last executing test programs: 1m16.478527735s ago: executing program 2 (id=235): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000004540)=@polexpire={0xc0, 0x1b, 0x2, 0x70bd2c, 0x25dfdbff, {{{@in=@remote, @in6=@empty, 0x4e22, 0x7, 0x4e24, 0x5, 0x2, 0x180, 0x0, 0x3a}, {0x7, 0x100000001, 0x4, 0x0, 0x1, 0xffffffffffffff8b, 0x7, 0x5}, {0x9, 0x2, 0x1, 0x8}, 0x2, 0x6e6bbd, 0x2, 0x1, 0x2}, 0xa}}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000400)={{0x3, @netrom}, [@null, @null, @rose, @bcast, @netrom, @bcast, @default, @rose]}, &(0x7f0000000140)=0x48, 0x80000) sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000005c0)="9006756e6f1ae12c825d99acec2e0f8d46e04081f31582e95e2d1ce395370865c03310d6cc7d9c0439717e8586661b48f0779435071d317a18c501e6ec7e3d755df42db809a535706bc5ba09764ff36bd1e8aa7546", 0x55}, {&(0x7f00000006c0)="4838e86601bf6a65c9c6e316cbf1a5d78b86965204f837662a2cd9bd2ed9584e6873818897ef2bf2e50eb410c11fb6581976411b2bb3114d5c609c1dad3e2f0a6b9fce9761a29fb7407752", 0x4b}, {&(0x7f0000000740)="0e4feea4c07f90f6ef4bc7ca1bd49f2cef33fd05ac9bea03625330d9992368593480812143eff759b4739081cdb2cef0f64505635f30954b2836782154427818ed451b25e160d5367fea253a9bcb2f62f2e7be1d6a924cd8300a6cb39a43d26048ada7292278bb6f1ec9041d56638c967cac00576839d44f3c7a29658eb329beaf4a3cfa976522089a8b4a53ef26d5ff2b6e472e7d58cf1ab2e2723fae76b036fd8be2c806203304772d59649c304d3310df9979904e90b33275a658a3520358336bb210000c3c5ba7621a2e1dae6f72ca3548e8752b07efd56fddf7c09e", 0xde}, {&(0x7f0000000840)="4c879b16dfd2bdb9b0757d8c216462efcf2e53589da3af0287f20ac28cc85eba9868bd84da81bb1ac204678fc89704d6061f9e686c4693bf546c0d9d88d025052fd2504598177c51f05115961eb6e3f59ad05a8f53e9fc2ad5575164fc13e73990c4f7dd5c40ddfa2a322330849baa0473fe68cca3b56a5cd92a6713daea7e4a8336f8", 0x83}, {&(0x7f0000000900)="7548eeef8ef584701f9f4d8a67b17e2c555c7b8a46bf7bb311ba60336009affb2eda82caee1f5de17d929cc1450d48869a386d556102091706d481f85980b7ce24760050c7111388cf852c95dd85653d71590834cfd30c4a2f5f933d32257c7d9f407856e7da976886419299cef3954445c067962a04ea2b0c7703a7c76efb912338c6e6712cc8bc3b109b118881025e0f3216a4a23696c699d35a95e85ccfed961bd36f9d7f09cad4a902d15023869aec21e388e77e5aba3ddc618cb5f16c", 0xbf}, {&(0x7f00000009c0)="e98045cacc6129746ea253d9dd88426f37fe0525573d6c3b0e111275bb07fa498736f46f113b43f1a42f928f3ffedf943ba2846d0e63aafaf218bfe85d9aa4b523a4453bb207d9b24889e2930b6f22c878c888b25edda4a0206fcd57a9d7e1c9edfd58f88e6ca956c0c492919ffa236553a41e309775cec3adc2a3a6e27e05855ea8f12c326c0aee939f62ebcd8fff2ee2b4eb0be374d17d2c56b75641d45b3b5d258a335fa2c7db5feba56bf9cbb91a69dee49a045517d07e8d3134169dded10bba8551dae9577abe3225203e164305ab0595e8ddfebac6f26417a8b507d53d8c7b41d283c9d7796cd32536ed821f0cc22c12ef8261fe3f5c", 0xf9}, {&(0x7f0000000ac0)="60e1414f3b11a595edcd8473254a02e0f95c3aecd6e041e4d461e475fb0ab933ab9a41f2e4b48b2689ba2c3c69626aaf196b09813c91f8813770f5db5a61b46d11fa18a198a3314d041239b01990802b2ef059f8223041cd0cd70c0984", 0x5d}, {&(0x7f0000000b40)="aa87c112198e5ea76841d33f717bff2140a502b6213f61540c76a5391ab7a2efd17cf54e9876d4a3cc427942c2168e475b4cdbdfafc5bbcc16b1b68d248bbfceab42d8ed1d71aa6f7b03131e07940836839630d7c5a4e406e6705d280ec0f4556628a63be458fd417b81e7b492c39a79bab0d64c266cbd8f69e0be", 0x7b}, {&(0x7f0000000240)="b3dcee628d44567217a871ac84e65bd0e97de62660dd71", 0x17}], 0x9, &(0x7f0000000c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}], 0x60}, 0x8c0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000001c0)={0x24, r4, 0x62c21a4ade68aba1, 0x0, 0x25dfdbfb, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) r7 = dup3(r3, r2, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d020000000000000000000000000000000000000e"], 0x0, 0x3a}, 0x20) syz_emit_ethernet(0x6a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x700, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000480)={0x7, 'vcan0\x00', {0x40}, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r8}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x3, 0x1000000000000, &(0x7f0000000340)="cbe601"}) 1m16.477460542s ago: executing program 2 (id=236): socket$inet_mptcp(0x2, 0x1, 0x106) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) (async) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x4913, 0x770e, 0x0, 0x0, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xfffffffffffffffe, 0x353502) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000580)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r0}, 0x10) (async) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) 1m15.892017217s ago: executing program 2 (id=240): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r1 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r4 = io_uring_setup(0x669, &(0x7f00000002c0)) (async) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x47, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) (async) io_uring_enter(r1, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) (async) r7 = syz_open_pts(0xffffffffffffffff, 0x8100) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000280)={0x3, 0x1}) (async) shutdown(r8, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000000)={r9, 0x7}, &(0x7f0000000040)=0x8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0xb8}}, 0x4) (async) ioctl$HIDIOCGRDESCSIZE(r10, 0x80044801, &(0x7f00000001c0)) (async) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000100)={r0, 0x1, 0xffae, 0x8}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m15.887199549s ago: executing program 2 (id=241): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@func={0x5, 0x0, 0x0, 0xc, 0x1}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x5, 0x7}, {0xf, 0x10001}, {0x4, 0xdbc}]}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x2e, 0x5f, 0x5f, 0x2e, 0x30, 0x61]}}, &(0x7f00000000c0)=""/34, 0x69, 0x22, 0x1, 0x6, 0x10000}, 0x28) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x204600) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1m15.82120405s ago: executing program 2 (id=243): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xf) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x65) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x40, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m15.241934507s ago: executing program 2 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0xb, 0xfff3}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x13}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r6, @ANYBLOB="08000b000300000008000200ac"], 0x54}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 64) r7 = socket$kcm(0xa, 0x1, 0x106) (rerun: 64) sendmsg$kcm(r7, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x4}, 0x80, 0x0}, 0x24000059) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 32) writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async, rerun: 64) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x3, {0x2, 0xff}, 0x1}, 0x18) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m0.191446874s ago: executing program 32 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0xb, 0xfff3}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x13}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r6, @ANYBLOB="08000b000300000008000200ac"], 0x54}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async, rerun: 64) r7 = socket$kcm(0xa, 0x1, 0x106) (rerun: 64) sendmsg$kcm(r7, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x4}, 0x80, 0x0}, 0x24000059) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 32) writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async, rerun: 64) connect$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x3, {0x2, 0xff}, 0x1}, 0x18) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 56.46144344s ago: executing program 3 (id=558): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1001, 0x0, 0x2}, 0xd, 0x0) landlock_restrict_self(r3, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x46, 0x11, 0x0, 0x1, [@generic="2fe5af660e49035a45f4bfb9f42cf4a03da9dc13dd24291214b225a0c4824cdc01eaf173584a4f8ccf2725ddc31c46bf937bd001977f139508a3576fb87176ca80d0"]}]}, 0x5c}], 0x1}, 0x0) 56.371765774s ago: executing program 3 (id=560): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413a181000f0000000001000000001f000e000a000f000000028002002d1f8dd3e458f8", 0x33}], 0x1}, 0x80) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000004844fd43000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 56.371052411s ago: executing program 3 (id=562): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r1, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xcc, 0x4, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_USERDATA={0x70, 0xc, "50414531443e3915299a887b06776590df466adb1c98b6f1ba987fd290550b25e6b8b8b292934e5365450e553c4b044ff739965dfc279e3fea27809bb255af54e091d0c4014598ea61c072afbe045055f3ce16e06c38a738cb98565ac868d8694d4db5ba3d096d80df1d5ccf"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8045}, 0x4) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400500010000104000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e000100697036677265746170000000080002800400120008000300", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0xd}, 0x0) 56.291441151s ago: executing program 3 (id=565): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000200)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000000)={&(0x7f0000000140)={0x38, 0x3f7, 0x2, 0x70bd27, 0x25dfdbfc, {0x10, 0xd, './file0/../file1', './file0/file0'}}, 0x38}, 0x1, 0x0, 0x0, 0x4014}, 0x2004c085) unshare(0x22020400) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) syz_open_procfs(r2, &(0x7f0000000300)='stat\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r4, 0x0, 0x3, 0x1}}, 0x20) read$FUSE(r1, &(0x7f000000ac40)={0x2020}, 0x2020) 56.22954847s ago: executing program 3 (id=567): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, 0x1c) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080), 0x202101, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4c4c3294abd26aaf3fb0066bad004b000f303c70fae6e2fc0c00f2d130f01f1260f01ca660f3881b4493c000000c4c2459d78ad", 0x3d}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0f04e3b95d8ce2ea35f014812d691bc5a8b292a34b4b26e9b3d90cef6b408c7d7d108f536c723fa77e54ba70a3502d66b33152894228da96a0480330143f54de620dbec5d85c12e1a940dad875d44fb47659408f0532a216fec86fd070dcac7cbe5c1c08bb7ef794f9d5f2f89093ba5a8449d492e46b2b7d14", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fedbdf25030000000800020008000000040006802c000180050002001400000008000300e0000001080003007f000001050002000400000005000200050000000400018008000300020000002000018014000400fe80000000000000000000000000002705000200070000001c0001800800060000000000060005004e200000060005004e22000008000300080000000500050000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x20000810}, 0x40080) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0xd39, 0x4) 56.01177323s ago: executing program 3 (id=573): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x30, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4901}, 0x0) 55.927044316s ago: executing program 33 (id=573): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x30, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_FLAGS={0x6, 0x6, 0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4901}, 0x0) 1.825461922s ago: executing program 4 (id=1546): r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000240)='./file1\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0}) r2 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.memory_spread_slab\x00', 0x2, 0x0) flock(r2, 0xb) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000100)={r1}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90e46}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x4000090) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x4, 0x4, [0x3, 0x8, 0x9, 0x3ff]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000003c0)={r5}, &(0x7f0000000400)=0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x0, 0xc8, 0x8, 0x200, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff000000, 0xffffff00, 0xffffffff], 'bond_slave_0\x00', 'caif0\x00', {0xff}, {0xff}, 0x3a, 0xfc, 0x4, 0x40}, 0x0, 0x1b8, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@inet=@set3={{0x50}, {{0x2, 0x1, 0x4}, {0x5, 0x8}, {0x56, 0xfffffffffffffffd}, 0x6}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x80000001, 'syz1\x00', {0x40}}}}, {{@ipv6={@remote, @mcast2, [0x0, 0xff], [0x0, 0xff000000, 0xffffff00], 'syzkaller0\x00', 'syzkaller1\x00', {}, {}, 0x2e, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x80, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) sendmsg$inet_sctp(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='\a', 0x1}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x808, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_seqnum', 0x88000, 0xd4) getdents(r7, &(0x7f0000000fc0)=""/4096, 0x1000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f00000002c0)={0x28, 0x2, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) 940.176654ms ago: executing program 4 (id=1562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) (async) r2 = syz_open_dev$media(&(0x7f0000000140), 0x3, 0x100) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000a00)={{0x80000000, 0x0, 0x6, [0x6, 0x6]}, {0x80000000, 0x0, 0x69edb310c7b022fe, [0x9, 0x2]}, 0x10000000, [0x22, 0x1]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)='%-5lx \x00'}, 