ? fput+0x9b/0xd0 [ 562.299498][T14060] ? ksys_write+0x1ac/0x250 [ 562.299507][T14060] ? __pfx_ksys_write+0x10/0x10 [ 562.299519][T14060] __x64_sys_sendmmsg+0x9c/0x100 [ 562.299534][T14060] ? lockdep_hardirqs_on+0x7c/0x110 [ 562.299556][T14060] do_syscall_64+0xcd/0xfa0 [ 562.299583][T14060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.299601][T14060] RIP: 0033:0x7fb93eb8eec9 [ 562.299617][T14060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.299639][T14060] RSP: 002b:00007fb93f9d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 562.299656][T14060] RAX: ffffffffffffffda RBX: 00007fb93ede5fa0 RCX: 00007fb93eb8eec9 [ 562.299663][T14060] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 562.299671][T14060] RBP: 00007fb93f9d4090 R08: 0000000000000000 R09: 0000000000000000 [ 562.299678][T14060] R10: 0000000020000810 R11: 0000000000000246 R12: 0000000000000001 [ 562.299684][T14060] R13: 00007fb93ede6038 R14: 00007fb93ede5fa0 R15: 00007ffd45e84478 [ 562.299699][T14060] [ 562.439168][T14066] program syz.5.2305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 562.440461][ T6267] IPVS: stop unused estimator thread 0... [ 562.454237][T14071] bpf: Bad value for 'uid' [ 562.457456][T14070] new mount options do not match the existing superblock, will be ignored [ 562.457478][T14066] bpf: Bad value for 'uid' [ 562.463076][ T40] audit: type=1400 audit(555.630:28724): avc: denied { remount } for pid=14069 comm="syz.0.2346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 562.465671][T14070] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 562.479304][T14070] xt_socket: unknown flags 0xe4 [ 562.819443][ T1347] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 562.979825][ T1347] usb 10-1: Using ep0 maxpacket: 16 [ 562.983537][ T1347] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.987334][ T1347] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.990990][ T1347] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 562.995847][ T1347] usb 10-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 562.999135][ T1347] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.002974][ T1347] usb 10-1: config 0 descriptor?? [ 563.146413][T14083] FAULT_INJECTION: forcing a failure. [ 563.146413][T14083] name failslab, interval 1, probability 0, space 0, times 0 [ 563.150308][T14083] CPU: 3 UID: 0 PID: 14083 Comm: syz.3.2351 Not tainted syzkaller #0 PREEMPT(full) [ 563.150322][T14083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 563.150328][T14083] Call Trace: [ 563.150333][T14083] [ 563.150338][T14083] dump_stack_lvl+0x16c/0x1f0 [ 563.150357][T14083] should_fail_ex+0x512/0x640 [ 563.150374][T14083] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 563.150392][T14083] should_failslab+0xc2/0x120 [ 563.150405][T14083] kmem_cache_alloc_node_noprof+0x78/0x770 [ 563.150433][T14083] ? __alloc_skb+0x2b2/0x380 [ 563.150451][T14083] ? __alloc_skb+0x2b2/0x380 [ 563.150464][T14083] __alloc_skb+0x2b2/0x380 [ 563.150478][T14083] ? __pfx___alloc_skb+0x10/0x10 [ 563.150493][T14083] ? tcp_chrono_stop+0x95/0x420 [ 563.150512][T14083] tcp_stream_alloc_skb+0x34/0x560 [ 563.150527][T14083] tcp_connect+0xe36/0x5010 [ 563.150546][T14083] ? find_held_lock+0x2b/0x80 [ 563.150562][T14083] ? __pfx_tcp_connect+0x10/0x10 [ 563.150577][T14083] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 563.150596][T14083] tcp_v4_connect+0x153a/0x1bb0 [ 563.150614][T14083] ? __pfx_tcp_v4_connect+0x10/0x10 [ 563.150627][T14083] ? mptcp_token_new_connect+0x1e9/0x600 [ 563.150642][T14083] mptcp_connect+0x4b2/0xae0 [ 563.150656][T14083] __inet_stream_connect+0x915/0xf50 [ 563.150675][T14083] ? __pfx___inet_stream_connect+0x10/0x10 [ 563.150696][T14083] tcp_sendmsg_fastopen+0x3ed/0x750 [ 563.150712][T14083] mptcp_sendmsg+0x14d0/0x1ec0 [ 563.150728][T14083] ? sock_has_perm+0x259/0x2f0 [ 563.150743][T14083] ? __pfx_sock_has_perm+0x10/0x10 [ 563.150760][T14083] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 563.150772][T14083] ? __might_fault+0xe3/0x190 [ 563.150788][T14083] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 563.150803][T14083] ? __import_iovec+0x1dd/0x650 [ 563.150815][T14083] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 563.150834][T14083] inet_sendmsg+0x11c/0x140 [ 563.150848][T14083] ____sys_sendmsg+0x973/0xc70 [ 563.150861][T14083] ? copy_msghdr_from_user+0x10a/0x160 [ 