last executing test programs: 59.528524699s ago: executing program 2 (id=924): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@host, 0x7}, 0x1, 0x0, 0x8}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f01c4fd8eabb5611b655e5f65991c3e1e6f89550928b713582f37d43e4b35a9f7a5b12d01438c9c419900b0e3001000"}, 0x48, r1) (async) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f01c4fd8eabb5611b655e5f65991c3e1e6f89550928b713582f37d43e4b35a9f7a5b12d01438c9c419900b0e3001000"}, 0x48, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000640)='asymmetric\x00', &(0x7f0000000600)) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000640)='asymmetric\x00', &(0x7f0000000600)) keyctl$link(0x8, r2, r1) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) 59.372849553s ago: executing program 2 (id=925): syz_emit_ethernet(0x52, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x8, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, "bb653c93"}]}}}}}}}}, 0x0) r0 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={r4, @in6={{0xa, 0x4e23, 0x10001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}}, 0x7, 0xfff, 0x4, 0xd, 0x19, 0x1, 0x6}, 0x9c) 59.331656776s ago: executing program 2 (id=927): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {'\x00\x00\x00\x00\a\x00'}, 0x0, 0xfffffffffffffffc, 0x2}}}, 0x118) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000100)) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002100010000000000fddbdf25fc000000000000000000000000000001fc020000000000000000000000000001fffc0000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000005000110000000000000009000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000e00000010000000000000000000000003c00000000000000020008002c001300ff010000000000000000000000000001fe8000000000000000000000000000bb0000000002"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 59.134736958s ago: executing program 2 (id=929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000309000000000000004000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40088c0}, 0x40) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x25dfdbfe, {}, [@CGW_CS_XOR={0x8, 0x5, {0x2, 0x4, 0x4, 0x8}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x1, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "1a0b6e8c6211c9db"}, 0x5}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004884}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x7, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r7) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) r9 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r10 = dup(r9) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x0}) ioctl$RTC_WIE_OFF(r10, 0x7010) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 58.98160598s ago: executing program 2 (id=930): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/247, 0xf7}], 0x1, 0x40000004, 0x9) 58.75011519s ago: executing program 2 (id=931): prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) (async) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0xffff, 0x800c1) (rerun: 32) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x400eaf7, 0x80000) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000740)=""/212) (async) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) getsockname$packet(r2, 0x0, &(0x7f0000000140)) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x5) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)=0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x8000000000000001) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) (async) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') (async, rerun: 64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (rerun: 64) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x2) (async) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009975, r7, 0x0) (async) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x810, r6, 0x0) migrate_pages(r5, 0x40, &(0x7f00000000c0), &(0x7f0000000180)=0x1) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0xffffffffffffffff) 58.656127711s ago: executing program 32 (id=931): prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) (async) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async, rerun: 32) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0xffff, 0x800c1) (rerun: 32) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x400eaf7, 0x80000) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000740)=""/212) (async) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) getsockname$packet(r2, 0x0, &(0x7f0000000140)) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x5) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000040)=0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x8000000000000001) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) (async) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') (async, rerun: 64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (rerun: 64) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x2) (async) r8 = fanotify_init(0xf00, 0x1) fanotify_mark(r8, 0x105, 0x40009975, r7, 0x0) (async) fallocate(r6, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x810, r6, 0x0) migrate_pages(r5, 0x40, &(0x7f00000000c0), &(0x7f0000000180)=0x1) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0xffffffffffffffff) 2.618713308s ago: executing program 1 (id=1153): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x4, @loopback, 0x6bfa0633}}}, &(0x7f0000000000)=0x84) r1 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000003c0)={0x0, 0x1000, 0x0, '\x00', &(0x7f0000000240)=0x7}) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32=r3], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r5}, 0x38) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.251613594s ago: executing program 1 (id=1155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="320000001000370400170000801c8f4d74d0b1395514c3dc4404624700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100622f6e64000000000c19028008001200d80d00001c240c6952ebaa75d69c84d8c13348a4127c4c77bc3f86e9992fad6822648ff7c09a6b69c0f6c6facacc8f47132a6b3cba5260c90692ab9c0e3ed99588550ee9bb5a43c36397e26672dec1802484bbdf1f71b72a2740b44462d483ce03295304c4e064e3d2b411893038aead7115a713b38ccdd50b7513c7839f8f40cadc467712b22918a8522b504242247a30c0d561991a9bb94341a488db7d5d800a9ece3ae016f2f779fcdc1aa8ed4a8e6de0136591f280f0c09fec388dee72eb6a436eaff875b68bec546aaa54cdaf75d4ef69"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="320000001000370400170000801c8f4d74d0b1395514c3dc4404624700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100622f6e64000000000c19028008001200d80d00001c240c6952ebaa75d69c84d8c13348a4127c4c77bc3f86e9992fad6822648ff7c09a6b69c0f6c6facacc8f47132a6b3cba5260c90692ab9c0e3ed99588550ee9bb5a43c36397e26672dec1802484bbdf1f71b72a2740b44462d483ce03295304c4e064e3d2b411893038aead7115a713b38ccdd50b7513c7839f8f40cadc467712b22918a8522b504242247a30c0d561991a9bb94341a488db7d5d800a9ece3ae016f2f779fcdc1aa8ed4a8e6de0136591f280f0c09fec388dee72eb6a436eaff875b68bec546aaa54cdaf75d4ef69"], 0x3c}}, 0x0) 2.250677341s ago: executing program 3 (id=1156): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000180)=[{0x80000006}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000180)=[{0x80000006}]}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000001400)) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 2.096208639s ago: executing program 4 (id=1157): syz_emit_ethernet(0x72, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @dev}, [], "8b1a14005c00f71244c85425"}}}}}}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0xa0, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcc4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x89}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x4044020) 1.971616185s ago: executing program 1 (id=1158): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/keycreate\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) mount(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000000)='afs\x00', 0x3080000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)={0x100, 0x0, 0x27}, 0x18) 1.969868637s ago: executing program 3 (id=1159): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0x12) sendfile(r2, r0, 0x0, 0x4) 1.903232281s ago: executing program 1 (id=1160): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r3, 0x6}, 0x80, &(0x7f0000000400)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59cdd8a174caf38d7adc18f6b256e8be0000", 0x24}, {&(0x7f0000000540)="f861eab0bb1a8d0d1154d54ecea0f66b736c95f688", 0x15}, {&(0x7f0000000300)="66ff47f9e621", 0x6}], 0x4}, 0x40011) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$char_usb(r5, &(0x7f0000000000)='-0', 0x2) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000340)=@req={0x28, &(0x7f0000000280)={'dummy0\x00', @ifru_names='pim6reg\x00'}}) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x41}, 0x40000) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="110500000000feffffff05000000cc74ee8a6fcb63fac3e66dd8d1b8791768e2c05066e66a65833dba1d414e99334a9d8c4f01b897e3c99f02492a46328052fc1ba0f50353133031004aff5f2e48767db7a363ee4bfbe136f5fb93a6355f168eb0e3ea92255c215c45047a2d785b194af5b2e2ae56de51987669c76a6e0c5512e61af121889cb38b3ab62b2054fe5cc4cfdf94d5cc62f900fcb594e110c304a25bc6b2b33e8e89bbe95d16966edce93cc5b273012aca2a8f922cb635f8c6be5fa74d5834baf992e4a913414b26c410f43d755aa23b09577b4fbb55513e18bebf6ec18f3f4dec3254660487b4a1780102f30dfba1bbf0b944fcfb83c86b7c5c37b3f8d9480a9380758c428e7d3f45aff3874a78"], 0x21}}, 0xa000000) 1.901701532s ago: executing program 4 (id=1161): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x17, 0x0, &(0x7f0000000200)) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) clock_gettime(0xd10dae85e4692df3, 0x0) r3 = dup3(r1, r2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000000)) 1.79525819s ago: executing program 3 (id=1163): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1505000000000000140012800b0001006970766c616e00000400028008001a8004400fd3531675de7127a975ced1247fe80fc2834cc94bffe81dbe96b1dc780233f69f1a2e2898c49b98a7fa7bd44ac4b1c2e5e9c52a71c9fc5065a3046060616348"], 0x3c}}, 0x40) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000000080)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000440)=[@acquire={0x40046305, 0x1}], 0x0, 0x0, 0x0}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f00000001c0)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01864c1, &(0x7f0000000200)={r6}) ioctl$PPPIOCGIDLE32(r4, 0x8008743f, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001e00995e00000000000000000c00000000000000000001"], 0x1c}], 0x1}, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000400)={&(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f0000000480)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x2, r9, 0xe0e0e0e0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) fsopen(&(0x7f00000004c0)='ocfs2\x00', 0x1) ioctl$CEC_ADAP_G_PHYS_ADDR(r4, 0x80026101, &(0x7f0000000500)) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r10, 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r12 = syz_open_dev$dri(&(0x7f0000000100), 0x800005, 0x3) ioctl$DRM_IOCTL_MODE_GETFB(r12, 0xc01c64ad, &(0x7f0000000080)={r11}) 1.688558428s ago: executing program 1 (id=1164): syz_emit_ethernet(0x26, &(0x7f00000007c0)={@link_local, @random="f070a23f0d69", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x18, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb"}}}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ppoll(&(0x7f0000000180)=[{r1, 0x2404}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xffff, 0x2, 0x4}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYBLOB="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"], 0x50) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r5, 0x0, r5, 0x0, 0x7, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3021, 0xb, 0x28011, r4, 0x1000) 1.687818883s ago: executing program 4 (id=1165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getneigh={0x14, 0x1e, 0x10, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000814) r1 = gettid() syz_open_dev$dvb_demux(&(0x7f0000000100), 0x7fff, 0x660800) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000140)={'ipvlan0\x00', 0x8, 0x4}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x2, r0, 'id0\x00'}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000400)={&(0x7f00000002c0), 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x80, 0x7f7, {0x0, 0x2710}, {r4, r5/1000+10000}, {0x3}, 0x1, @canfd={{0x4, 0x1, 0x1}, 0x2f, 0x3, 0x0, 0x0, "2602b9419c139367abf82db2167c7d7e5fd811ba530dbdc13412528bc9632ec797c0035a02d5ec59ff93eac60d5edd78b4d8b6dba7e1cd2c8cd9a1605325114b"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x2040101) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) futex(&(0x7f0000000440)=0x1, 0xd, 0x1, &(0x7f00000004c0)={r6, r7+60000000}, &(0x7f0000000500)=0x1, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000580), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x3, 0x0, {{0x6, 0x4, 0x0, 0x2b, 0x18, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @remote, {[@ra={0x94, 0x4}]}}}}}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000680)={@empty, 0x0}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x7800, 0x4fa334f38eaaaa6b, 0x8, 0x4, {{0x44, 0x4, 0x2, 0x1, 0x110, 0x64, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x34, 0x21, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff9}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x5}]}, @ssrr={0x89, 0x7, 0x6, [@dev={0xac, 0x14, 0x14, 0x31}]}, @generic={0x14a, 0x3, '5'}, @timestamp_prespec={0x44, 0x34, 0x6d, 0x3, 0x5, [{@multicast1, 0xfffffffc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010101, 0x1}, {@private=0xa010100, 0x4}, {@loopback, 0x8c9}, {@rand_addr=0x64010102, 