0x20) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000240), &(0x7f0000000380)=r7}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) (rerun: 32) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000480)={r8, @multicast1, @private=0xa010102}, 0xc) 939.47667ms ago: executing program 4 (id=1563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x603, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}]}, 0x30}}, 0x20000000) r4 = socket(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e24, 0x70d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1ff}, {0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x81}, 0x0, {[0x0, 0x5, 0x0, 0x8, 0x55a4c871, 0x1, 0xf5, 0x7]}}, 0x5c) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg$unix(r4, &(0x7f00000024c0)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001500)=""/143, 0x8f}], 0x3, &(0x7f00000015c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001740)=""/88, 0x58}, {&(0x7f00000017c0)=""/79, 0x4f}, {&(0x7f0000001840)=""/157, 0x9d}, {&(0x7f0000001900)=""/150, 0x96}, {&(0x7f00000019c0)=""/104, 0x68}], 0x5, &(0x7f0000001ac0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000380)=""/18, 0x12}, {&(0x7f0000001bc0)=""/32, 0x20}, {&(0x7f0000001c00)=""/39, 0x27}, {&(0x7f0000001c40)=""/50, 0x32}], 0x4, &(0x7f0000001cc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f00000023c0)=[{&(0x7f0000001e40)=""/229, 0xe5}, {&(0x7f0000001f40)=""/243, 0xf3}, {&(0x7f0000002040)=""/100, 0x64}, {&(0x7f0000002140)=""/124, 0x7c}, {&(0x7f00000021c0)=""/179, 0xb3}, {&(0x7f0000002280)=""/140, 0x8c}, {&(0x7f0000002340)=""/96, 0x60}], 0x7, &(0x7f0000002440)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x4, 0x2021, &(0x7f00000025c0)={0x0, 0x989680}) r7 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x5c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x40000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r12, 0x4b3b, &(0x7f00000000c0)) syz_fuse_handle_req(r8, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x200, 0xfffffffa, 0x5b, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, r10, r11, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r13, 0x545c, 0x0) tkill(r7, 0x7) sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="02180000100000000000000000000000030005000000000002000010e000000100000000000000000800120000000000000000000000000010000000000000000000000000000000ac1414bb000000000000000000000000fc010000000000000000000000000000030006000000000002"], 0x80}}, 0x0) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1c001b004a008102e00f33ecdb4cc6c36ea70bd95f4b632ba35dec52", 0x1c}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 869.609945ms ago: executing program 4 (id=1564): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673c", 0x275}], 0x2}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000b59c00000008000300", @ANYRES32=r8, @ANYBLOB="38002d80"], 0x54}, 0x1, 0x0, 0x0, 0x100000d0}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, r7, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xeaf}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xef6}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x1ac, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x174, 0x2, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}, @TCA_MQPRIO_MAX_RATE64={0xb8, 0x4, 0x0, 0x1, [{0xc}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x7}, {0xc}, {0xc, 0x4, 0x8000000000000000}, {0xc}, {0xc, 0x4, 0x3}, {0xc}, {0xc, 0x4, 0x27f}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x10}, {0xc}, {0xc, 0x4, 0xfffffffffffffffc}, {0xc, 0x4, 0x7}, {0xc, 0x4, 0x9}]}, @TCA_MQPRIO_MAX_RATE64={0x58, 0x4, 0x0, 0x1, [{0xc}, {0xc, 0x4, 0x4e}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0xe}, {0xc, 0x4, 0x44eb332c}, {0xc, 0x4, 0x6}, {0xc, 0x4, 0x3}]}, @TCA_MQPRIO_MODE={0x6}]}}}, @TCA_RATE={0x6}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 869.276253ms ago: executing program 4 (id=1565): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2cf2288a911993f08d3aaea2bc0000de", 0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') r2 = fsopen(&(0x7f0000000140)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) setns(r1, 0x4000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@remote}, {@in=@multicast2, 0x0, 0x32}, @in=@rand_addr=0x64010102, {0x0, 0x7f}, {}, {0x0, 0x4}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_aead={0x4c, 0x12, {{'aegis128-generic\x00'}, 0x0, 0x180}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4001}, 0x1000c080) listen(r4, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000028000000000006907864010101ac1414aa4e244e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="420200009078ae84e69027f6c9c2ea3a73012d4a7afa475b1c01d3a39659ac88d7c39882d02b20c6481be7598e34aaa0ece04422eea0ff3940f628e9ffead7261ba1b1338345e761d9dc6025f515e86ae08bcce28baba429557af000000000000000"], 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) r6 = accept$alg(r0, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="07ff8bfb502fa095660431319d8a68b99b7107e3f089ebbedcadd480dbe4efd9d60b6f1c6907df4a473a7092f85356c69de5d09a1aed00f6f088965c2e61f501650eb97d9d99490995638b19db9ccf27f29d4bed7ba6d0fe2b94ab97df96cd450cb5e0cc3e03b3185ae6412defdb260f117402a93b57c55c33655929ab006868d5d167f2fff8a241c36e09bab7d4cd4000adeb3568acdddfe86011e2d580ceae665ab9bb87cc40b52162caf7043bbc837535b7d070f5", 0xb6}], 0x1}}], 0x1, 0x4004000) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@gettaction={0x28, 0x32, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x8000000000000001, 0x2080) write$snddsp(r9, &(0x7f0000000b00)="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", 0x1000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r6) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) ioctl$KVM_IRQ_LINE(r10, 0x4008ae61, &(0x7f0000000240)={0xc, 0x6}) accept4(r3, 0x0, &(0x7f0000000000), 0x0) 626.208133ms ago: executing program 0 (id=1567): r0 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x1, 0x2000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x48, 0x0) (async) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[r5], &(0x7f0000000040), 0x0, 0x300}) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0'}, 0xb) (async) r6 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="42dea5c0b290c227baa0000000e1ffff9400008500000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 430.443187ms ago: executing program 5 (id=1573): mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, &(0x7f00000001c0)='discard') 430.108538ms ago: executing program 0 (id=1574): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x80, 0x4, 0x7}}, 0x14) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000080)={0x5000, 0xc000}) close_range(r1, r1, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x9004, 