563.150877][T14083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.150891][T14083] ? __pfx__kstrtoull+0x10/0x10 [ 563.150906][T14083] ___sys_sendmsg+0x134/0x1d0 [ 563.150923][T14083] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.150946][T14083] ? find_held_lock+0x2b/0x80 [ 563.150968][T14083] __sys_sendmmsg+0x200/0x420 [ 563.150985][T14083] ? __pfx___sys_sendmmsg+0x10/0x10 [ 563.151005][T14083] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 563.151029][T14083] ? fput+0x9b/0xd0 [ 563.151041][T14083] ? ksys_write+0x1ac/0x250 [ 563.151050][T14083] ? __pfx_ksys_write+0x10/0x10 [ 563.151062][T14083] __x64_sys_sendmmsg+0x9c/0x100 [ 563.151078][T14083] ? lockdep_hardirqs_on+0x7c/0x110 [ 563.151093][T14083] do_syscall_64+0xcd/0xfa0 [ 563.151110][T14083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.151120][T14083] RIP: 0033:0x7fe51c18eec9 [ 563.151129][T14083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.151139][T14083] RSP: 002b:00007fe51cf63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 563.151150][T14083] RAX: ffffffffffffffda RBX: 00007fe51c3e5fa0 RCX: 00007fe51c18eec9 [ 563.151156][T14083] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 563.151163][T14083] RBP: 00007fe51cf63090 R08: 0000000000000000 R09: 0000000000000000 [ 563.151169][T14083] R10: 0000000020000810 R11: 0000000000000246 R12: 0000000000000001 [ 563.151175][T14083] R13: 00007fe51c3e6038 R14: 00007fe51c3e5fa0 R15: 00007ffdbe1f06d8 [ 563.151211][T14083] [ 563.279417][ T5991] Bluetooth: hci2: command tx timeout [ 563.289626][T14085] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2352'. [ 563.350125][T14087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2353'. [ 563.356283][T14087] geneve2: entered allmulticast mode [ 563.478315][ T1347] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/0003:05AC:8241.0009/input/input25 [ 563.547072][ T1347] appleir 0003:05AC:8241.0009: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 563.693046][T14094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.696679][T14094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.749835][ T6082] usb 10-1: USB disconnect, device number 2 [ 563.779352][T14102] comedi comedi0: Minor 3 could not be opened [ 563.816539][T14104] futex_wake_op: syz.0.2358 tries to shift op by 32; fix this program [ 563.871730][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2359'. [ 563.910998][ T40] audit: type=1400 audit(556.987:28725): avc: denied { connect } for pid=14106 comm="syz.0.2359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 563.911113][T14107] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2359'. [ 564.059328][T14107] input: syz0 as /devices/virtual/input/input26 [ 564.060274][T14112] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 564.115913][T14114] netlink: 'syz.5.2362': attribute type 10 has an invalid length. [ 564.118485][T14114] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 564.121899][T14114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 564.186396][T14118] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2363'. [ 564.277529][T14121] macsec3: entered promiscuous mode [ 564.279255][T14121] macsec3: entered allmulticast mode [ 564.529908][ T6034] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 564.690321][ T6034] usb 10-1: Using ep0 maxpacket: 32 [ 564.693932][ T6034] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 564.696850][ T6034] usb 10-1: can't read configurations, error -61 [ 564.829279][ T6034] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 565.000351][ T6034] usb 10-1: Using ep0 maxpacket: 32 [ 565.004844][ T6034] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 565.007977][ T6034] usb 10-1: can't read configurations, error -61 [ 565.013566][ T6034] usb usb10-port1: attempt power cycle [ 565.061302][ T6268] bond0 (unregistering): (slave ip6erspan0): Releasing active interface [ 565.164257][ T6268] gretap0 (unregistering): left promiscuous mode [ 565.307868][ T6268] bond3 (unregistering): (slave geneve3): Releasing active interface [ 565.374473][ T6034] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 565.407278][ T6034] usb 10-1: Using ep0 maxpacket: 32 [ 565.411803][ T6034] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 565.414694][ T6034] usb 10-1: can't read configurations, error -61 [ 565.452389][ T6268] bridge0 (unregistering): left allmulticast mode [ 565.513521][ T5991] Bluetooth: hci2: command tx timeout [ 565.567211][ T6034] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 565.599533][ T6034] usb 10-1: Using ep0 maxpacket: 32 [ 565.603405][ T6034] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 565.606444][ T6034] usb 10-1: can't read configurations, error -61 [ 565.609293][ T6034] usb usb10-port1: unable to enumerate USB device [ 565.736439][ T6268] .