0xffffff96}]}, @timestamp_prespec={0x44, 0x24, 0xb3, 0x3, 0x8, [{@private=0xa010100, 0x1}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@remote, 0xf0ba}]}, @lsrr={0x83, 0x7, 0xce, [@rand_addr=0x64010102]}, @timestamp={0x44, 0xc, 0x67, 0x0, 0x0, [0x0, 0x8001]}, @cipso={0x86, 0x46, 0x3, [{0x2, 0xe, "0a9f5e016f6445c2a91f1d2d"}, {0x0, 0xf, "45d3b9210b546e18ef71126ae0"}, {0x1, 0x7, "1e5af976a3"}, {0x5, 0x10, "b1a7e8fb5c4ebf15053f3d4a6f26"}, {0x1, 0x2}, {0x5, 0x5, "5ca1c0"}, {0x2, 0x5, '/+U'}]}, @timestamp_addr={0x44, 0xc, 0x96, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x7}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000980)={'syztnl0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x4, 0xfa, 0x5, 0x6, 0x38, @loopback, @local, 0x8000, 0x60, 0x3, 0x7}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000009c0)={0x0, @broadcast, @dev}, &(0x7f0000000a00)=0xc) getpeername$packet(r3, &(0x7f0000000a40)={0x11, 0x0, 0x0}, &(0x7f0000000a80)=0x14) getsockname$packet(r3, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', 0x0, 0x1, 0x1, 0x366800, 0x2, {{0xd, 0x4, 0x2, 0x2, 0x34, 0x68, 0x0, 0x0, 0x2f, 0x0, @empty, @empty, {[@lsrr={0x83, 0x1b, 0xca, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x35}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @end, @ra={0x94, 0x4}]}}}}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000c40)={0x0, @loopback, @initdev}, &(0x7f0000000c80)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000cc0)={0x0, @empty, @loopback}, &(0x7f0000000d00)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x6aa1dc67302925ba}, 0xc, &(0x7f0000001280)={&(0x7f0000000d40)={0x530, r8, 0x10, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r10}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r14}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0xa8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcbf}}}]}}, {{0x8, 0x1, r17}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3da0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r19}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r21}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x530}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sched_rr_get_interval(r1, &(0x7f0000001300)) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001340)=""/4, &(0x7f0000001380)=0x4) 1.592629651s ago: executing program 3 (id=1167): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) ioctl$LOOP_CONFIGURE(r0, 0x80081270, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000000010000000000062ca"}}) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000f1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$char_usb(r2, &(0x7f00000008c0)='-0', 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e22, @remote}}, 0xb6, 0x5}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r3, 0xc6b8, 0xc5, 0x6, 0x0, 0x3dd}, 0x14) 1.592223575s ago: executing program 1 (id=1168): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="91800300000000001800128008000100677265000c0002800600020021"], 0x4c}}, 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x8, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000000) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') writev(r8, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010826bd7000fedbdf250b000000080003005ccb94a27055f006ec75471c758b44b59febe85aa907d65126940b16951fc152bb9bbcedc3ad6025a4e8d3eaa02982e2705b966f86054e05339141b31252c16153b62cff4397d918448156a40c35920b4afc2eddc3e00aadeddaee809bd75f6de3165e905e272557b8498a08d89a1a1633ff96e3ccdebc5488060e2b5ed26e7fdb6a26892b0c6fdd7716d450daf8b4994e60021ee0816f", @ANYRES32=r12, @ANYBLOB="07000a009fa19c00"], 0x24}}, 0x0) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) 1.444498772s ago: executing program 3 (id=1169): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f00004d7000/0x3000)=nil, 0x3000, 0x4, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x8, 0x9}, {0x4}, {0x2, 0x1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r12 = dup(r1) write$binfmt_aout(r12, &(0x7f00000000c0)=ANY=[@ANYBLOB="070181028e0200005a0200002000000093017f0a26da4d9fb5f7b00000080000"], 0x20) fallocate(r5, 0x78, 0x0, 0x72000) r13 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x5, 0x1, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 1.10154554s ago: executing program 0 (id=1170): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x20, {0xa, 0x0, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}, 0x3a) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0xd0d, @loopback}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000080)) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) r8 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x7f, 0x10, 0x8, 0x1830}, &(0x7f0000000080)=0x18) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="300001000000000000000000074d7699f200000072d097f0d4fc0b5e009e90bd1d7d25dacb154a6cf54095", @ANYRES32=0x0, @ANYBLOB="4400440000000d000100ffff"], 0x30}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000180)=0x2) r11 = fsopen(&(0x7f0000000040)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r11, 0x0, &(0x7f0000000000)='nolazytime\x00', 0x0, 0x0) 888.292218ms ago: executing program 3 (id=1171): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010109}]}, &(0x7f0000000280)=0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0x9}, &(0x7f0000000200)=0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0xf0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, 0x110, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r5 = socket$key(0xf, 0x3, 0x2) r6 = fanotify_init(0x200, 0x0) r7 = dup(r6) fanotify_mark(r7, 0x20, 0x0, r7, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x30}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x2010040, &(0x7f0000000000)={[{@name={'name', 0x3d, 'xattr'}}, {@name={'name', 0x3d, 'cpuacct'}}]}) sendto$inet6(r0, &(0x7f0000000080)="b37c5f20be5663b6fb4f1ec5e75a8ed04973bb16972236943758efc36deb69838ba17c9b7be3b7a389035086aea8764e3ea4327ffea3886524bcd488d489b21f9d38ef014e2d2f3dd46a741707c5ebc07ca3a0", 0x53, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x807, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc5f}, 0xfd2e) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000240)={r3, 0xe439}, &(0x7f0000000300)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ffffffe8000000000003000000000000000000000000b15d415f4be8acb292adfa7716bf82ad9bb875adfd2718bf80ae8cdf84"], 0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) 802.385128ms ago: executing program 0 (id=1172): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7004000080000000000000000000000400000000c8a97749a0e333adf7a450c79852f59ef76f124902e4a823e4923515a2208c8f1f09db033ddcc0b50e3b658420ca92daea513b2a3ff264314fb69efb5da605c622e2570f2b7930e4cb05eeb3a003f3896ed51b31059bac24ee81219f191c52be312dede835865335fe4ca1a8451a898efc8b1b16f3d225750a724e66f65ddef9491294641a70a6e6251bea3e9691afd76fce1370ed9021f46334dd3c302b22dc693ab9f991c3e1f2ce7f26a754ddf2eaff4fdc24337244427e8a94dc32e85e04343fcfc8db0f64a4320f8846046269401ef14b7b785240", @ANYRES32=r1, @ANYRES8=r0], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r3, 0x4) 698.303719ms ago: executing program 0 (id=1173): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c"], 0xfe33) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r2], 0xfe33) 697.281366ms ago: executing program 4 (id=1174): r0 = socket(0xa, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x4c63f37b255d8218) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x20140c4, 0x0) chroot(&(0x7f0000000b80)='./file0\x00') r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x3) openat$cgroup(r4, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x9, 0x0, 0x0, 0x9}) r5 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) madvise(&(0x7f000096f000/0x2000)=nil, 0x2000, 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e22, 0x4e22}}]}, 0x24}}, 0x0) sendmsg$unix(r0, &(0x7f0000002c80)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000001380)="56b520427f1ac120ddef77ba8b60dd643d0abb9d4969e8e39a810d91a9201322a4dc4e6f7ec3930d", 0x28}], 0x3d, &(0x7f0000002b40)=ANY=[@ANYBLOB="100000000100000001000000"], 0x10, 0xfc2ccf08d2927bc0}, 0x4008040) 530.757259ms ago: executing program 0 (id=1175): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0xfffffffc, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x1, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x13, 0x2}, 0x8, 0x20400000, 0xc, 0x0, 0x0, 0x20000, 0x0}) 267.319687ms ago: executing program 0 (id=1176): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r1, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl724\x00', [0x8001, 0x3, 0x1, 0xffffffff, 0x0, 0xcc7, 0x8, 0x7, 0xe, 0x2, 0x6, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x1ae, 0xfffffff5, 0x1]}) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/141) ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f0000000000)={0x4, 0xff, 0x3, 0x0, 0x1, 0x227, 0x2}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r6, 0x4068aea3, &(0x7f0000000100)) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000380)={[{0x0, 0x2, 0x1f, 0x8, 0x4, 0x8, 0x3, 0xad, 0x9f, 0x5, 0x2, 0x5, 0x2}, {0x1, 0x7, 0x8, 0x32, 0x7f, 0xf, 0x0, 0x1a, 0x3, 0x2, 0x5, 0x9, 0x8}, {0x3, 0xa1bd, 0x1, 0x5, 0x6, 0x4, 0x7, 0x7, 0x5, 0x9, 0xc, 0x8, 0x4}], 0xfffffc00}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000002c0)={'aio_iiro_16\x00', [0xfff, 0x8000, 0x1, 0x0, 0xa, 0x0, 0x0, 0x7, 0x80000000, 0x7, 0x9, 0x7, 0x20c, 0x4, 0x52, 0x3, 0x7, 0x4, 0x5, 0x3, 0x80000000, 0x8, 0xc47a, 0x8, 0x2, 0x7, 0x9, 0x5, 0xd6, 0x12, 0x72e6, 0x5]}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r10, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c64d2, &(0x7f0000000180)={r11, 0x80000}) open$dir(&(0x7f0000000080)='./file0\x00', 0x11980, 0x8) 167.761604ms ago: executing program 4 (id=1177): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180), 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1e}}], 0x2, 0x0) (async) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000003c0)={r6, 0x0, 0x20}, 0xc) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000004c0)={r6, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}, 0x8}}, [0x7fffffff, 0x401, 0xe, 0x100, 0x5, 0x3, 0x6, 0x2, 0x2, 0x9, 0x8, 0x1, 0x1, 0xeb8, 0xfffffffffffffff9]}, &(0x7f0000000180)=0x100) (async) r8 = syz_socket_connect_nvme_tcp() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000280)) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYBLOB="ba7d0a653a0350559d5b5c5efb9effae1a44963a0cc78b285687a660f5281765da59230ccd57097576b5cf2e87f088081c0cb3445853faf4fb962372201003b037544a3735fe8c671fb96ae8eb0eb8a4965356f0858a", @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYBLOB="c03cb13b1d07fb764b460b60ae228b6fe8f2ed89c6840dfcd94bed40f90aeb137fa27367df1d6e3994bed3b7ff59a862de6696672aec71052acd5a68f5684965010727cf893d9ef41f6d7d6eb599609908c631b3bad88cc7b050f8568d4f13d03a6db6eea51d0dafe62d4d9e3bdd0aa19e47444261e97408a2d2b6efe9f7bcf03fef880fd90725f90c6266a901d4ec8b0b9b4f53ef92eb1367dcdb6b5d9801b8865f0cf0c9ff7ec9fa3694d6a05cd886048ffe7be12d1adcf2169206ebed27f649d3da637718aa54daa9456a6f226c22041bbedcb86ad723ff81581d0dfe0f578803e144806b81bd", @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r10, @ANYRES16=r7], 0x4c}}, 0x884) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000480)=[{0x20, 0x9, 0x0, 0xfffff020}, {0x6, 0x80, 0x1, 0x8000}]}, 0x10) (async, rerun: 32) r12 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_int(r12, 0x29, 0x43, &(0x7f0000000140)=0xffffffff, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000000b4a00800000000000000000000000009500"], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) (async, rerun: 32) r13 = socket(0x1e, 0x4, 0x0) (rerun: 32) setsockopt$packet_tx_ring(r13, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) (async) r14 = dup3(r13, 0xffffffffffffffff, 0x0) recvmmsg$unix(r14, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000005000000050000000800000000100000", @ANYRES32, @ANYBLOB="f3ffffffffffffff0000", @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="0100000000000000020000000d00"/28], 0x50) 275.047µs ago: executing program 0 (id=1178): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000840), 0x1c1103, 0x0) ioctl$DVD_WRITE_STRUCT(r0, 0x5392, &(0x7f0000000000)=@physical={0x0, 0x1, [{0x2, 0xd, 0x5, 0x2, 0xe, 0x0, 0x3, 0x4, 0x2, 0x1, 0xff, 0x8, 0x6}, {0x6, 0x3, 0x9, 0x8, 0x9, 0x1, 0x0, 0x4, 0xe, 0x0, 0x8, 0x7, 0x6}, {0xb, 0x9, 0xa, 0x7, 0xc, 0x1, 0x2, 0x6, 0x6, 0x1, 0x0, 0x1, 0x1ff}, {0x6, 0x1, 0x6, 0x6, 0x1, 0x0, 0x3, 0x2, 0x9, 0x1, 0xc442, 0x4, 0x276}]}) (async) ioctl$DVD_WRITE_STRUCT(r0, 0x5392, &(0x7f0000000000)=@physical={0x0, 0x1, [{0x2, 0xd, 0x5, 0x2, 0xe, 0x0, 0x3, 0x4, 0x2, 0x1, 0xff, 0x8, 0x6}, {0x6, 0x3, 0x9, 0x8, 0x9, 0x1, 0x0, 0x4, 0xe, 0x0, 0x8, 0x7, 0x6}, {0xb, 0x9, 0xa, 0x7, 0xc, 0x1, 0x2, 0x6, 0x6, 0x1, 0x0, 0x1, 0x1ff}, {0x6, 0x1, 0x6, 0x6, 0x1, 0x0, 0x3, 0x2, 0x9, 0x1, 0xc442, 0x4, 0x276}]}) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000880)) 0s ago: executing program 4 (id=1179): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r2, &(0x7f0000000140)=@OVL_FILEID_V1={0x18, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e837282efe0868327a31a705ec978547"}}}, 0x830600) (async) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x8) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 0s ago: executing program 3 (id=1180): mkdir(&(0x7f0000000080)='./file1\x00', 0xb) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x12, &(0x7f0000000200)={'trans=virtio,', {[{@noextend}]}}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xb8764) kernel console output (not intermixed with test programs): ontrol_msg returned -32 [ 77.898769][ T5949] usbtmc 6-1:16.0: can't read capabilities [ 78.139515][ T7043] mkiss: ax0: crc