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000180)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0xc4d1570ba93dbead, r4, 0x3d, r5}, 0x10) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x0, @local, 'pimreg1\x00'}}, 0x1e) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f0000000280)) bind$xdp(r2, &(0x7f00000002c0)={0x2c, 0x0, r4, 0x2, r5}, 0x10) r6 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x400000) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000340)={"06113c5e", 0x5b95, 0x8, 0xc7, 0x6, 0x8, "33f8bdb7c873db6f9a12024762aadc", "8d15d054", "ec48dd1d", "1732ed55", ["bf6fd6c7afd88b245e0ebca3", "377531c433324b70f634fe4b", "7d60d5da60151f00c5defc92", "c0d3533b932dda5ca535b0f2"]}) close_range(r3, r0, 0x2) shutdown(r5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) fremovexattr(r3, &(0x7f0000000400)=@random={'trusted.', '/dev/cec#\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r8, 0x111, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xe28e, 0x3c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x28048040}, 0x10) r10 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r11, 0x100000000) ioctl$CEC_TRANSMIT(r10, 0xc0386105, &(0x7f0000000600)={0x6e, 0x100000001, 0x7fff, 0x800, 0x6, 0x10, "447af3989cd349a4462d492174dd1706", 0x6, 0xdb, 0x7, 0xfe, 0x81, 0xe, 0xe7}) 364.498875ms ago: executing program 0 (id=1575): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000}, {0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x0, 0x0, 0x0, 0x70bd28, 0x0, [0x13800000, 0x0, 0x5, 0x0]}}]}, 0x164}}, 0x0) 363.004913ms ago: executing program 5 (id=1576): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="3b1f9026d26c00882df1e5b2fa619f5bbe9727ebf3ef460454fcdd38551a3e19cc22b33eeb9224e856cc20468e248020e46cfe0d814a524ce65b35d8ef491bbdbee7ca312da06f0bdf92d84c961542f7472ae5a3ef734a720545a2537c7ee97b6eee9bcb88aa0ab10105d68f01a482d7aebfb0e44f3ddebca568711cb181997ca2123bfb0b3dcb93c13c3d7cb1a9213f09a1021df7b95c40fbe079b269d8384af5012ee40663", 0xa6}], 0x1, &(0x7f0000000140)=[@dstaddrv6={0x20, 0x84, 0x8, @local}], 0x20, 0x33104ed26d24a7d6}], 0x1, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f00000001c0)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'veth1_virt_wifi\x00', {0x2, 0x4e20, @multicast2}}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000240)={{0x2f, @local, 0x4e22, 0x1, 'lblcr\x00', 0xa, 0x3, 0x75}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x4, 0x1000, 0x1000, 0x80}}, 0x44) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) getsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={'macvtap0\x00', {0x2, 0x4e24, @loopback}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/tcp\x00') getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f00000003c0), &(0x7f0000000400)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0xff, 0x0, 0xd6, 0x6}]}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000500)=@req={0x28, &(0x7f00000004c0)={'syzkaller1\x00', @ifru_names='pim6reg1\x00'}}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f0000000540)={0x18}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) syz_open_dev$sndctrl(&(0x7f0000000980), 0x7, 0x442180) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4011, r2, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x40010, r2, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000a00)=@IORING_OP_READ=@pass_buffer={0x16, 0x28, 0x2004, @fd_index=0x5, 0x2, &(0x7f00000009c0)=""/35, 0x23, 0x6, 0x1, {0x0, r5}}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000a40)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000a80)={r6}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000ac0)={0x7, 0x0, [{0xb, 0x1, 0x5, 0x7, 0x1000}, {0xc0000001, 0x9, 0xd717, 0xfffff001, 0x5}, {0xc0000000, 0xa, 0x0, 0x9, 0x1}, {0x1, 0x92, 0x3, 0x5, 0xf}, {0x4, 0x81, 0x80, 0x7fff, 0xfffffffa}, {0xa41aa7e63e013d02, 0x8ff2, 0x4, 0x3, 0x3}, {0x6, 0x7, 0x43fa, 0x2, 0x5}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000b80)={'vlan1\x00', {0x2, 0x4e23, @broadcast}}) syz_open_dev$video4linux(&(0x7f0000000bc0), 0x1, 0x2000) r8 = syz_open_procfs(0x0, &(0x7f0000000c00)='auxv\x00') ioctl$VIDIOC_DQBUF(r8, 0xc0585611, &(0x7f0000000cc0)=@multiplanar_mmap={0x8, 0x5, 0x4, 0x100000, 0x6948, {}, {0x1, 0x8, 0x4, 0x0, 0x9, 0x1, "b619825e"}, 0x1000, 0x1, {&(0x7f0000000c40)=[{0x9, 0xc, {0x1ff}, 0x1}, {0x0, 0x81, {0x80}, 0x3}]}, 0x0, 0x0, r8}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80004894}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, 0x0, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000e80)={0x2, &(0x7f0000000e40)=[{0x7ff, 0xc, 0x3}, {0x1, 0xf9, 0x80, 0x65b}]}) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000f00)=0x1) 362.645538ms ago: executing program 1 (id=1577): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000002380)=""/165, 0xa5}], 0x1, 0x3, 0x4) 362.316175ms ago: executing program 1 (id=1578): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x3, 0x3, @loopback}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x620400, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r3) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400", @ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f0000000600)=""/107, 0x6b, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000500)="66b8fe000f00d0b9800000c00f3235002000000f300fc75c231766b874000f00d0b9800000c00f3235000100000f30b9640a00000f320fc75ab00f01ca269866ba4200ec", 0x44}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x20) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000000000008900004000"/24]) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x0, 0x280, 0x368, 0x1b0, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) close_range(r1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) 361.823952ms ago: executing program 5 (id=1579): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}}}, 0x108) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x842, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f00000001c0)=0xfffffff7) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00'/11, @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x41) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ffffffffffff96a261597d0b77bddb9c093f1689f22f4dea95c4f349cf85bd770002000000000000dd211bcaac67872af2b4290e48c3704a1789256035f423bcd1f8ef0755ba51e12c8926e8af78fbfe68f26a5ff2459bdab58ffa32a0d58b117e31644e084356e16954989f81c8224dc22f4ef9857d7ad420bc4c92c92029071e64fabe1a930e22ee4e35323f2c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r6, 0x40140921, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}}}, 