` (unregistering): Released all slaves [ 565.750348][ T6268] bond0 (unregistering): Released all slaves [ 565.829238][ T6268] bond1 (unregistering): (slave veth3): Releasing active interface [ 565.868902][ T6268] bond1 (unregistering): (slave veth5): Releasing active interface [ 565.910815][ T6268] bond1 (unregistering): Released all slaves [ 565.986325][ T6268] bond2 (unregistering): Released all slaves [ 565.997150][ T6268] bond3 (unregistering): Released all slaves [ 566.186014][T14147] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 566.419277][ C0] sr 2:0:0:0: [sr0] tag#20 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 566.419364][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2375'. [ 566.422463][ C0] sr 2:0:0:0: [sr0] tag#20 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 566.428977][T14154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2375'. [ 566.433137][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2375'. [ 566.436098][T14154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2375'. [ 566.477902][ T6268] hsr_slave_0: left promiscuous mode [ 566.481068][ T6268] hsr_slave_1: left promiscuous mode [ 566.530944][T14163] loop7: detected capacity change from 0 to 7 [ 566.533274][T14163] buffer_io_error: 45 callbacks suppressed [ 566.533282][T14163] Buffer I/O error on dev loop7, logical block 0, async page read [ 566.538249][T14163] Buffer I/O error on dev loop7, logical block 0, async page read [ 566.544294][T14163] Buffer I/O error on dev loop7, logical block 0, async page read [ 566.546877][T14163] Buffer I/O error on dev loop7, logical block 0, async page read [ 566.549364][T14163] Buffer I/O error on dev loop7, logical block 0, async page read [ 566.552273][T14163] Buffer I/O error on dev loop7, logical block 0, async page read [ 566.554764][T14163] Buffer I/O error on dev loop7, logical block 0, async page read [ 566.557201][T14163] ldm_validate_partition_table(): Disk read failed. [ 566.559268][T14163] Buffer I/O error on dev loop7, logical block 0, async page read [ 566.561931][T14163] Buffer I/O error on dev loop7, logical block 0, async page read [ 566.564417][T14163] Buffer I/O error on dev loop7, logical block 0, async page read [ 566.566931][T14163] Dev loop7: unable to read RDB block 0 [ 566.568776][T14163] loop7: unable to read partition table [ 566.570563][T14163] loop7: partition table beyond EOD, truncated [ 566.573353][T14163] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 566.605353][ T6268] pim6reg (unregistering): left allmulticast mode [ 566.608088][ T40] audit: type=1400 audit(559.512:28726): avc: denied { write } for pid=14164 comm="syz.0.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 567.586697][T14168] binder: 14166:14168 ioctl c0306201 200000000540 returned -22 [ 567.589841][T14168] binder: 14166:14168 unknown command 0 [ 567.591753][T14168] binder: 14166:14168 ioctl c0306201 200000000300 returned -22 [ 567.626795][T14165] bridge0: entered promiscuous mode [ 567.628690][T14165] macsec4: entered promiscuous mode [ 567.630910][T14165] bridge0: port 1(macsec4) entered blocking state [ 567.632952][T14165] bridge0: port 1(macsec4) entered disabled state [ 567.634967][T14165] macsec4: entered allmulticast mode [ 567.636592][T14165] bridge0: entered allmulticast mode [ 567.640505][T14165] macsec4: left allmulticast mode [ 567.643084][T14165] bridge0: left allmulticast mode [ 567.645581][T14165] bridge0: left promiscuous mode [ 567.721412][T14173] SELinux: policydb string length 14080 does not match expected length 8 [ 567.724947][T14173] SELinux: failed to load policy [ 567.732057][ T40] audit: type=1400 audit(560.560:28727): avc: denied { append } for pid=14169 comm="syz.3.2380" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 567.777241][T14181] ================================================================== [ 567.779822][T14181] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x21d2/0x43c0 [ 567.782407][T14181] Write of size 640 at addr ffffc90005aade00 by task vivid-000-vid-c/14181 [ 567.785714][T14181] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 567.787566][T14181] CPU: 2 UID: 0 PID: 14181 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 567.787581][T14181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 567.787588][T14181] Call Trace: [ 567.787592][T14181] [ 567.787596][T14181] dump_stack_lvl+0x116/0x1f0 [ 567.787615][T14181] print_report+0xcd/0x630 [ 567.787627][T14181] ? __virt_addr_valid+0x81/0x610 [ 567.787643][T14181] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 567.787656][T14181] kasan_report+0xe0/0x110 [ 567.787667][T14181] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 567.787681][T14181] kasan_check_range+0x100/0x1b0 [ 567.787695][T14181] __asan_memcpy+0x3c/0x60 [ 567.787710][T14181] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 567.787729][T14181] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 567.787747][T14181] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 567.787762][T14181] vivid_fillbuff+0x8d2/0x4250 [ 567.787775][T14181] ? lock_acquire+0x179/0x350 [ 567.787785][T14181] ? find_held_lock+0x2b/0x80 [ 567.787800][T14181] ? __pfx_vivid_fillbuff+0x10/0x10 [ 567.787816][T14181] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 567.787832][T14181] ? lockdep_hardirqs_on+0x7c/0x110 [ 567.787848][T14181] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 567.787860][T14181] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 567.787877][T14181] vivid_thread_vid_cap+0x454/0xda0 [ 567.787891][T14181] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 567.787903][T14181] ? do_raw_spin_lock+0x12c/0x2b0 [ 567.787914][T14181] ? find_held_lock+0x2b/0x80 [ 567.787927][T14181] ? rcu_is_watching+0x12/0xc0 [ 567.787940][T14181] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 567.787955][T14181] ? lockdep_hardirqs_on+0x7c/0x110 [ 567.787970][T14181] ? __kthread_parkme+0x19e/0x250 [ 567.787985][T14181] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 567.787997][T14181] kthread+0x3c2/0x780 [ 567.788006][T14181] ? __pfx_kthread+0x10/0x10 [ 567.788016][T14181] ? rcu_is_watching+0x12/0xc0 [ 567.788028][T14181] ? __pfx_kthread+0x10/0x10 [ 567.788038][T14181] ret_from_fork+0x672/0x7d0 [ 567.788047][T14181] ? __pfx_kthread+0x10/0x10 [ 567.788057][T14181] ret_from_fork_asm+0x1a/0x30 [ 567.788071][T14181] [ 567.788075][T14181] [ 567.852577][T14181] The buggy address belongs to a 2-page vmalloc region starting at 0xffffc90005aac000 allocated at vb2_vmalloc_alloc+0x135/0x3f0 [ 567.856986][T14181] The buggy address belongs to the physical page: [ 567.858933][T14181] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x2115 pfn:0x41e44 [ 567.861656][T14181] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 567.863889][T14181] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 567.866526][T14181] raw: 0000000000002115 0000000000000000 00000001ffffffff 0000000000000000 [ 567.869144][T14181] page dumped because: kasan: bad access detected [ 567.871157][T14181] page_owner tracks the page as allocated [ 567.872891][T14181] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 14180, tgid 14179 (syz.3.2384), ts 567775916015, free_ts 567775872156 [ 567.878792][T14181] post_alloc_hook+0x1c0/0x230 [ 567.880263][T14181] get_page_from_freelist+0x10a3/0x3a30 [ 567.882013][T14181] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 567.883886][T14181] alloc_pages_mpol+0x1fb/0x550 [ 567.885447][T14181] alloc_pages_noprof+0x131/0x390 [ 567.886986][T14181] __vmalloc_node_range_noprof+0x6f8/0x1480 [ 567.888807][T14181] vmalloc_user_noprof+0x9e/0xe0 [ 567.890338][T14181] vb2_vmalloc_alloc+0x135/0x3f0 [ 567.891914][T14181] __vb2_queue_alloc+0x8c6/0x1280 [ 567.893443][T14181] vb2_core_reqbufs+0xa90/0xfe0 [ 567.894983][T14181] __vb2_init_fileio+0x3f1/0x1100 [ 567.896743][T14181] vb2_core_poll+0x5ec/0x700 [ 567.898211][T14181] vb2_poll+0x4b/0xe0 [ 567.899529][T14181] vb2_fop_poll+0x10f/0x2c0 [ 567.900933][T14181] v4l2_poll+0x160/0x320 [ 567.902219][T14181] do_sys_poll+0x55c/0xdf0 [ 567.903592][T14181] page last free pid 14180 tgid 14179 stack trace: [ 567.905895][T14181] __free_frozen_pages+0x7df/0x1160 [ 567.907731][T14181] kasan_populate_vmalloc+0x1eb/0x2d0 [ 567.909404][T14181] alloc_vmap_area+0x960/0x29e0 [ 567.910883][T14181] __get_vm_area_node+0x1ca/0x330 [ 567.912452][T14181] __vmalloc_node_range_noprof+0x271/0x1480 [ 567.914295][T14181] vmalloc_user_noprof+0x9e/0xe0 [ 567.915846][T14181] vb2_vmalloc_alloc+0x135/0x3f0 [ 567.917410][T14181] __vb2_queue_alloc+0x8c6/0x1280 [ 567.919002][T14181] vb2_core_reqbufs+0xa90/0xfe0 [ 567.920568][T14181] __vb2_init_fileio+0x3f1/0x1100 [ 567.922177][T14181] vb2_core_poll+0x5ec/0x700 [ 567.923614][T14181] vb2_poll+0x4b/0xe0 [ 567.924857][T14181] vb2_fop_poll+0x10f/0x2c0 [ 567.926308][T14181] v4l2_poll+0x160/0x320 [ 567.927659][T14181] do_sys_poll+0x55c/0xdf0 [ 567.929031][T14181] __x64_sys_ppoll+0x254/0x2d0 [ 567.930521][T14181] [ 567.931335][T14181] Memory state around the buggy address: [ 567.933108][T14181] ffffc90005aadf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.935553][T14181] ffffc90005aadf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 567.938031][T14181] >ffffc90005aae000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 567.940389][T14181] ^ [ 567.941658][T14181] ffffc90005aae080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 567.944135][T14181] ffffc90005aae100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 567.946636][T14181] ================================================================== [ 567.950524][T14181] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 567.952843][T14181] CPU: 3 UID: 0 PID: 14181 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) [ 567.955950][T14181] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 567.959286][T14181] Call Trace: [ 567.960351][T14181] [ 567.961280][T14181] dump_stack_lvl+0x3d/0x1f0 [ 567.962736][T14181] vpanic+0x640/0x6f0 [ 567.964000][T14181] panic+0xca/0xd0 [ 567.965178][T14181] ? __pfx_panic+0x10/0x10 [ 567.966583][T14181] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 567.968337][T14181] ? preempt_schedule_common+0x44/0xc0 [ 567.970074][T14181] ? preempt_schedule_thunk+0x16/0x30 [ 567.971773][T14181] ? check_panic_on_warn+0x1f/0xb0 [ 567.973340][T14181] check_panic_on_warn+0xab/0xb0 [ 567.974872][T14181] end_report+0x107/0x170 [ 567.976223][T14181] kasan_report+0xee/0x110 [ 567.977628][T14181] ? tpg_fill_plane_buffer+0x21d2/0x43c0 [ 567.979409][T14181] kasan_check_range+0x100/0x1b0 [ 567.980914][T14181] __asan_memcpy+0x3c/0x60 [ 567.982271][T14181] tpg_fill_plane_buffer+0x21d2/0x43c0 [ 567.983974][T14181] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 567.985852][T14181] ? __pfx_tpg_fill_plane_buffer+0x10/0x10 [ 567.987655][T14181] vivid_fillbuff+0x8d2/0x4250 [ 567.989135][T14181] ? lock_acquire+0x179/0x350 [ 567.990559][T14181] ? find_held_lock+0x2b/0x80 [ 567.992051][T14181] ? __pfx_vivid_fillbuff+0x10/0x10 [ 567.993685][T14181] ? v4l2_ctrl_request_setup+0x45e/0xa60 [ 567.995451][T14181] ? lockdep_hardirqs_on+0x7c/0x110 [ 567.997058][T14181] ? vivid_thread_vid_cap_tick+0x814/0x15d0 [ 567.998982][T14181] vivid_thread_vid_cap_tick+0x814/0x15d0 [ 568.000806][T14181] vivid_thread_vid_cap+0x454/0xda0 [ 568.002455][T14181] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 568.004209][T14181] ? do_raw_spin_lock+0x12c/0x2b0 [ 568.005765][T14181] ? find_held_lock+0x2b/0x80 [ 568.007264][T14181] ? rcu_is_watching+0x12/0xc0 [ 568.008800][T14181] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 568.010629][T14181] ? lockdep_hardirqs_on+0x7c/0x110 [ 568.012241][T14181] ? __kthread_parkme+0x19e/0x250 [ 568.013797][T14181] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 568.015623][T14181] kthread+0x3c2/0x780 [ 568.016923][T14181] ? __pfx_kthread+0x10/0x10 [ 568.018360][T14181] ? rcu_is_watching+0x12/0xc0 [ 568.019819][T14181] ? __pfx_kthread+0x10/0x10 [ 568.021258][T14181] ret_from_fork+0x672/0x7d0 [ 568.022644][T14181] ? __pfx_kthread+0x10/0x10 [ 568.024105][T14181] ret_from_fork_asm+0x1a/0x30 [ 568.025606][T14181] [ 568.027091][T14181] Kernel Offset: disabled [ 568.028443][T14181] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:56:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffea00011e9940 RCX=ffffffff82309375 RDX=ffff888029bba480 RSI=ffffffff8bf1cf40 RDI=ffffffff8bf1cf80 RBP=ffffffff8dda6540 RSP=ffffc90005837538 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b652a68 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555737a500 ffffffff 00c00000 GS =0000 ffff8880d69df000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff9adf156c0 