mode is auto. [ 78.178000][ T7045] syzkaller0: entered promiscuous mode [ 78.180750][ T7045] syzkaller0: entered allmulticast mode [ 78.505398][ T7055] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 78.523082][ T7055] xt_hashlimit: size too large, truncated to 1048576 [ 78.561416][ T7056] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 78.626317][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.297'. [ 78.861879][ T7061] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 78.870166][ T7061] ref_ctr decrement failed for inode: 0x1b3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802af6e200 [ 78.878494][ T7061] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: 0, delta: -1 [ 78.898900][ T7061] ref_ctr decrement failed for inode: 0x1b3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802af6e200 [ 78.907907][ T7061] uprobe: syz.2.298:7061 failed to unregister, leaking uprobe [ 78.990089][ T6149] usb 6-1: USB disconnect, device number 4 [ 79.083613][ T7077] netlink: 'syz.0.303': attribute type 6 has an invalid length. [ 79.088914][ T7079] netlink: 'syz.0.303': attribute type 6 has an invalid length. [ 79.090403][ T7075] syzkaller0: entered promiscuous mode [ 79.132404][ T7075] syzkaller0: entered allmulticast mode [ 79.383555][ T7085] comedi comedi3: pcl812: I/O port conflict (0x9,16) [ 79.388420][ T7087] program syz.3.305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.507924][ T7093] Cannot find add_set index 1 as target [ 79.538446][ T7091] netlink: 'syz.0.307': attribute type 9 has an invalid length. [ 79.794379][ T7107] geneve2: entered promiscuous mode [ 79.807834][ T7107] geneve2: entered allmulticast mode [ 79.813021][ T6339] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 79.832278][ T7117] devpts: Unknown parameter 'mx' [ 79.877813][ T6339] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 79.905392][ T6339] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 79.924731][ T99] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 79.931013][ T7122] nftables ruleset with unbound chain [ 79.937985][ T7113] syzkaller0: entered promiscuous mode [ 79.938702][ T40] kauditd_printk_skb: 118 callbacks suppressed [ 79.938715][ T40] audit: type=1400 audit(1770471461.283:575): avc: denied { bind } for pid=7119 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.941021][ T7113] syzkaller0: entered allmulticast mode [ 79.947139][ T40] audit: type=1400 audit(1770471461.293:576): avc: denied { write } for pid=7119 comm="syz.0.318" path="socket:[15336]" dev="sockfs" ino=15336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.044513][ T40] audit: type=1400 audit(1770471461.383:577): avc: denied { bind } for pid=7119 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.181096][ T40] audit: type=1400 audit(1770471461.523:578): avc: denied { ioctl } for pid=7127 comm="syz.2.319" path="socket:[15842]" dev="sockfs" ino=15842 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.319735][ T40] audit: type=1400 audit(1770471461.643:579): avc: denied { create } for pid=7131 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 80.345118][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 80.359518][ T40] audit: type=1400 audit(1770471461.683:580): avc: denied { ioctl } for pid=7131 comm="syz.0.320" path="socket:[14068]" dev="sockfs" ino=14068 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 80.475969][ T40] audit: type=1400 audit(1770471461.813:581): avc: denied { mount } for pid=7134 comm="syz.0.321" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.478017][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 80.620996][ T40] audit: type=1400 audit(1770471461.943:582): avc: denied { append } for pid=7137 comm="syz.3.323" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 80.714551][ T40] audit: type=1400 audit(1770471462.053:583): avc: denied { write } for pid=7142 comm="syz.1.322" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.810393][ T40] audit: type=1400 audit(1770471462.123:584): avc: denied { name_bind } for pid=7140 comm="syz.2.324" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 80.906112][ T7139] netlink: 'syz.3.323': attribute type 39 has an invalid length. [ 80.967896][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 81.231108][ T7151] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 81.299069][ T59] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 83.929095][ T29] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 86.505327][ T24] cfg80211: failed to load regulatory.db [ 91.547532][ T7193] netlink: 72 bytes leftover after parsing attributes in process `syz.0.328'. [ 91.569786][ T7193] netlink: 96 bytes leftover after parsing attributes in process `syz.0.328'. [ 91.582747][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 91.582764][ T40] audit: type=1400 audit(1770471472.923:600): avc: denied { create } for pid=7197 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.612188][ T7200] xt_hashlimit: overflow, rate too high: 0 [ 91.630891][ T40] audit: type=1400 audit(1770471472.933:601): avc: denied { create } for pid=7198 comm="syz.2.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.639645][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 91.659384][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 91.664040][ T7193] netlink: 'syz.0.328': attribute type 11 has an invalid length. [ 91.667944][ T7193] netlink: 'syz.0.328': attribute type 7 has an invalid length. [ 91.674537][ T40] audit: type=1400 audit(1770471472.943:602): avc: denied { map } for pid=7198 comm="syz.2.330" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.720395][ T7196] netlink: 'syz.1.329': attribute type 13 has an invalid length. [ 91.740386][ T7196] syz_tun: refused to change device tx_queue_len [ 91.754401][ T7205] --map-set only usable from mangle table [ 91.759126][ T40] audit: type=1400 audit(1770471472.943:603): avc: denied { read write } for pid=7198 comm="syz.2.330" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.823653][ T40] audit: type=1400 audit(1770471472.963:604): avc: denied { read } for pid=7198 comm="syz.2.330" path="socket:[14098]" dev="sockfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.824838][ T7207] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 91.875338][ T40] audit: type=1400 audit(1770471473.053:605): avc: denied { connect } for pid=7197 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.884904][ T40] audit: type=1400 audit(1770471473.093:606): avc: denied { unlink } for pid=7192 comm="syz.0.328" name="#5" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.908173][ T40] audit: type=1400 audit(1770471473.103:607): avc: denied { mount } for pid=7192 comm="syz.0.328" name="/" dev="overlay" ino=415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 92.009900][ T40] audit: type=1400 audit(1770471473.160:608): avc: denied { create } for pid=7192 comm="syz.0.328" name="#7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.018153][ T40] audit: type=1400 audit(1770471473.160:609): avc: denied { link } for pid=7192 comm="syz.0.328" name="#7" dev="tmpfs" ino=423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 92.270959][ T7228] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 92.273641][ T7228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.281042][ T7228] vhci_hcd vhci_hcd.0: Device attached [ 92.442692][ T7229] vhci_hcd: connection closed [ 92.445622][ T6345] vhci_hcd vhci_hcd.2: stop threads [ 92.475252][ T6345] vhci_hcd vhci_hcd.2: release socket [ 92.479965][ T60] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 92.491626][ T6345] vhci_hcd vhci_hcd.2: disconnect device [ 92.558842][ T7237] netlink: 37 bytes leftover after parsing attributes in process `syz.2.338'. [ 92.638449][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.331'. [ 92.685924][ T60] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.706455][ T60] usb 6-1: config 0 has no interfaces? [ 92.708564][ T60] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 92.712300][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.728943][ T60] usb 6-1: config 0 descriptor?? [ 92.952073][ T5294] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 92.991762][ T60] usb 6-1: USB disconnect, device number 5 [ 93.136426][ T6149] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 93.269268][ T7255] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 93.283650][ T7255] netlink: 'syz.0.345': attribute type 2 has an invalid length. [ 93.294487][ T7255] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 93.297641][ T7255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.345'. [ 93.319072][ T6149] usb 7-1: Using ep0 maxpacket: 32 [ 93.327588][ T6149] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 93.372625][ T6149] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 93.376396][ T6149] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 93.415317][ T6149] usb 7-1: Product: syz [ 93.417163][ T6149] usb 7-1: Manufacturer: syz [ 93.419210][ T6149] usb 7-1: SerialNumber: syz [ 93.426726][ T7259] netlink: 'syz.0.347': attribute type 1 has an invalid length. [ 93.461698][ T6149] usb 7-1: config 0 descriptor?? [ 93.492432][ T7246] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 93.558362][ T7259] bond1: entered promiscuous mode [ 93.566429][ T7259] bond1: entered allmulticast mode [ 93.569177][ T7259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.642380][ T7264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.348'. [ 93.778011][ T7264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7264 comm=syz.0.348 [ 93.778299][ T6149] usb 7-1: USB disconnect, device number 4 [ 93.892548][ T7275] vlan0: entered allmulticast mode [ 93.906509][ T7275] veth0_vlan: entered allmulticast mode [ 93.988660][ T7282] fuse: Unknown parameter '' [ 94.001873][ T7281] cgroup: Name too long [ 94.028065][ T7281] macvtap1: entered promiscuous mode [ 94.030510][ T7281] macvtap1: entered allmulticast mode [ 94.034024][ T7281] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 94.043273][ T7281] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 94.052964][ T7281] team0: Device macvtap1 failed to register rx_handler [ 94.061901][ T7278] ptrace attach of "/syz-executor exec"[7284] was attempted by "/syz-executor exec"[7278] [ 94.078686][ T7281] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 94.082099][ T7281] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 94.575773][ T7296] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 94.897188][ T7309] random: crng reseeded on system resumption [ 95.050544][ T7315] overlay: Unknown parameter 'smackfstransmute' [ 95.242253][ T7318] exFAT-fs (nullb0): invalid boot record signature [ 95.252752][ T7318] exFAT-fs (nullb0): failed to read boot sector [ 95.260694][ T7318] exFAT-fs (nullb0): failed to recognize exfat type [ 95.496217][ T7320] netlink: 'syz.1.361': attribute type 14 has an invalid length. [ 95.518824][ T7321] netlink: 'syz.1.361': attribute type 14 has an invalid length. [ 96.258646][ T7351] input: syz0 as /devices/virtual/input/input7 [ 96.344162][ T7359] gfs2: path_lookup on \\8< $$&6n @M, priority 0 [ 132.083917][ T8469] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 132.087575][ T8469] cramfs: wrong magic [ 132.173900][ T8469] netlink: 'syz.3.704': attribute type 2 has an invalid length. [ 132.183358][ T8469] netlink: 244 bytes leftover after parsing attributes in process `syz.3.704'. [ 132.212263][ T8469] netlink: 'syz.3.704': attribute type 21 has an invalid length. [ 132.267731][ T8477] netlink: 'syz.3.704': attribute type 21 has an invalid length. [ 132.330739][ T8469] netlink: 156 bytes leftover after parsing attributes in process `syz.3.704'. [ 132.383106][ T8461] tipc: Resetting bearer [ 132.525538][ T60] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 132.754272][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 132.760483][ T60] usb 7-1: config 2 interface 0 has no altsetting 0 [ 132.770305][ T60] usb 7-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 132.774231][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.778161][ T60] usb 7-1: Product: syz [ 132.780849][ T60] usb 7-1: Manufacturer: syz [ 132.783391][ T60] usb 7-1: SerialNumber: syz [ 133.227480][ T8491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=517 sclass=netlink_route_socket pid=8491 comm=syz.1.707 [ 137.178925][ T8461] tipc: Disabling bearer [ 137.185865][ T8477] netlink: 156 bytes leftover after parsing attributes in process `syz.3.704'. [ 137.190158][ T59] tipc: Node number set to 1587417136 [ 137.240506][ T24] usb 7-1: USB disconnect, device number 7 [ 137.566627][ T8501] sp0: Synchronizing with TNC [ 137.866463][ T40] audit: type=1400 audit(1770471516.209:806): avc: denied { setattr } for pid=8524 comm="syz.3.714" name="ptyqb" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 137.912783][ T8526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.328843][ T8538] block nbd3: NBD_DISCONNECT [ 138.442753][ T8538] block nbd3: Disconnected due to user request. [ 138.445647][ T8538] block nbd3: shutting down sockets [ 138.594990][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 138.636650][ T8548] netlink: 100 bytes leftover after parsing attributes in process `syz.3.719'. [ 138.643864][ T40] audit: type=1400 audit(1770471516.939:807): avc: denied { ioctl } for pid=8547 comm="syz.3.719" path="socket:[23946]" dev="sockfs" ino=23946 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.789730][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 138.801457][ T8555] bridge0: entered promiscuous mode [ 138.830961][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 138.856134][ T8555] macvlan3: entered promiscuous mode [ 138.864880][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 138.869918][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.877138][ T8553] team_slave_0: entered promiscuous mode [ 138.880539][ T8553] team_slave_1: entered promiscuous mode [ 138.887267][ T24] usb 7-1: config 0 descriptor?? [ 138.887458][ T8553] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 139.011099][ T40] audit: type=1400 audit(1770471517.275:808): avc: denied { listen } for pid=8560 comm="syz.3.