0x108) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x842, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f00000001c0)=0xfffffff7) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00'/11, @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x41) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ffffffffffff96a261597d0b77bddb9c093f1689f22f4dea95c4f349cf85bd770002000000000000dd211bcaac67872af2b4290e48c3704a1789256035f423bcd1f8ef0755ba51e12c8926e8af78fbfe68f26a5ff2459bdab58ffa32a0d58b117e31644e084356e16954989f81c8224dc22f4ef9857d7ad420bc4c92c92029071e64fabe1a930e22ee4e35323f2c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) (async) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) (async) ioctl$TIOCGPTPEER(r6, 0x40140921, 0x8) (async) 245.545327ms ago: executing program 1 (id=1580): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid\x00') ioctl$NS_GET_PARENT(r2, 0x8004b706, 0x0) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000000c0)="0fc7b03eb6660ff19006000fc79e0500baf80c66b827d8608666efbafc0cb000ee66b9d90b000066b8f47a000066ba000000000f300f01c2660fc775006680b24b009166b99400004066b89584000066ba000000000f30640f5592b94e", 0x5d}], 0x1, 0x72, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x1, 0x0, 0xa5dfdbfd, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0xffe4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40041}, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000a80)=0x1, 0x4) 238.769621ms ago: executing program 0 (id=1581): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 165.095582ms ago: executing program 0 (id=1582): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x0, '\x00', @p_u16=0x0}}) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f00000029c0)=0x2, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x0) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) read$FUSE(r4, &(0x7f00000057c0)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50}, 0xffd3) r5 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000079c0)={0x2020}, 0x2020) 163.996501ms ago: executing program 5 (id=1583): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) (async) pipe2$watch_queue(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000940)=0x6, 0x4) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) (async) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x6) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {0x9, 0xfffe, 0x2, 0x4}, 0x1f, [0x9, 0x9, 0x2aa, 0x5, 0xffffffff, 0x81, 0x9b7e, 0xd86e, 0x400, 0x1, 0x8, 0x8, 0x7, 0x80, 0x9, 0x40, 0x8, 0x1, 0xffff0000, 0x8, 0x3, 0x5, 0x80000001, 0x1, 0x40, 0xf72, 0x3531, 0x9, 0x8, 0x9d, 0x80000001, 0x3aef, 0x1, 0x2, 0x6f, 0xc, 0x1, 0x5b3, 0x5, 0x9, 0x1, 0x4, 0x4, 0x2, 0x3, 0x4b6dd7a1, 0x6, 0x2, 0x2, 0x7, 0x9, 0xe, 0xc9e2, 0xd688, 0x0, 0x3, 0x8, 0x3, 0x8, 0x3, 0x8, 0x7, 0x80000001, 0x55d], [0x0, 0xff, 0x6, 0xe, 0xffff8001, 0x1, 0x445f, 0x4dfc, 0x8, 0xffffffff, 0xb, 0x6, 0xa67, 0xffff, 0x3, 0x2, 0x5, 0x4, 0xf, 0x5, 0x66a5, 0x2, 0x1, 0x10001, 0x2, 0x35, 0xc82, 0x2, 0x10001, 0x6, 0x5, 0x2, 0xd2, 0x7, 0x4, 0x10000, 0x6, 0x1, 0x7, 0x7ff, 0x5, 0x9, 0x8edd, 0x81, 0x94f, 0x1, 0x5, 0x7ff, 0xf81, 0xdc, 0x6, 0x80000001, 0x7f, 0x7f, 0x9, 0x7fff, 0x2, 0x80000000, 0x8, 0xffffffff, 0x6, 0x0, 0x8f, 0x80000000], [0x2, 0x9, 0x4, 0x5, 0x8, 0x1, 0x7, 0x9, 0x2, 0x9, 0x8, 0xffffffff, 0xfff, 0x0, 0x10001, 0x1, 0x1, 0x0, 0x6, 0xff8f, 0x200, 0x402, 0xfffff5cb, 0x200, 0x9, 0x70c, 0x7, 0x4, 0xa7, 0x0, 0x20e6, 0x10000, 0x9, 0x4, 0x4, 0x21db, 0x77, 0x81, 0x7, 0x101, 0x2e2, 0x0, 0x3, 0x4, 0xc6b9, 0xc, 0x3, 0xfffffffc, 0x6, 0x7fff, 0x8, 0x401, 0x2, 0x120000, 0x0, 0x3ff, 0x9, 0x0, 0x9, 0x8, 0x10, 0x6, 0x4, 0x7f], [0x2, 0x3, 0x5, 0x9, 0xfffffffd, 0x36a, 0x0, 0xae00, 0x5, 0x80, 0x58b, 0x0, 0x8, 0x7, 0xfffffffd, 0xa184, 0x1, 0x8, 0x3, 0x6, 0x2, 0x7, 0x80, 0x54, 0x6, 0x3, 0x57f5, 0x8, 0x80, 0x6e3, 0xf58, 0x8000, 0x100, 0x100, 0x3, 0x5, 0x7, 0x9, 0x3, 0xffff, 0x1, 0x3, 0x4, 0x4, 0x0, 0x8, 0x0, 0xa8, 0x3000000, 0x101, 0x2, 0x4, 0xee3d, 0x446, 0x2, 0xfffffffd, 0x7, 0x3, 0x1, 0x800000, 0xa05, 0x400, 0x5, 0x2]}, 0x45c) (async) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) (async) exit(0x1ff) r2 = socket(0x1e, 0x1, 0x0) (async) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x5) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x38, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@generic="12ccbd379ce6cd69"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/195, 0xc3}], 0x1}, 0x2) (async, rerun: 64) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x65) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000006c0)={@multicast1, @remote, 0x0}, &(0x7f0000000700)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@exit]}, &(0x7f0000000600)='syzkaller\x00', 0x24c, 0x6a, &(0x7f0000000640)=""/106, 0x41100, 0x5, '\x00', r5, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0x3, 0x0, 0xa36b}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000780)=[{0x5, 0x1, 0xf, 0x1}, {0x1, 0x4, 0xe, 0x25aa3a49510c2bad}, {0x5, 0x3, 0xb, 0x8}, {0x1, 0x5, 0xd, 0x4}, {0x4, 0x3, 0xd, 0xa}], 0x10, 0x10}, 0x94) 163.733777ms ago: executing program 1 (id=1584): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0xa, 0x200000}) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$binfmt_elf32(r3, &(0x7f00000020c0)=ANY=[@ANYBLOB="7f454c46040c02050f0000000000000002003e00f7267d0e65"], 0x58) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r6 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f00000000c0)={0x80002000}) getpriority(0x2, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) read$dsp(r7, &(0x7f0000000200)=""/230, 0xe6) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x842, 0x0) write$dsp(r8, &(0x7f0000000340)="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", 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 80.364757ms ago: executing program 0 (id=1585): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000240)="440f2058350e000000440f22c0670f01c8c744240018000000c744240212290000ff2c243e3e660f38822c222e650f01c8c4a3d17f3a26460f32c74424006a000000c744240228e72de5ff1c240f5a6b0d", 0x51}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000080), 0x2, &(0x7f00000000c0)={'trans=virtio,', {[{@nodevmap}]}}) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 79.341871ms ago: executing program 5 (id=1586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001c000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r0, &(0x7f0000000340), 0x0}, 0x20) 3.866973ms ago: executing program 1 (id=1587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240d0091d41fad08", @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB="00000100", @ANYRES32=0x0, @ANYBLOB], 0x27}, 0x1, 0x0, 0x0, 0x40001}, 0x4048080) 3.471338ms ago: executing program 5 (id=1588): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000db5000/0x2000)=nil, 0x2000}, 