CR3=0000000047a59000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6165e590 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9ad212fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9ad212fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9ad212fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9ad212fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9ad21305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9ad21313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88801d834bb8 RCX=ffffffff82308954 RDX=ffffed1003b06978 RSI=0000000000000004 RDI=ffff88801d834bb8 RBP=0000000000000000 RSP=ffffc9000344f758 R8 =0000000000000001 R9 =ffffed1003b06977 R10=ffff88801d834bbb R11=0000000000000000 R12=ffff88801d834b70 R13=0000000000000001 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff8230895d RFL=00000257 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6adf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f09e3b17d60 CR3=0000000030eae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09e2fb76c3 00007f09e2fb76c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd43583590 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555558fbe8e5 0000555558fbe790 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555558fbe8e5 0000555558fbe790 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001832 080d80030d800459 c00302100059b003 0210000a90032902 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104808080801000 5980040100000008 06060168d0048080 080059e003701000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 59d0032000000000 aa1414ac00000007 0000008400000000 0000001832080d80 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 030d800459c00302 100059b003021000 0a90032902080180 030180040a80030a ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 800459a003200800 59900302f602000e 032802000c032802 000a0302d8020008 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff852f8b15 RDI=ffffffff9ae017e0 RBP=ffffffff9ae017a0 RSP=ffffc900060d7148 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=666f206574697257 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9ae017a0 R15=ffffffff852f8ab0 RIP=ffffffff852f8b3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c4158d2 CR3=000000002ccbe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe51c212fbe ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe51c212fcb ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe51c212fc5 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe51c212fd9 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe51c21305f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe51c21313d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000033 6365632f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000010 4046400c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff914d1074 RBX=ffffffff90b7c5e4 RCX=dffffc0000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff90b7c5c0 RBP=ffffffff90b7c5e8 RSP=ffffc9000484f548 R8 =ffffffff914d10b6 R9 =0000000000000000 R10=0000000000000001 R11=000000000003611c R12=ffffffff90b7c5e8 R13=ffffffff84611ce3 R14=ffffffff90b7c5c0 R15=ffffffff90b7c5e4 RIP=ffffffff816b7b76 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f5974051880 ffffffff 00c00000 GS =0000 ffff8880d6cdf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555716ce588 CR3=0000000024bd3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000410101 Opmask02=00000000ffffffff Opmask03=0000000001041000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005588d63fe2e0 00005588d63fe2e0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005588d63fe2e0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737373 7373737373737373 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 737326fba54da483 737326fefde54b59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b6280eff847cf3fc 737373762bfe108b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 35706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c55b7d8cf70f808f 0000558d8eb2482d 0000000000000171 00736576616c732f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c55b7d8cf70f808f 0000558d8eb2c48d 0000000000000141 0000000000000033 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000181 0000000000000033 310034746e657600 317761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000