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.038428][ T8565] tmpfs: Bad value for 'mpol' [ 139.228299][ T8571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.726'. [ 139.260121][ T40] audit: type=1400 audit(1770471517.509:809): avc: denied { create } for pid=8573 comm="syz.3.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 139.291461][ T40] audit: type=1400 audit(1770471517.509:810): avc: denied { ioctl } for pid=8573 comm="syz.3.727" path="socket:[22504]" dev="sockfs" ino=22504 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 139.415886][ T8572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.430408][ T8572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.475282][ T24] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 139.844777][ T40] audit: type=1326 audit(1770471518.061:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8588 comm="syz.0.732" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf99b9aeb9 code=0x0 [ 139.975649][ T40] audit: type=1400 audit(1770471518.182:812): avc: denied { setopt } for pid=8588 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.063907][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.734'. [ 140.075039][ T40] audit: type=1400 audit(1770471518.266:813): avc: denied { setopt } for pid=8602 comm="syz.3.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 140.196851][ T8603] sp0: Synchronizing with TNC [ 140.222801][ T40] audit: type=1400 audit(1770471518.416:814): avc: denied { bind } for pid=8606 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.272023][ T40] audit: type=1400 audit(1770471518.416:815): avc: denied { getopt } for pid=8606 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 140.299979][ T8607] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 140.390243][ T8603] mkiss: ax0: crc mode is auto. [ 140.894531][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.897389][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.916317][ T8621] openvswitch: netlink: Flow actions attr not present in new flow. [ 140.978550][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.739'. [ 141.502593][ T8633] netlink: 56 bytes leftover after parsing attributes in process `syz.3.743'. [ 141.540125][ T6018] usb 7-1: USB disconnect, device number 8 [ 141.590036][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.744'. [ 141.607335][ T8638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.726154][ T8638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.731416][ T8641] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 141.998948][ T8655] netlink: 52 bytes leftover after parsing attributes in process `syz.1.750'. [ 142.007105][ T8655] netlink: 52 bytes leftover after parsing attributes in process `syz.1.750'. [ 142.091080][ T8658] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 142.091080][ T8658] The task syz.3.749 (8658) triggered the difference, watch for misbehavior. [ 142.195519][ T8662] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.751' sets config #0 [ 142.368348][ T8679] overlayfs: failed to resolve './file1': -2 [ 142.502301][ T8686] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 142.535562][ T8686] netlink: 'syz.1.756': attribute type 2 has an invalid length. [ 142.620749][ T8687] bond1: left allmulticast mode [ 142.684103][ T8687] bridge2: left allmulticast mode [ 142.723606][ T8691] ptrace attach of "/syz-executor exec"[8692] was attempted by "/syz-executor exec"[8691] [ 142.980982][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 143.021445][ T8704] QAT: failed to copy from user. [ 143.074049][ T8704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.761'. [ 143.077023][ T8704] openvswitch: netlink: Flow key attr not present in new flow. [ 143.552998][ T8715] netlink: 'syz.2.765': attribute type 1 has an invalid length. [ 143.621204][ T8715] bond4: entered promiscuous mode [ 143.626682][ T8715] 8021q: adding VLAN 0 to HW filter on device bond4 [ 143.839603][ T8726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8726 comm=syz.0.767 [ 144.015257][ T8726] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 144.135269][ T8741] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 144.210547][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 144.210574][ T40] audit: type=1400 audit(1770471522.138:828): avc: denied { ioctl } for pid=8740 comm="syz.0.772" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x6f2c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 144.233821][ T8744] virtio-fs: tag not found [ 144.295053][ T40] audit: type=1400 audit(1770471522.156:829): avc: denied { associate } for pid=8740 comm="syz.0.772" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 144.353951][ T24] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 144.403872][ T8748] __nla_validate_parse: 1 callbacks suppressed [ 144.403888][ T8748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.774'. [ 144.553206][ T8753] : renamed from vlan0 (while UP) [ 144.629452][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 144.638808][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 144.652838][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 144.656400][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.673469][ T24] usb 7-1: config 0 descriptor?? [ 144.830818][ T8766] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=68 sclass=netlink_route_socket pid=8766 comm=syz.3.779 [ 144.962136][ T8771] tmpfs: Bad value for 'mpol' [ 144.963461][ T8768] netlink: 'syz.0.780': attribute type 1 has an invalid length. [ 145.111836][ T8773] overlayfs: failed lookup in lower (newroot/198, name='bus', err=-40): overlapping layers [ 145.116088][ T24] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 145.166227][ T24] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 145.168936][ T24] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 145.172057][ T8777] overlayfs: failed to get inode (-116) [ 145.183138][ T24] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 145.183166][ T24] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 145.183752][ T24] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 145.237496][ T8777] overlayfs: failed to get inode (-116) [ 145.581048][ T24] usb 7-1: USB disconnect, device number 9 [ 146.300165][ T8817] Cannot find set identified by id 0 to match [ 146.486517][ T40] audit: type=1400 audit(1770471524.260:830): avc: denied { read } for pid=8819 comm="syz.0.794" name="cpuset.effective_cpus" dev="9p" ino=72614243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 146.541572][ T40] audit: type=1400 audit(1770471524.326:831): avc: denied { write } for pid=8819 comm="syz.0.794" name="cpuset.effective_cpus" dev="9p" ino=72614243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 146.622816][ T40] audit: type=1400 audit(1770471524.344:832): avc: denied { setattr } for pid=8825 comm="syz.2.795" name="CAN_J1939" dev="sockfs" ino=24843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 146.937172][ T40] audit: type=1400 audit(1770471524.690:833): avc: denied { getattr } for pid=8846 comm="syz.0.800" name="/" dev="9p" ino=72614119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 146.938422][ T8847] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.014601][ T40] audit: type=1400 audit(1770471524.774:834): avc: denied { setattr } for pid=8846 comm="syz.0.800" name="file0" dev="overlay" ino=72614181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.014611][ T8847] evm: overlay not supported [ 147.058396][ T40] audit: type=1400 audit(1770471524.812:835): avc: denied { create } for pid=8846 comm="syz.0.800" name="#19" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.117257][ T40] audit: type=1400 audit(1770471524.812:836): avc: denied { associate } for pid=8846 comm="syz.0.800" name="#19" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 147.132793][ T40] audit: type=1400 audit(1770471524.812:837): avc: denied { setattr } for pid=8846 comm="syz.0.800" name="#19" dev="tmpfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.338681][ T8858] xt_hashlimit: invalid rate [ 147.868980][ T8866] netlink: 9 bytes leftover after parsing attributes in process `syz.0.807'. [ 147.915734][ T8866] gretap0: entered promiscuous mode [ 147.927502][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'. [ 147.932493][ T8866] netlink: 'syz.0.807': attribute type 11 has an invalid length. [ 147.937638][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'. [ 147.943886][ T8866] netlink: 'syz.0.807': attribute type 11 has an invalid length. [ 147.951709][ T8866] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 148.021796][ T8866] bond2 (unregistering): Released all slaves [ 148.164679][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 148.191503][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 148.264657][ T8883] binder: 8882:8883 ioctl 80084503 200000000140 returned -22 [ 148.454652][ T8892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.818'. [ 148.631166][ T8904] syz_tun: entered allmulticast mode [ 148.640599][ T8904] netlink: 'syz.3.822': attribute type 4 has an invalid length. [ 148.646632][ T8903] syz_tun: left allmulticast mode [ 149.367599][ T8937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.832'. [ 149.484388][ T10] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 149.644581][ T10] usb 7-1: device descriptor read/64, error -71 [ 149.942212][ T10] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 149.947911][ T8949] Device name not specified. [ 149.947911][ T8949] [ 150.045108][ T8953] devpts: Bad value for 'max' [ 150.109644][ T10] usb 7-1: device descriptor read/64, error -71 [ 150.211721][ T10] usb usb7-port1: attempt power cycle [ 150.304566][ T8959] netlink: 104 bytes leftover after parsing attributes in process `syz.3.841'. [ 150.505079][ T8964] Failed to get privilege flags for destination (handle=0x2:0x3) [ 150.510146][ T8964] netlink: 228 bytes leftover after parsing attributes in process `syz.0.842'. [ 150.654499][ T10] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 150.695569][ T10] usb 7-1: device descriptor read/8, error -71 [ 150.932193][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 150.932210][ T40] audit: type=1400 audit(1770471528.421:851): avc: denied { append } for pid=8976 comm="syz.0.846" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 150.993577][ T10] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 151.004235][ T10] usb 7-1: device descriptor read/8, error -71 [ 151.142157][ T10] usb usb7-port1: unable to enumerate USB device [ 151.340776][ T8979] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.363516][ T40] audit: type=1400 audit(1770471528.823:852): avc: denied { ioctl } for pid=8978 comm="syz.3.847" path="socket:[26957]" dev="sockfs" ino=26957 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.791312][ T8994] program syz.3.852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.802249][ T40] audit: type=1400 audit(1770471529.234:853): avc: denied { ioctl } for pid=8995 comm="syz.0.853" path="socket:[26969]" dev="sockfs" ino=26969 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.852568][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 151.858647][ T40] audit: type=1400 audit(1770471529.291:854): avc: denied { connect } for pid=8995 comm="syz.0.853" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 151.952961][ T8998] netlink: 'syz.1.854': attribute type 11 has an invalid length. [ 151.993692][ T9001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.996876][ T9001] IPv6: NLM_F_CREATE should be set when creating new route [ 152.422178][ T40] audit: type=1400 audit(1770471529.824:855): avc: denied { mounton } for pid=9006 comm="syz.0.857" path="/224/file0/file0" dev="9p" ino=72614153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 152.422288][ T9009] 9pnet_virtio: no channels available for device syz [ 152.464568][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.858'. [ 152.469675][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.858'. [ 152.584794][ T40] audit: type=1400 audit(1770471529.973:856): avc: denied { watch watch_reads } for pid=9013 comm="syz.3.860" path="/232" dev="tmpfs" ino=1233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.616613][ T40] audit: type=1400 audit(1770471530.001:857): avc: denied { read write } for pid=9017 comm="syz.0.859" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 152.626052][ T40] audit: type=1400 audit(1770471530.001:858): avc: denied { open } for pid=9017 comm="syz.0.859" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 152.732734][ T40] audit: type=1400 audit(1770471530.113:859): avc: denied { listen } for pid=9017 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 152.870125][ T9025] loop4: detected capacity change from 0 to 7 [ 152.874943][ T8508] buffer_io_error: 54 callbacks suppressed [ 152.874957][ T8508] Buffer I/O error on dev loop4, logical block 0, async page read [ 152.890407][ T8508] Buffer I/O error on dev loop4, logical block 0, async page read [ 152.893940][ T8508] Buffer I/O error on dev loop4, logical block 0, async page read [ 152.897936][ T8508] Buffer I/O error on dev loop4, logical block 0, async page read [ 152.952590][ T8508] Buffer I/O error on dev loop4, logical block 0, async page read [ 152.956859][ T8508] Buffer I/O error on dev loop4, logical block 0, async page read [ 152.960016][ T29] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 152.981385][ T8508] Buffer I/O error on dev loop4, logical block 0, async page read [ 153.004835][ T8508] ldm_validate_partition_table(): Disk read failed. [ 153.035207][ T8508] Buffer I/O error on dev loop4, logical block 0, async page read [ 153.038692][ T8508] Buffer I/O error on dev loop4, logical block 0, async page read [ 153.057163][ T8508] Buffer I/O error on dev loop4, logical block 0, async page read [ 153.060630][ T8508] Dev loop4: unable to read RDB block 0 [ 153.063244][ T8508] loop4: unable to read partition table [ 153.065742][ T8508] loop4: partition table beyond EOD, truncated [ 153.092630][ T9025] ldm_validate_partition_table(): Disk read failed. [ 153.095853][ T9025] Dev loop4: unable to read RDB block 0 [ 153.098403][ T9025] loop4: unable to read partition table [ 153.104988][ T9025] loop4: partition table beyond EOD, truncated [ 153.107556][ T40] audit: type=1400 audit(1770471530.469:860): avc: denied { view } for pid=9030 comm="syz.0.866" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 153.110629][ T9025] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 153.147647][ T9031] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.866'. [ 153.163915][ T29] usb 8-1: Using ep0 maxpacket: 8 [ 153.171236][ T29] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 153.175705][ T29] usb 8-1: config 0 has no interface number 0 [ 153.178986][ T29] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.200535][ T29] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 153.205254][ T29] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 87, changing to 10 [ 153.222475][ T29] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 26488, setting to 1024 [ 153.227482][ T29] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.247278][ T29] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 153.252033][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.271310][ T29] usb 8-1: config 0 descriptor?? [ 153.281979][ T9022] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.301595][ T29] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 153.655256][ T9047] QAT: failed to copy from user cfg_data. [ 153.725285][ T9043] loop9: detected capacity change from 0 to 7 [ 153.755674][ T9043] Dev loop9: unable to read RDB block 7 [ 153.758443][ T9043] loop9: unable to read partition table [ 153.769639][ T9043] loop9: partition table beyond EOD, truncated [ 153.774082][ T9043] loop_reread_partitions: partition scan of loop9 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 153.946477][ T9052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.874'. [ 153.995468][ T5949] usb 8-1: USB disconnect, device number 11 [ 154.003288][ T5949] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 154.031245][ T9059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.874'. [ 154.215221][ T9073] netlink: 'syz.0.876': attribute type 8 has an invalid length. [ 154.224928][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 154.259882][ T9075] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 155.478745][ T9102] syzkaller1: entered promiscuous mode [ 155.481244][ T9102] syzkaller1: entered allmulticast mode [ 155.928289][ T9118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.894'. [ 156.033362][ T9118] nvme_fabrics: missing parameter 'transport=%s' [ 156.041058][ T9118] nvme_fabrics: missing parameter 'nqn=%s' [ 156.200473][ T9131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.895'. [ 156.727633][ T9145] netlink: 'syz.3.900': attribute type 12 has an invalid length. [ 156.732153][ T9145] netlink: 132 bytes leftover after parsing attributes in process `syz.3.900'. [ 156.839896][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 156.839915][ T40] audit: type=1400 audit(1770471533.947:867): avc: denied { append } for pid=9146 comm="syz.2.901" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 156.961330][ T40] audit: type=1400 audit(1770471534.069:868): avc: denied { accept } for pid=9150 comm="syz.3.902" path="/244/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 157.169402][ T40] audit: type=1400 audit(1770471534.265:869): avc: denied { append } for pid=9158 comm="syz.0.904" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 157.244585][ T40] audit: type=1400 audit(1770471534.330:870): avc: denied { read } for pid=9162 comm="syz.0.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 157.301080][ T40] audit: type=1400 audit(1770471534.387:871): avc: denied { append } for pid=9163 comm="syz.3.906" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 157.841300][ T9175] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.908'. [ 158.130652][ T40] audit: type=1400 audit(1770471535.163:872): avc: denied { setopt } for pid=9181 comm="syz.2.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 158.138737][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'. [ 158.179443][ T9182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.911'. [ 158.303948][ T9190] netlink: 108 bytes leftover after parsing attributes in process `syz.0.915'. [ 158.322917][ T9191] sg_write: data in/out 1952804363/120 bytes for SCSI command 0x0-- guessing data in; [ 158.322917][ T9191] program syz.2.914 not setting count and/or reply_len properly [ 158.334243][ T9191] syzkaller0: entered promiscuous mode [ 158.336458][ T9191] syzkaller0: entered allmulticast mode [ 158.986530][ T40] audit: type=1400 audit(1770471535.939:873): avc: denied { map } for pid=9202 comm="syz.0.917" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 159.208456][ T9208] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.918'. [ 159.644360][ T46] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.649169][ T46] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.652639][ T46] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.034425][ T9216] netlink: 'syz.2.921': attribute type 4 has an invalid length. [ 160.193506][ T40] audit: type=1400 audit(1770471537.079:874): avc: denied { accept } for pid=9219 comm="syz.3.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 160.202602][ T9224] Failed to get privilege flags for destination (handle=0x2:0x7) [ 160.584576][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 160.913823][ T40] audit: type=1400 audit(1770471537.753:875): avc: denied { getopt } for pid=9233 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 160.961390][ T9230] netlink: 256 bytes leftover after parsing attributes in process `syz.3.926'. [ 161.089319][ T40] audit: type=1400 audit(1770471537.921:876): avc: denied { execute } for pid=9243 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 161.231912][ T5294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.261453][ T5294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.268409][ T5294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.278091][ T5294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.300210][ T9255] netlink: 'syz.0.935': attribute type 1 has an invalid length. [ 161.300787][ T5294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.303304][ T9255] netlink: 'syz.0.935': attribute type 1 has an invalid length. [ 161.303327][ T9255] __nla_validate_parse: 1 callbacks suppressed [ 161.303337][ T9255] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.935'. [ 161.385269][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.395875][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.401702][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.407432][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.419276][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 161.856183][ T9251] chnl_net:caif_netlink_parms(): no params data found [ 161.947385][ T9275] "syz.3.941" (9275) uses obsolete ecb(arc4) skcipher [ 162.126892][ T9251] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.141909][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.157177][ T9251] bridge_slave_0: entered allmulticast mode [ 162.175730][ T9251] bridge_slave_0: entered promiscuous mode [ 162.199822][ T9251] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.204714][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.212203][ T9251] bridge_slave_1: entered allmulticast mode [ 162.216129][ T9251] bridge_slave_1: entered promiscuous mode [ 162.298687][ T9251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.310892][ T9251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.375601][ T9251] team0: Port device team_slave_0 added [ 162.381440][ T9251] team0: Port device team_slave_1 added [ 162.436680][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.452193][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.483397][ T9251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.491367][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.495515][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.550930][ T9251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.588918][ T9292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.945'. [ 162.768430][ T9251] hsr_slave_0: entered promiscuous mode [ 162.787212][ T9251] hsr_slave_1: entered promiscuous mode [ 163.029868][ T6325] Bluetooth: hci4: Frame reassembly failed (-90) [ 163.033662][ T9300] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=28692 sclass=netlink_xfrm_socket pid=9300 comm=syz.3.947 [ 163.145166][ T9251] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.165054][ T9251] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.179908][ T9251] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.210051][ T9251] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.360326][ T9251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.381345][ T9251] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.391324][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.394609][ T6341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.434627][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.438627][ T6345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.473992][ T9251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.478606][ T9251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.651650][ T64] Bluetooth: hci1: command tx timeout [ 163.745672][ T9251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.110395][ T9251] veth0_vlan: entered promiscuous mode [ 164.123090][ T9251] veth1_vlan: entered promiscuous mode [ 164.204928][ T9251] veth0_macvtap: entered promiscuous mode [ 164.215612][ T9251] veth1_macvtap: entered promiscuous mode [ 164.230423][ T9251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.247195][ T9251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.271382][ T6345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.275870][ T6345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.289878][ T6345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.335775][ T6345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.468201][ T6341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.472222][ T6341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.540525][ T6345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.543793][ T6345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.564226][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 164.564243][ T40] audit: type=1400 audit(1770471541.184:879): avc: denied { mounton } for pid=9251 comm="syz-executor" path="/syzkaller.hymX6i/syz-tmp" dev="sda1" ino=2038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 164.605023][ T40] audit: type=1400 audit(1770471541.184:880): avc: denied { mounton } for pid=9251 comm="syz-executor" path="/syzkaller.hymX6i/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 164.638787][ T40] audit: type=1400 audit(1770471541.184:881): avc: denied { mounton } for pid=9251 comm="syz-executor" path="/syzkaller.hymX6i/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=29759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 164.671900][ T40] audit: type=1400 audit(1770471541.212:882): avc: denied { mounton } for pid=9251 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 164.692486][ T40] audit: type=1400 audit(1770471541.212:883): avc: denied { mount } for pid=9251 comm="syz-executor" name="/" dev="gadgetfs" ino=6822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 164.785066][ T9319] futex_wake_op: syz.4.932 tries to shift op by 32; fix this program [ 165.086727][ T9325] netlink: 44 bytes leftover after parsing attributes in process `syz.4.949'. [ 165.173575][ T5294] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 165.176823][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 165.434329][ T9338] syz.3.952 (9338): /proc/9335/oom_adj is deprecated, please use /proc/9335/oom_score_adj instead. [ 165.465336][ T40] audit: type=1400 audit(1770471542.016:884): avc: denied { create } for pid=9335 comm="syz.3.952" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 165.488463][ T9340] netlink: 168 bytes leftover after parsing attributes in process `syz.4.954'. [ 165.522526][ T9340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.954'. [ 165.759089][ T9345] netlink: 'syz.4.955': attribute type 3 has an invalid length. [ 165.772841][ T9345] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.820939][ T9346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.868576][ T5294] Bluetooth: hci1: command tx timeout [ 168.083559][ T5294] Bluetooth: hci1: command tx timeout [ 168.303644][ T6325] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.328513][ T6325] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.332554][ T6325] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.411381][ T6325] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.417713][ T6325] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.423118][ T6325] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.542006][ T6325] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.563918][ T6325] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.581997][ T6325] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 168.925044][ T6325] bridge_slave_1: left allmulticast mode [ 168.927454][ T6325] bridge_slave_1: left promiscuous mode [ 168.932651][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.976489][ T6325] bridge_slave_0: left allmulticast mode [ 168.980224][ T6325] bridge_slave_0: left promiscuous mode [ 168.989967][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.862083][ T6325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.876623][ T6325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.902235][ T6325] bond0 (unregistering): Released all slaves [ 170.090080][ T6325] bond1 (unregistering): (slave veth3): Releasing active interface [ 170.110049][ T6325] bond1 (unregistering): Released all slaves [ 170.121497][ T6325] bond2 (unregistering): Released all slaves [ 170.137554][ T6325] bond3 (unregistering): Released all slaves [ 170.307518][ T5294] Bluetooth: hci1: command tx timeout [ 170.395427][ T6325] bond4 (unregistering): Released all slaves [ 171.390947][ T6325] hsr_slave_0: left promiscuous mode [ 171.394542][ T6325] hsr_slave_1: left promiscuous mode [ 171.397342][ T6325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.408693][ T6325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.420868][ T6325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.423869][ T6325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.472887][ T6325] vlan0: left promiscuous mode [ 171.476342][ T6325] veth1_macvtap: left promiscuous mode [ 171.500412][ T6325] veth0_macvtap: left promiscuous mode [ 171.510203][ T6325] veth1_vlan: left promiscuous mode [ 171.512658][ T6325] veth0_vlan: left promiscuous mode [ 171.747663][ T6325] pimreg5 (unregistering): left allmulticast mode [ 172.812343][ T6325] team0 (unregistering): Port device team_slave_1 removed [ 172.910301][ T6325] team0 (unregistering): Port device team_slave_0 removed [ 196.128667][ T9415] netlink: 44 bytes leftover after parsing attributes in process `syz.0.958'. [ 196.216977][ T9424] lo: entered allmulticast mode [ 196.307370][ T9421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9421 comm=syz.1.959 [ 196.317031][ T9418] program syz.4.960 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.417838][ T9433] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 196.422379][ T9433] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.431323][ T9433] vhci_hcd vhci_hcd.0: Device attached [ 196.452839][ T9435] vhci_hcd: connection closed [ 196.457179][ T46] vhci_hcd vhci_hcd.1: stop threads [ 196.461654][ T46] vhci_hcd vhci_hcd.1: release socket [ 196.463892][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 196.864616][ T9447] netlink: 'syz.0.965': attribute type 1 has an invalid length. [ 197.172217][ T40] audit: type=1400 audit(1770471571.666:885): avc: denied { setopt } for pid=9462 comm="syz.4.970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 197.204388][ T9464] netlink: 'syz.0.969': attribute type 1 has an invalid length. [ 197.207802][ T9464] netlink: 224 bytes leftover after parsing attributes in process `syz.0.969'. [ 197.747008][ T40] audit: type=1400 audit(1770471572.199:886): avc: denied { accept } for pid=9478 comm="syz.1.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 197.826351][ T9488] binder: 9487:9488 ioctl c018620c 2000000000c0 returned -22 [ 198.060347][ T40] audit: type=1400 audit(1770471572.480:887): avc: denied { read } for pid=9491 comm="syz.1.980" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 198.072839][ T40] audit: type=1400 audit(1770471572.480:888): avc: denied { open } for pid=9491 comm="syz.1.980" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 198.073076][ T9492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.133294][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.980'. [ 198.141428][ T9493] netlink: 'syz.3.978': attribute type 9 has an invalid length. [ 198.212218][ T40] audit: type=1400 audit(1770471572.639:889): avc: denied { map } for pid=9494 comm="syz.4.981" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 198.247372][ T9501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9501 comm=syz.0.982 [ 198.291157][ T40] audit: type=1400 audit(1770471572.639:890): avc: denied { execute } for pid=9494 comm="syz.4.981" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 198.491681][ T9498] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 198.494522][ T9498] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 198.527928][ T9498] vhci_hcd vhci_hcd.0: Device attached [ 198.820834][ T2298] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 199.034895][ T9506] vhci_hcd: connection reset by peer [ 199.126518][ T1152] vhci_hcd vhci_hcd.0: stop threads [ 199.128860][ T1152] vhci_hcd vhci_hcd.0: release socket [ 199.135852][ T1152] vhci_hcd vhci_hcd.0: disconnect device [ 199.725112][ T40] audit: type=1400 audit(1770471574.041:891): avc: denied { write } for pid=9526 comm="syz.1.988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 199.755770][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.990'. [ 199.776102][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.990'. [ 200.047174][ T40] audit: type=1400 audit(1770471574.322:892): avc: denied { write } for pid=9537 comm="syz.0.992" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 200.207233][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'. [ 200.935116][ T9568] netlink: 'syz.3.1000': attribute type 10 has an invalid length. [ 200.941104][ T9568] syz_tun: entered promiscuous mode [ 200.993591][ T9568] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 201.012004][ T9568] netlink: 'syz.3.1000': attribute type 10 has an invalid length. [ 201.029342][ T9568] netlink: 'syz.3.1000': attribute type 10 has an invalid length. [ 201.033080][ T9568] netlink: 'syz.3.1000': attribute type 10 has an invalid length. [ 201.036902][ T9568] netlink: 'syz.3.1000': attribute type 10 has an invalid length. [ 201.046727][ T9568] netlink: 'syz.3.1000': attribute type 10 has an invalid length. [ 201.053030][ T9568] netlink: 'syz.3.1000': attribute type 10 has an invalid length. [ 201.455090][ T9571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9571 comm=syz.4.1001 [ 201.504352][ T9583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'. [ 201.506524][ T9582] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 201.509459][ T9583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 201.600710][ T9571] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 201.604169][ T9571] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 201.614187][ T9580] SELinux: ebitmap: truncated map [ 201.615614][ T9582] loop5: detected capacity change from 0 to 7 [ 201.624584][ T9571] vhci_hcd vhci_hcd.0: Device attached [ 201.635709][ T9582] loop5: p1 < > p4 [ 201.664023][ T9582] loop5: partition table partially beyond EOD, truncated [ 201.712841][ T9580] SELinux: failed to load policy [ 201.804919][ T40] audit: type=1400 audit(1770471576.005:893): avc: denied { ioctl } for pid=9591 comm="syz.0.1006" path="socket:[31030]" dev="sockfs" ino=31030 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 201.888964][ T53] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 202.105245][ T9589] vhci_hcd: connection reset by peer [ 202.114870][ T1152] vhci_hcd vhci_hcd.4: stop threads [ 202.145448][ T1152] vhci_hcd vhci_hcd.4: release socket [ 202.177600][ T1152] vhci_hcd vhci_hcd.4: disconnect device [ 202.679449][ T9621] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1014'. [ 203.152108][ T9629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.209840][ T9633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9633 comm=syz.1.1017 [ 203.583407][ T40] audit: type=1400 audit(1770471577.660:894): avc: denied { ioctl } for pid=9654 comm="syz.4.1025" path="socket:[31202]" dev="sockfs" ino=31202 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 203.959593][ T9665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=9665 comm=syz.4.1029 [ 204.017378][ T9669] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1030'. [ 204.050566][ T40] audit: type=1400 audit(1770471578.071:895): avc: denied { getopt } for pid=9668 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.273743][ T2298] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 204.531943][ T5938] Bluetooth: hci1: command 0x0405 tx timeout [ 204.920695][ T9680] IPv6: syztnl0: Disabled Multicast RS [ 205.608402][ T9682] loop5: detected capacity change from 0 to 7 [ 205.614328][ T9682] Dev loop5: unable to read RDB block 7 [ 205.628244][ T40] audit: type=1400 audit(1770471579.567:896): avc: denied { setopt } for pid=9697 comm="syz.4.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.629039][ T9682] loop5: unable to read partition table [ 205.643247][ T9682] loop5: partition table beyond EOD, truncated [ 205.665658][ T9682] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 205.751349][ T40] audit: type=1400 audit(1770471579.689:897): avc: denied { map } for pid=9681 comm="syz.0.1034" path="/proc/810/task/813/oom_score_adj" dev="proc" ino=30556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 205.762278][ T9702] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.774584][ T9702] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.780117][ T9702] bridge0: entered allmulticast mode [ 205.823518][ T9702] syzkaller0: entered promiscuous mode [ 205.826575][ T9702] syzkaller0: entered allmulticast mode [ 206.048640][ T9711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1044'. [ 206.299317][ T40] audit: type=1400 audit(1770471580.203:898): avc: denied { getopt } for pid=9724 comm="syz.3.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 206.299696][ T9723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1049'. [ 206.378650][ T29] IPVS: starting estimator thread 0... [ 206.382252][ T6149] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 206.391373][ T9728] IPVS: sh: FWM 3 0x00000003 - no destination available [ 206.394378][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 206.510222][ T9732] IPVS: using max 29 ests per chain, 69600 per kthread [ 206.536371][ T40] audit: type=1400 audit(1770471580.418:899): avc: denied { getopt } for pid=9735 comm="syz.4.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 206.594089][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.597176][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.669868][ T6149] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 206.673963][ T6149] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 206.711149][ T9741] macvtap1: entered promiscuous mode [ 206.723239][ T9741] macvtap1: entered allmulticast mode [ 206.725368][ T6149] usb 5-1: config 0 interface 0 has no altsetting 0 [ 206.728960][ T9741] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 206.728985][ T9741] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 206.735760][ T9741] team0: Device macvtap1 failed to register rx_handler [ 206.764944][ T9741] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 206.783507][ T9741] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 206.801831][ T6149] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 206.805767][ T6149] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 206.811440][ T6149] usb 5-1: Product: syz [ 206.813324][ T6149] usb 5-1: Manufacturer: syz [ 206.815487][ T6149] usb 5-1: SerialNumber: syz [ 206.885523][ T6149] usb 5-1: config 0 descriptor?? [ 206.910681][ T6149] hub 5-1:0.0: bad descriptor, ignoring hub [ 206.913025][ T6149] hub 5-1:0.0: probe with driver hub failed with error -5 [ 206.918587][ T6149] usb 5-1: selecting invalid altsetting 0 [ 207.081733][ T40] audit: type=1400 audit(1770471580.933:900): avc: denied { append } for pid=9757 comm="syz.4.1060" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 207.121684][ T9758] program syz.4.1060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.129303][ T40] audit: type=1400 audit(1770471580.979:901): avc: denied { write } for pid=9755 comm="syz.1.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 207.140167][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 207.343052][ T53] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 207.915042][ T24] usb 5-1: USB disconnect, device number 9 [ 208.160140][ T24] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 208.330042][ T24] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 208.333619][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 208.339285][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 208.355288][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 208.363241][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 208.372332][ T24] usb 5-1: Product: syz [ 208.377386][ T24] usb 5-1: Manufacturer: syz [ 208.379351][ T24] usb 5-1: SerialNumber: syz [ 208.388726][ T24] usb 5-1: config 0 descriptor?? [ 208.398088][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 208.401115][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 208.407587][ T24] usb 5-1: selecting invalid altsetting 0 [ 208.635372][ T9713] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1045'. [ 208.776858][ T1030] usb 5-1: USB disconnect, device number 10 [ 209.019801][ T9812] overlayfs: unescaped trailing colons in lowerdir mount option. [ 209.064377][ T40] audit: type=1400 audit(1770471582.784:902): avc: denied { append } for pid=9815 comm="syz.3.1080" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 209.098215][ T9812] validate_nla: 59 callbacks suppressed [ 209.098234][ T9812] netlink: 'syz.4.1078': attribute type 20 has an invalid length. [ 209.589506][ T9829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1085'. [ 209.639548][ T9833] openvswitch: netlink: Key type 303 is out of range max 32 [ 209.641961][ T9829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1085'. [ 209.722675][ T40] audit: type=1400 audit(1770471584.403:903): avc: denied { setopt } for pid=9834 comm="syz.0.