0x1}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0xf2, 0x9, 0x9, 0x11, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x40, 0x20, 0x6, 0x800}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x8000, 0x7800, 0x6, 0x607, {{0x1d, 0x4, 0x1, 0x5, 0x74, 0x64, 0x0, 0x8, 0x29, 0x0, @local, @rand_addr=0x4, {[@cipso={0x86, 0x33, 0xffffffffffffffff, [{0x1, 0xc, "15f3e4668d52e7782e47"}, {0x5, 0x9, "7585514f50735c"}, {0x7, 0x6, "0a8778dc"}, {0x1, 0x3, '<'}, {0x7, 0xd, "94e27a60b1fe68956220d7"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0xf6, 0x1, 0x6, [{@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x4}, {@loopback, 0x81}]}]}}}}}) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x60, r3, 0xea64ff80ebf75caf, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x60}}, 0x800) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0x1790) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x10000, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) 2.927498ms ago: executing program 4 (id=1589): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000230000000000000000000000000000b7fc8158b2c03f77f9985cdb89d27c7860569c3ca3074a7a5c01000000000000000000006491ac0c6d9a77b35f4504f815eb8b86561dc4a5e3a7fa0689e7979b0a90a9ad"], 0x50) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000240)="b761a9688c1282fcb99cc9bd04c378090955f31aedeb0790368d0fcde95a5e118012bcbffb894e", 0x27}, {&(0x7f00000003c0)="00f73a5c5cca394c07600d0f796ad29cb9d243bbf5c41fb86f0b7a80e4cfc2414be196183a63404c8277555eb932ca686fb2b335fbf872e9f2ff66ff3108b9f53ef3250be7f2c596c3c16a5fd2bedbe5e50ba29e65e0dd561dcdd5f6914037ad0fa401403543d898c969b32ffb8ccdb6b939b049637b0f91a1db452d3895b8094c673084e506ff164324b3636b3c142d734ccb7631936d61f1a26753e18b420a6e338e1bcb2f16afc043200013a986703810f2349892b6942b2d7be0788a972b4d32a04821a1a61b3c9e4b73482911c7c6f4097c3bb7d74037db9d9b9695f38b58f45294650c", 0xe6}], 0x2) r2 = socket(0x40000000015, 0x5, 0x0) keyctl$link(0x8, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000fe9000/0x14000)=nil, 0x14000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000cf261ac8b398437e8870000000000000000007112d4000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x200000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28) sendto$inet6(r3, &(0x7f0000000440)="83", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000100)=0x7d06, 0x4) recvfrom$inet6(r3, &(0x7f0000000300)=""/19, 0x4000, 0x40000041, 0x0, 0x0) munmap(&(0x7f0000f62000/0x1000)=nil, 0x1000) munmap(&(0x7f000092b000/0x3000)=nil, 0x3000) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000eb0000/0x3000)=nil, 0x3000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) 0s ago: executing program 1 (id=1590): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)={0x5, "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"}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x200400, 0x0) preadv2(r1, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000440)=""/219, 0xdb}, {&(0x7f0000000540)=""/88, 0x58}], 0x4, 0x2df, 0xab0, 0x8) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil}) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000640)={'\x00', 0x2badf3a8, 0x0, 0x400}) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000006c0)=0xffffffff, &(0x7f0000000700)=0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fstat(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = accept$unix(r0, &(0x7f00000007c0)=@abs, &(0x7f0000000840)=0x6e) r5 = signalfd4(r4, &(0x7f0000000880), 0x8, 0x80800) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000000900)={0x8, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000940)='./binderfs/custom1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0xffffffffffffffff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000980)=0x19) r8 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000a00)=0x1, 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000ac0)=0x48) read(r8, &(0x7f0000000b00)=""/4096, 0x1000) ioctl$NBD_PRINT_DEBUG(r0, 0xab06) pwritev2(r2, &(0x7f0000001f40)=[{&(0x7f0000001b00)="7c3e3dbf7d79fd0478f0a74c22b1087122f4257492058db8ae43c7c4877db82afc138ea24509b08f2174de7b53b4947fe7ff4858aa", 0x35}, {&(0x7f0000001b40)="1f17d70b4d0f4def9902be138a974efe56b0687319fdc5db4d33ac49bbc11c13077877d6871335036be593d4aeb239ac3d5b7516d3ecd7e7e6fc2725354b6431ce775020bfffb0aedf13dce56965cfd3c695ba22565b73db4d78ac1d97632d5f2053b818e9699acf6325354e39c5672c312761d8bdb1f8f5b8198e80f3bde4c624df992b176e92f6eba8d1af2f9076cb48832dc7f4234f7eb5fed7860dfeadc0c4f294f0", 0xa4}, {&(0x7f0000001c00)="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", 0xfb}, {&(0x7f0000001d00)="c9cead1cbca2d93a3efe9db62b5eef27f3be7f2b68dcfa3f378b096325e25d0b373e832fc83d1e735794", 0x2a}, {&(0x7f0000001d40)="0b864fea61206bc4a557c21c57c15407fb573e26711eb9eb20ce43140ecf9e05a32711eee9b2df300656a72213639df3292a9996f8147a7f6c3d6a5f3b49a86c6ae5f8f9d53aa044c17acf07664938a80421c488a9b40b8e88b7811bc8a9f5018a744867344a4b9d43f89e485a4888f9b5c7205ff23cb4f44488a632b7e7ca16ac44d06329a208a61793fd1d90873669c3fa0ed7101ec1ebd447a75ddd7da8fca04488b1c038fdf28a935d89f7ae9da27925bbc45fa95cc2925f65818e8b89eb8dc187546cb4", 0xc6}, {&(0x7f0000001e40)="8b557935b717a8b79d665486d6cdf060b5dd4c7ac94e0319bccb9ea41b26c8da3a3d689d1ef16f434858c2c222a561b716c0a663bc31c4fd9f0e042df69cbd4930dc571eb96dd4f223f5e1e04dc93d73d4e839e8a04581cfef7b8ea4271d91712ecdf1d5d3c232f6c7b00dcfc1b23f13dcf46514d4ef7b2e0650666c63ca32033b9aa8e2ce4e2352bc6a979feeb27dc6cbdb580da005db2f9e2aff2aa23792e0db6d1658181eef16b5d51a625e945e7cb84757defbabf8c3bcac043ec41c795ea2f507a354e32f8f136e496a3d8a24c88fffafcf230f9480356e46a461e7fbf3f20bd86237bbf993ff07b0083807648b4535", 0xf2}], 0x6, 0xfffffffd, 0x5, 0x8) madvise(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000001fc0)={[{0x8, 0xe3be, 0x7, 0xf9, 0x3, 0x1, 0x2d, 0x8f, 0xf, 0x39, 0x96, 0xff, 0x8}, {0x0, 0x53d, 0x9, 0x4, 0x57, 0x6, 0x5, 0x9, 0xb, 0xe8, 0xb, 0x7f}, {0x9, 0x0, 0x2, 0x6, 0xc, 0x0, 0x3, 0x3, 0x1, 0xf2, 0x3, 0x2, 0xa}], 0x81}) setresuid(r3, r3, 0xee00) ioctl$BSG_GET_VERSION_NUM(r5, 0x2282, &(0x7f0000002040)) close_range(r6, r8, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000002080)={@in6={{0xa, 0x4e20, 0x21, @local, 0x7}}, 0x0, 0x0, 0x13, 0x0, "d6697d0e1f08e9a0e981c36ae428cb923ef5b44035b067be985d656189bef9a8150aea80fb41697bdf7d91325ce1a5faf9773da13cf771e73f6b84865974392ccfb1e8a4f2877d9f8387188049272cbd"}, 0xd8) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x8400, 0xc4) kernel console output (not intermixed with test programs): ered forwarding state [ 80.155472][ T7237] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.157745][ T7237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.255194][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.258481][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.261379][ T54] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.265461][ T54] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.268264][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.271978][ T54] usb 5-1: config 0 descriptor?? [ 80.296010][ T7663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.420685][ T7663] veth0_vlan: entered promiscuous mode [ 80.437908][ T7663] veth1_vlan: entered promiscuous mode [ 80.454870][ T7663] veth0_macvtap: entered promiscuous mode [ 80.458928][ T7663] veth1_macvtap: entered promiscuous mode [ 80.473648][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.481005][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.488315][ T7663] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.491198][ T7663] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.494305][ T7663] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.497164][ T7663] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.550081][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.552622][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.569330][ T7228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.571932][ T7228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.637916][ T7748] tipc: Started in network mode [ 80.640023][ T7748] tipc: Node identity 6ef7b4eee444, cluster identity 4711 [ 80.642959][ T7748] tipc: Enabled bearer , priority 0 [ 80.647231][ T7748] syzkaller0: entered promiscuous mode [ 80.649530][ T7748] syzkaller0: entered allmulticast mode [ 80.681403][ T54] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd [ 80.684568][ T7748] tipc: Resetting bearer [ 80.693734][ T54] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 80.703453][ T7747] tipc: Resetting bearer [ 80.711772][ T7747] tipc: Disabling bearer [ 80.763589][ T7757] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 80.840982][ T7769] tmpfs: Bad value for 'mpol' [ 80.947637][ T7704] syz.0.481: attempt to access beyond end of device [ 80.947637][ T7704] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 80.952045][ T7704] syz.0.481: attempt to access beyond end of device [ 80.952045][ T7704] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 80.957145][ T7704] Mount JFS Failure: -5 [ 80.958963][ T7704] jfs_mount failed w/return code = -5 [ 80.963387][ T7704] devpts: Unknown parameter 'maxkdir' [ 80.971762][ T54] usb 5-1: USB disconnect, device number 3 [ 81.398475][ T6032] hid-generic 0005:10CF:0009.0005: unknown main item tag 0x0 [ 81.405278][ T6032] hid-generic 0005:10CF:0009.0005: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 81.437138][ T7818] fuse: Bad value for 'fd' [ 81.474251][ T5949] Bluetooth: hci4: command tx timeout [ 81.495021][ T40] kauditd_printk_skb: 102 callbacks suppressed [ 81.495036][ T40] audit: type=1400 audit(1753747865.230:675): avc: denied { read } for pid=7823 comm="syz.3.512" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.502963][ T7824] __nla_validate_parse: 7 callbacks suppressed [ 81.502973][ T7824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.512'. [ 81.507613][ T40] audit: type=1400 audit(1753747865.230:676): avc: denied { open } for pid=7823 comm="syz.3.512" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.524916][ T40] audit: type=1400 audit(1753747865.230:677): avc: denied { ioctl } for pid=7823 comm="syz.3.512" path="/dev/input/event1" dev="devtmpfs" ino=942 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.536931][ T40] audit: type=1400 audit(1753747865.270:678): avc: denied { map } for pid=7825 comm="syz.0.513" path="socket:[20501]" dev="sockfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.549147][ T40] audit: type=1400 audit(1753747865.270:679): avc: denied { read } for pid=7825 comm="syz.0.513" path="socket:[20501]" dev="sockfs" ino=20501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.599986][ T7839] fuse: Bad value for 'fd' [ 81.688795][ T7850] fuse: Bad value for 'fd' [ 81.804194][ T40] audit: type=1400 audit(1753747865.540:680): avc: denied { create } for pid=7855 comm="syz.3.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.808238][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 81.815816][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 81.819868][ T40] audit: type=1400 audit(1753747865.550:681): avc: denied { ioctl } for pid=7855 comm="syz.3.523" path="socket:[18236]" dev="sockfs" ino=18236 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 81.844923][ T7860] tipc: Enabling of bearer rejected, failed to enable media [ 81.866279][ T7863] ref_ctr increment failed for inode: 0x28e offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88803c6fda00 [ 82.144921][ T7880] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 82.171840][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 82.176628][ T7882] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 82.179117][ T7882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.183182][ T7882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.186025][ T7882] IPv6: NLM_F_CREATE should be set when creating new route [ 82.188318][ T7882] IPv6: NLM_F_CREATE should be set when creating new route [ 82.193032][ T7882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.201542][ T7882] vlan2: entered promiscuous mode [ 82.203237][ T7882] bridge0: entered promiscuous mode [ 82.237133][ T7885] netlink: 96 bytes leftover after parsing attributes in process `syz.3.532'. [ 82.405012][ T7905] 9pnet_fd: Insufficient options for proto=fd [ 82.409706][ T40] audit: type=1400 audit(1753747866.140:682): avc: denied { write } for pid=7904 comm="syz.1.539" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 82.416752][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.536'. [ 82.554849][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.540'. [ 82.692274][ T40] audit: type=1400 audit(1753747866.420:683): avc: denied { read } for pid=7930 comm="syz.3.545" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 82.699917][ T40] audit: type=1400 audit(1753747866.430:684): avc: denied { open } for pid=7930 comm="syz.3.545" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 82.711178][ T7933] netlink: 228 bytes leftover after parsing attributes in process `syz.0.544'. [ 82.715633][ T7933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.718750][ T7933] IPv6: NLM_F_CREATE should be set when creating new route [ 82.795481][ T7949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.549'. [ 82.882651][ T7967] tmpfs: Group quota inode hardlimit too large. [ 82.921479][ T7972] dvmrp1: entered allmulticast mode [ 82.944703][ T7979] netlink: 168 bytes leftover after parsing attributes