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 209.801415][ T9837] cgroup: none used incorrectly [ 209.901991][ T40] audit: type=1400 audit(1770471584.562:904): avc: denied { create } for pid=9839 comm="syz.0.1091" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 209.910389][ T40] audit: type=1400 audit(1770471584.562:905): avc: denied { unlink } for pid=9839 comm="syz.0.1091" name="file0" dev="tmpfs" ino=1507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 209.994872][ T40] audit: type=1400 audit(1770471584.655:906): avc: denied { bind } for pid=9847 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 210.017239][ T40] audit: type=1400 audit(1770471584.674:907): avc: denied { setattr } for pid=9848 comm="syz.0.1093" name="" dev="pipefs" ino=33797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 210.029481][ T40] audit: type=1400 audit(1770471584.693:908): avc: denied { listen } for pid=9847 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 210.044922][ T40] audit: type=1400 audit(1770471584.693:909): avc: denied { accept } for pid=9847 comm="syz.4.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 210.307923][ T9865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.347871][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 210.351709][ T9865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'. [ 210.413475][ T53] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 210.588488][ T53] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 210.600597][ T53] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 210.635286][ T53] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.651072][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.659978][ T53] usb 6-1: Product: syz [ 210.661868][ T53] usb 6-1: Manufacturer: syz [ 210.663916][ T53] usb 6-1: SerialNumber: syz [ 210.707329][ T53] usb 6-1: config 0 descriptor?? [ 211.056501][ T9876] program syz.4.1101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.080731][ T53] usb 6-1: USB disconnect, device number 10 [ 211.220549][ T9422] udevd[9422]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.222317][ T9881] block nbd3: NBD_DISCONNECT [ 211.248658][ T40] audit: type=1400 audit(1770471585.815:910): avc: denied { accept } for pid=9878 comm="syz.1.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 211.493112][ T9890] netlink: 'syz.3.1105': attribute type 2 has an invalid length. [ 211.514878][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 211.789437][ T24] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 211.823289][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 211.827936][ T24] usb 9-1: Product: syz [ 211.856778][ T24] usb 9-1: Manufacturer: syz [ 211.859845][ T24] usb 9-1: SerialNumber: syz [ 211.894947][ T24] usb 9-1: config 0 descriptor?? [ 211.900702][ T24] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 211.904077][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 211.980742][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 212.000146][ T53] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 212.022848][ T24] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 212.026618][ T24] usb 9-1: media controller created [ 212.053680][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.147108][ T9876] cxusb: i2c wr: len=79 is too big! [ 212.147108][ T9876] [ 212.188835][ T53] usb 6-1: device descriptor read/64, error -71 [ 212.238427][ T9876] syzkaller0: entered promiscuous mode [ 212.240598][ T9876] syzkaller0: entered allmulticast mode [ 212.306281][ T24] cxusb: set interface failed [ 212.308361][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 212.350148][ T24] DVB: Unable to find symbol mt352_attach() [ 212.353432][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 212.356305][ T24] zl10353_read_register: readreg error (reg=127, ret==-121) [ 212.359833][ T24] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 212.362041][ T40] audit: type=1400 audit(1770471586.861:911): avc: denied { read } for pid=9913 comm="syz.3.1113" path="socket:[31528]" dev="sockfs" ino=31528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 212.443752][ T24] rc_core: IR keymap rc-dvico-mce not found [ 212.446101][ T24] Registered IR keymap rc-empty [ 212.458239][ T24] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 212.464617][ T24] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input14 [ 212.477297][ T53] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 212.496014][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 212.500547][ T24] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 212.511864][ T24] usb 9-1: USB disconnect, device number 2 [ 212.618195][ T53] usb 6-1: device descriptor read/64, error -71 [ 212.683191][ T24] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 212.704212][ T9920] nvme_fabrics: missing parameter 'transport=%s' [ 212.707273][ T9920] nvme_fabrics: missing parameter 'nqn=%s' [ 212.741100][ T53] usb usb6-port1: attempt power cycle [ 213.118955][ T53] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 213.160355][ T53] usb 6-1: device descriptor read/8, error -71 [ 213.474118][ T9934] vlan2: entered promiscuous mode [ 213.490843][ T53] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 213.500892][ T9934] bridge0: entered promiscuous mode [ 213.532951][ T53] usb 6-1: device descriptor read/8, error -71 [ 213.658639][ T53] usb usb6-port1: unable to enumerate USB device [ 213.667997][ T9937] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1118'. [ 213.939498][ T9948] random: crng reseeded on system resumption [ 214.055143][ T9948] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 214.366663][ T9961] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 214.512356][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 214.512374][ T40] audit: type=1400 audit(1770471588.881:914): avc: denied { lock } for pid=9958 comm="syz.0.1124" path="socket:[31620]" dev="sockfs" ino=31620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 214.528461][ T9966] x_tables: duplicate underflow at hook 3 [ 215.006719][ T9974] tmpfs: Bad value for 'huge' [ 215.272536][ T40] audit: type=1400 audit(1770471589.591:915): avc: denied { listen } for pid=9992 comm="syz.0.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 215.294229][ T9989] input: syz1 as /devices/virtual/input/input15 [ 215.455364][ T9994] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1132'. [ 216.065025][T10003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.313384][T10022] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1140'. [ 216.332173][T10021] overlayfs: missing 'workdir' [ 216.671934][ T1152] Bluetooth: (null): Invalid header checksum [ 216.711156][T10038] netlink: 'syz.1.1147': attribute type 1 has an invalid length. [ 216.758014][T10038] bond1: entered promiscuous mode [ 216.762660][T10038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.765904][T10047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1143'. [ 216.910612][T10042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.914035][T10042] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 216.920014][T10042] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 216.959661][T10042] bond1: (slave xfrm1): making interface the new active one [ 216.962926][T10042] xfrm1: entered promiscuous mode [ 216.972997][T10042] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 217.005594][T10051] netlink: 'syz.3.1149': attribute type 29 has an invalid length. [ 217.157164][T10056] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1151'. [ 217.157189][T10055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1151'. [ 217.239587][T10056] bond2 (unregistering): Released all slaves [ 217.294430][T10055] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 217.411778][T10064] overlayfs: statfs failed on './file0' [ 217.517481][ T40] audit: type=1400 audit(1770471591.694:916): avc: denied { getopt } for pid=10075 comm="syz.3.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 217.607223][T10083] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1155'. [ 217.646978][T10085] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1155'. [ 217.944862][T10097] program syz.0.1162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.049222][T10101] binder: 10099:10101 ioctl c01864c2 2000000001c0 returned -22 [ 218.052704][T10101] binder: 10099:10101 ioctl c01864c1 200000000200 returned -22 [ 218.071813][T10101] binder: 10099:10101 ioctl 8008743f 200000000000 returned -22 [ 218.076296][T10101] binder: 10099:10101 ioctl c01064b5 200000000400 returned -22 [ 218.088952][T10101] binder: 10099:10101 ioctl c02064b9 200000000480 returned -22 [ 218.094535][T10101] binder: 10099:10101 ioctl 80026101 200000000500 returned -22 [ 218.182120][T10113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1168'. [ 218.243571][T10115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1168'. [ 218.407017][T10113] syzkaller0: entered promiscuous mode [ 218.409451][T10113] syzkaller0: entered allmulticast mode [ 218.683883][T10124] use of bytesused == 0 is deprecated and will be removed in the future, [ 218.688952][T10124] use the actual size instead. [ 219.317544][T10135] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 219.471379][T10139] comedi comedi0: comedi_config --init_data is deprecated [ 219.496972][T10139] comedi comedi0: comedi_config --init_data is deprecated [ 219.566759][T10142] netlink: 'syz.4.1177': attribute type 1 has an invalid length. [ 219.610583][T10127] cgroup: name respecified [ 219.792281][ C3] ================================================================== [ 219.811859][ C3] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 219.827972][ C3] Read of size 1 at addr ffff8880357f3818 by task syz.3.1180/10149 [ 219.843901][ C3] [ 219.844874][ C3] CPU: 3 UID: 0 PID: 10149 Comm: syz.3.1180 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.844899][ C3] Tainted: [L]=SOFTLOCKUP [ 219.844904][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 219.844913][ C3] Call Trace: [ 219.844920][ C3] [ 219.844927][ C3] dump_stack_lvl+0x100/0x190 [ 219.844950][ C3] print_report+0x156/0x4c9 [ 219.844970][ C3] ? __virt_addr_valid+0x81/0x620 [ 219.844986][ C3] ? __phys_addr+0xe8/0x180 [ 219.845001][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 219.845016][ C3] kasan_report+0xdf/0x1a0 [ 219.845036][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 219.845052][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 219.845067][ C3] __kasan_check_byte+0x36/0x50 [ 219.845085][ C3] lock_acquire+0xf5/0x330 [ 219.845100][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 219.845116][ C3] ? .slowpath+0x9/0x18 [ 219.845132][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 219.845145][ C3] ? p9_req_put+0xaf/0x250 [ 219.845163][ C3] p9_req_put+0xaf/0x250 [ 219.845181][ C3] req_done+0x1dc/0x2e0 [ 219.845197][ C3] ? __pfx_req_done+0x10/0x10 [ 219.845213][ C3] ? __hrtimer_run_queues+0x7e0/0x990 [ 219.845232][ C3] ? __pfx_req_done+0x10/0x10 [ 219.845247][ C3] vring_interrupt+0x33b/0x430 [ 219.845281][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 219.845297][ C3] __handle_irq_event_percpu+0x232/0x800 [ 219.845319][ C3] handle_irq_event+0xab/0x1e0 [ 219.845338][ C3] handle_edge_irq+0x375/0x970 [ 219.845357][ C3] __common_interrupt+0xd8/0x2f0 [ 219.845373][ C3] common_interrupt+0xb9/0xe0 [ 219.845394][ C3] [ 219.845399][ C3] [ 219.845406][ C3] asm_common_interrupt+0x26/0x40 [ 219.845422][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 219.845438][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 6c 69 f6 48 89 df e8 ce ba 69 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 09 5a f6 65 8b 05 3e ba 6a 08 85 c0 74 16 5b [ 219.845453][ C3] RSP: 0018:ffffc9000624fb68 EFLAGS: 00000246 [ 219.845467][ C3] RAX: 0000000000000002 RBX: ffff88802a2b8a50 RCX: 0000000000000000 [ 219.845477][ C3] RDX: 0000000000000000 RSI: ffffffff8dc45fd1 RDI: ffffffff8bfa38a0 [ 219.845487][ C3] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000000 [ 219.845496][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802a2b8000 [ 219.845505][ C3] R13: ffff88802a2b8a50 R14: 0000000000000003 R15: ffff88802a2b8a4f [ 219.845521][ C3] try_to_wake_up+0x403/0x1a60 [ 219.845543][ C3] ? __pfx_try_to_wake_up+0x10/0x10 [ 219.845562][ C3] ? find_held_lock+0x2b/0x80 [ 219.845581][ C3] ? futex_wake+0x456/0x530 [ 219.845600][ C3] wake_up_q+0xa1/0x130 [ 219.845619][ C3] futex_wake+0x460/0x530 [ 219.845638][ C3] ? __pfx_futex_wake+0x10/0x10 [ 219.845694][ C3] ? __pfx_css_rstat_updated+0x10/0x10 [ 219.845712][ C3] do_futex+0x32b/0x350 [ 219.845729][ C3] ? __pfx_do_futex+0x10/0x10 [ 219.845745][ C3] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 219.845768][ C3] __x64_sys_futex+0x34f/0x4d0 [ 219.845786][ C3] ? exc_page_fault+0x6f/0xd0 [ 219.845802][ C3] ? __pfx___x64_sys_futex+0x10/0x10 [ 219.845822][ C3] do_syscall_64+0xc9/0xf80 [ 219.845839][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.845855][ C3] RIP: 0033:0x7f6ea6b9aeb9 [ 219.845868][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.845882][ C3] RSP: 002b:00007ffe32d0f828 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 219.845897][ C3] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6ea6b9aeb9 [ 219.845907][ C3] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6ea6e15fa8 [ 219.845918][ C3] RBP: 00000000000010df R08: 0000000000000008 R09: 0000000000000000 [ 219.845927][ C3] R10: 00007f6ea6e15fa0 R11: 0000000000000246 R12: 0000000000000000 [ 219.845937][ C3] R13: 00007f6ea6e15fac R14: 00007f6ea6e15fa8 R15: 00007f6ea6e15fa0 [ 219.845951][ C3] [ 219.845956][ C3] [ 220.185066][ C3] Allocated by task 10151: [ 220.187609][ C3] kasan_save_stack+0x30/0x50 [ 220.190366][ C3] kasan_save_track+0x14/0x30 [ 220.193017][ C3] __kasan_kmalloc+0xaa/0xb0 [ 220.195194][ C3] p9_client_create+0xaf/0xd40 [ 220.197893][ C3] v9fs_session_init+0x40/0xce0 [ 220.200097][ C3] v9fs_get_tree+0xb8/0xb50 [ 220.203158][ C3] vfs_get_tree+0x92/0x320 [ 220.205711][ C3] path_mount+0x7d0/0x23c0 [ 220.208097][ C3] __x64_sys_mount+0x293/0x310 [ 220.210617][ C3] do_syscall_64+0xc9/0xf80 [ 220.213043][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.215891][ C3] [ 220.217009][ C3] Freed by task 10151: [ 220.219186][ C3] kasan_save_stack+0x30/0x50 [ 220.221446][ C3] kasan_save_track+0x14/0x30 [ 220.223743][ C3] kasan_save_free_info+0x3b/0x70 [ 220.226024][ C3] __kasan_slab_free+0x5f/0x80 [ 220.228444][ C3] kfree+0x1c7/0x690 [ 220.230342][ C3] p9_client_create+0x72d/0xd40 [ 220.232907][ C3] v9fs_session_init+0x40/0xce0 [ 220.235474][ C3] v9fs_get_tree+0xb8/0xb50 [ 220.237935][ C3] vfs_get_tree+0x92/0x320 [ 220.241590][ C3] path_mount+0x7d0/0x23c0 [ 220.244570][ C3] __x64_sys_mount+0x293/0x310 [ 220.248576][ C3] do_syscall_64+0xc9/0xf80 [ 220.251033][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.254130][ C3] [ 220.255406][ C3] The buggy address belongs to the object at ffff8880357f3800 [ 220.255406][ C3] which belongs to the cache kmalloc-512 of size 512 [ 220.264907][ C3] The buggy address is located 24 bytes inside of [ 220.264907][ C3] freed 512-byte region [ffff8880357f3800, ffff8880357f3a00) [ 220.271023][ C3] [ 220.272037][ C3] The buggy address belongs to the physical page: [ 220.287697][ C3] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x357f0 [ 220.293138][ C3] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 220.297276][ C3] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 220.300362][ C3] page_type: f5(slab) [ 220.301856][ C3] raw: 00fff00000000040 ffff88801b842c80 ffffea0000d9bb00 dead000000000002 [ 220.304844][ C3] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 220.308935][ C3] head: 00fff00000000040 ffff88801b842c80 ffffea0000d9bb00 dead000000000002 [ 220.313478][ C3] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 220.318207][ C3] head: 00fff00000000002 ffffea0000d5fc01 00000000ffffffff 00000000ffffffff [ 220.324350][ C3] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 220.328016][ C3] page dumped because: kasan: bad access detected [ 220.331232][ C3] page_owner tracks the page as allocated [ 220.334556][ C3] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5934, tgid 5934 (syz-executor), ts 55131650124, free_ts 23449811665 [ 220.346215][ C3] post_alloc_hook+0x1e1/0x250 [ 220.348844][ C3] get_page_from_freelist+0xe3d/0x2e10 [ 220.352039][ C3] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 220.355241][ C3] alloc_pages_mpol+0x1fb/0x550 [ 220.358108][ C3] new_slab+0x2c4/0x440 [ 220.360821][ C3] ___slab_alloc+0xda3/0x1ca0 [ 220.363301][ C3] __slab_alloc.isra.0+0x63/0x110 [ 220.366044][ C3] __kmalloc_cache_noprof+0x531/0x810 [ 220.369083][ C3] device_add+0xd3a/0x1950 [ 220.371485][ C3] netdev_register_kobject+0x1a9/0x3d0 [ 220.373971][ C3] register_netdevice+0x12b3/0x21d0 [ 220.376385][ C3] veth_newlink+0x44a/0xa00 [ 220.378625][ C3] rtnl_newlink+0x1494/0x2380 [ 220.381010][ C3] rtnetlink_rcv_msg+0x95e/0xe90 [ 220.383240][ C3] netlink_rcv_skb+0x159/0x420 [ 220.385380][ C3] netlink_unicast+0x5aa/0x870 [ 220.387590][ C3] page last free pid 10 tgid 10 stack trace: [ 220.390679][ C3] __free_frozen_pages+0x822/0x1130 [ 220.393507][ C3] vfree.part.0+0x12b/0x9d0 [ 220.395972][ C3] delayed_vfree_work+0x8e/0xd0 [ 220.398647][ C3] process_one_work+0x9c2/0x1840 [ 220.401526][ C3] worker_thread+0x5da/0xe40 [ 220.418807][ C3] kthread+0x3b3/0x730 [ 220.425784][ C3] ret_from_fork+0x754/0xaf0 [ 220.427667][ C3] ret_from_fork_asm+0x1a/0x30 [ 220.437531][ C3] [ 220.438630][ C3] Memory state around the buggy address: [ 220.446669][ C3] ffff8880357f3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 220.450286][ C3] ffff8880357f3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 220.453729][ C3] >ffff8880357f3800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.457186][ C3] ^ [ 220.459495][ C3] ffff8880357f3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.464062][ C3] ffff8880357f3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.468194][ C3] ================================================================== [ 220.472763][ C3] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 220.475693][ C3] CPU: 3 UID: 0 PID: 10149 Comm: syz.3.1180 Tainted: G L syzkaller #0 PREEMPT(full) [ 220.480145][ C3] Tainted: [L]=SOFTLOCKUP [ 220.481988][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 220.485893][ C3] Call Trace: [ 220.487259][ C3] [ 220.488442][ C3] dump_stack_lvl+0x100/0x190 [ 220.490489][ C3] vpanic+0x20d/0x630 [ 220.491952][ C3] panic+0xd1/0xd1 [ 220.493291][ C3] ? __pfx_panic+0x10/0x10 [ 220.494889][ C3] ? end_report.part.0+0x23/0x90 [ 220.496893][ C3] ? rcu_is_watching+0x12/0xc0 [ 220.499362][ C3] ? end_report.part.0+0x23/0x90 [ 220.501830][ C3] ? check_panic_on_warn+0x1f/0x90 [ 220.504305][ C3] check_panic_on_warn.cold+0x19/0x34 [ 220.506956][ C3] end_report.part.0+0x3a/0x90 [ 220.509437][ C3] kasan_report.cold+0xe/0x18 [ 220.512315][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 220.515203][ C3] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 220.518113][ C3] __kasan_check_byte+0x36/0x50 [ 220.520393][ C3] lock_acquire+0xf5/0x330 [ 220.522581][ C3] ? do_raw_spin_unlock+0x53/0x1e0 [ 220.524768][ C3] ? .slowpath+0x9/0x18 [ 220.526651][ C3] _raw_spin_lock_irqsave+0x3a/0x60 [ 220.529074][ C3] ? p9_req_put+0xaf/0x250 [ 220.531332][ C3] p9_req_put+0xaf/0x250 [ 220.533688][ C3] req_done+0x1dc/0x2e0 [ 220.535893][ C3] ? __pfx_req_done+0x10/0x10 [ 220.539398][ C3] ? __hrtimer_run_queues+0x7e0/0x990 [ 220.542618][ C3] ? __pfx_req_done+0x10/0x10 [ 220.545064][ C3] vring_interrupt+0x33b/0x430 [ 220.550490][ C3] ? __pfx_vring_interrupt+0x10/0x10 [ 220.553890][ C3] __handle_irq_event_percpu+0x232/0x800 [ 220.557465][ C3] handle_irq_event+0xab/0x1e0 [ 220.560669][ C3] handle_edge_irq+0x375/0x970 [ 220.563514][ C3] __common_interrupt+0xd8/0x2f0 [ 220.591003][ C3] common_interrupt+0xb9/0xe0 [ 220.593487][ C3] [ 220.595358][ C3] [ 220.596629][ C3] asm_common_interrupt+0x26/0x40 [ 220.598965][ C3] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 220.601933][ C3] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 e6 6c 69 f6 48 89 df e8 ce ba 69 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 09 5a f6 65 8b 05 3e ba 6a 08 85 c0 74 16 5b [ 220.638741][ C3] RSP: 0018:ffffc9000624fb68 EFLAGS: 00000246 [ 220.641719][ C3] RAX: 0000000000000002 RBX: ffff88802a2b8a50 RCX: 0000000000000000 [ 220.645967][ C3] RDX: 0000000000000000 RSI: ffffffff8dc45fd1 RDI: ffffffff8bfa38a0 [ 220.650156][ C3] RBP: 0000000000000283 R08: 0000000000000001 R09: 0000000000000000 [ 220.664680][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88802a2b8000 [ 220.669199][ C3] R13: ffff88802a2b8a50 R14: 0000000000000003 R15: ffff88802a2b8a4f [ 220.674483][ C3] try_to_wake_up+0x403/0x1a60 [ 220.679148][ C3] ? __pfx_try_to_wake_up+0x10/0x10 [ 220.684761][ C3] ? find_held_lock+0x2b/0x80 [ 220.689434][ C3] ? futex_wake+0x456/0x530 [ 220.711613][ C3] wake_up_q+0xa1/0x130 [ 220.713479][ C3] futex_wake+0x460/0x530 [ 220.716009][ C3] ? __pfx_futex_wake+0x10/0x10 [ 220.719041][ C3] ? __pfx_css_rstat_updated+0x10/0x10 [ 220.732212][ C3] do_futex+0x32b/0x350 [ 220.735179][ C3] ? __pfx_do_futex+0x10/0x10 [ 220.751537][ C3] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 220.754068][ C3] __x64_sys_futex+0x34f/0x4d0 [ 220.756020][ C3] ? exc_page_fault+0x6f/0xd0 [ 220.758354][ C3] ? __pfx___x64_sys_futex+0x10/0x10 [ 220.761129][ C3] do_syscall_64+0xc9/0xf80 [ 220.763184][ C3] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.765522][ C3] RIP: 0033:0x7f6ea6b9aeb9 [ 220.767739][ C3] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.776445][ C3] RSP: 002b:00007ffe32d0f828 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 220.780201][ C3] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6ea6b9aeb9 [ 220.783563][ C3] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6ea6e15fa8 [ 220.787408][ C3] RBP: 00000000000010df R08: 0000000000000008 R09: 0000000000000000 [ 220.791381][ C3] R10: 00007f6ea6e15fa0 R11: 0000000000000246 R12: 0000000000000000 [ 220.795476][ C3] R13: 00007f6ea6e15fac R14: 00007f6ea6e15fa8 R15: 00007f6ea6e15fa0 [ 220.799874][ C3] [ 220.802621][ C3] Kernel Offset: disabled [ 220.804899][ C3] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:35:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88803cd63e98 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88803cd63e98 RDI=ffffffff8dc1ffd3 RBP=ffff88802ce10000 RSP=ffffc900060c7988 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000246 R14=ffff88802ce10bf8 R15=0000000000000005 RIP=ffffffff8b76ed50 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558ad16500 ffffffff 00c00000 GS =0000 ffff8880d65d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5fd3b94816 CR3=000000002c4d9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000000001f Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055558ad167e0 000055558ad167e0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726573755f757063 7265705f65676173 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddf597916 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddf597916 00007ffddf59791c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd3c08704 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd3c08750 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd3c086c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd3c08742 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6172617020656761 6d695f746e756f6d 5f7a7973203a524f 5252450000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4457445505404244 484c5f514b504a48 5f5f5c56051f524f 5252450000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000064 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc90006bc0000 RBX=ffff888029e60000 RCX=ffffffff81e6f298 RDX=1ffff110053cc25a RSI=ffffffff86b591bf RDI=0000000000000016 RBP=0000000000000080 RSP=ffffc900006a0ec0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff90b74be0 R13=dffffc0000000000 R14=ffff888029e612d0 R15=0000000000000000 RIP=ffffffff86b591e7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5fd4a66d58 CR3=000000000e392000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd494d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddf597916 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffddf597916 00007ffddf59791c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd3c08704 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd3c08750 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd3c086c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd3c08742 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd3de74a0 00007f5fd3de7480 00007f5fd3de7488 00007f5fd3de74b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5fd3de7498 00007f5fd3de7468 00007f5fd3de74a0 00007f5fd3de7480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000064 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000fa081 RBX=ffff88801e2d4980 RCX=ffffffff8b76e4b5 RDX=0000000000000000 RSI=ffffffff8dc45fd1 RDI=ffffffff8bfa38a0 RBP=0000000000000002 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=0000000000000000 R12=ffffed1003c5a930 R13=0000000000000002 R14=ffffffff90b74ed0 R15=0000000000000000 RIP=ffffffff8b76ce1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5fd494da08 CR3=000000003f825000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000000001f Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7372656c6c6f7274 6e6f632e70756f72 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc64f7c736 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc64f7c736 00007ffc64f7c73c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91b3608704 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91b3608750 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91b36086c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f91b3608742 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6172617020656761 6d695f746e756f6d 5f7a7973203a524f 5252450000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4457445505404244 484c5f514b504a48 5f5f5c56051f524f 5252450000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8569bbf0 RDI=ffffffff9b209c00 RBP=ffffffff9b209bc0 RSP=ffffc900006f86b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=206e692065655542 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff36413d2 R15=dffffc0000000000 RIP=ffffffff8569bc17 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555716e1500 ffffffff 00c00000 GS =0000 ffff8880d68d9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6ea6a708c0 CR3=0000000025090000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ea794d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe32d0fbb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe32d0fbb6 00007ffe32d0fbbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ea6c08704 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ea6c08750 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ea6c086c4 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ea6c08742 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ea6de74a0 00007f6ea6de7480 00007f6ea6de7488 00007f6ea6de74b8 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ea794d020 00007f6ea6de7460 00007f6ea6de7470 00007f6ea6de74b0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6ea6de7498 00007f6ea6de7468 00007f6ea6de74a0 00007f6ea6de7480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000