in process `syz.1.554'. [ 82.997955][ T7989] fuse: Unknown parameter 'ÿÿÿÿ0x0000000000000005' [ 83.081323][ T8009] netlink: 'syz.3.560': attribute type 10 has an invalid length. [ 83.100386][ T8013] netlink: 'syz.4.561': attribute type 12 has an invalid length. [ 83.102836][ T8013] netlink: 'syz.4.561': attribute type 29 has an invalid length. [ 83.106220][ T8013] netlink: 'syz.4.561': attribute type 2 has an invalid length. [ 83.108607][ T8013] netlink: 'syz.4.561': attribute type 2 has an invalid length. [ 83.110962][ T8013] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 83.113353][ T8013] netlink: 'syz.4.561': attribute type 37 has an invalid length. [ 83.355775][ T8048] Illegal XDP return value 2482806114 on prog (id 171) dev N/A, expect packet loss! [ 83.460546][ T8067] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 83.553898][ T63] Bluetooth: hci4: command tx timeout [ 83.702689][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.706166][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.709040][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.712415][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.715417][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.837804][ T8082] chnl_net:caif_netlink_parms(): no params data found [ 83.905301][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.908188][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.910544][ T8082] bridge_slave_0: entered allmulticast mode [ 83.914087][ T8082] bridge_slave_0: entered promiscuous mode [ 83.918999][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.921906][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.925072][ T8082] bridge_slave_1: entered allmulticast mode [ 83.927893][ T8082] bridge_slave_1: entered promiscuous mode [ 83.979719][ T8082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.984819][ T8082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.033392][ T8082] team0: Port device team_slave_0 added [ 84.038098][ T8082] team0: Port device team_slave_1 added [ 84.074458][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.076718][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.085740][ T8082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.090093][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.092332][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.101405][ T8082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.143558][ T8082] hsr_slave_0: entered promiscuous mode [ 84.145962][ T8082] hsr_slave_1: entered promiscuous mode [ 84.148038][ T8082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.150427][ T8082] Cannot create hsr debugfs directory [ 84.289387][ T8104] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 84.336478][ T8082] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 84.342364][ T8082] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 84.355193][ T5955] Bluetooth: hci0: command 0x0406 tx timeout [ 84.356460][ T8082] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 84.365149][ T8082] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 84.426502][ T8082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.437387][ T8082] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.443351][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.446253][ T7263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.456779][ T7263] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.459640][ T7263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.578746][ T8082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.683630][ T8150] netlink: 'syz.1.596': attribute type 1 has an invalid length. [ 84.722182][ T8082] veth0_vlan: entered promiscuous mode [ 84.729620][ T8082] veth1_vlan: entered promiscuous mode [ 84.745045][ T8082] veth0_macvtap: entered promiscuous mode [ 84.748945][ T8082] veth1_macvtap: entered promiscuous mode [ 84.759221][ T8082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.765950][ T8082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.771199][ T8082] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.774365][ T8082] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.777205][ T8082] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.780411][ T8082] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.829290][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.832254][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.849800][ T7263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.852293][ T7263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.493249][ T8186] FAULT_INJECTION: forcing a failure. [ 85.493249][ T8186] name failslab, interval 1, probability 0, space 0, times 1 [ 85.497385][ T8186] CPU: 0 UID: 0 PID: 8186 Comm: syz.0.604 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 85.497399][ T8186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.497406][ T8186] Call Trace: [ 85.497409][ T8186] [ 85.497414][ T8186] dump_stack_lvl+0x16c/0x1f0 [ 85.497460][ T8186] should_fail_ex+0x512/0x640 [ 85.497480][ T8186] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 85.497497][ T8186] should_failslab+0xc2/0x120 [ 85.497508][ T8186] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 85.497523][ T8186] ? getname_flags.part.0+0x4c/0x550 [ 85.497539][ T8186] getname_flags.part.0+0x4c/0x550 [ 85.497554][ T8186] getname_flags+0x93/0xf0 [ 85.497569][ T8186] user_path_at+0x24/0x60 [ 85.497584][ T8186] __x64_sys_mount+0x1fc/0x310 [ 85.497596][ T8186] ? __pfx___x64_sys_mount+0x10/0x10 [ 85.497612][ T8186] do_syscall_64+0xcd/0x4c0 [ 85.497623][ T8186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.497634][ T8186] RIP: 0033:0x7f884d98e9a9 [ 85.497643][ T8186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.497653][ T8186] RSP: 002b:00007f884b7d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.497663][ T8186] RAX: ffffffffffffffda RBX: 00007f884dbb6080 RCX: 00007f884d98e9a9 [ 85.497669][ T8186] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 85.497675][ T8186] RBP: 00007f884b7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 85.497681][ T8186] R10: 0000000000072080 R11: 0000000000000246 R12: 0000000000000001 [ 85.497687][ T8186] R13: 0000000000000000 R14: 00007f884dbb6080 R15: 00007ffc19a0b4f8 [ 85.497700][ T8186] [ 85.643980][ T5949] Bluetooth: hci4: command tx timeout [ 85.804004][ T5949] Bluetooth: hci1: command tx timeout [ 86.528586][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 86.528597][ T40] audit: type=1400 audit(1753747870.260:714): avc: denied { append } for pid=8228 comm="syz.5.618" name="video0" dev="devtmpfs" ino=955 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 86.641231][ T8238] validate_nla: 1 callbacks suppressed [ 86.641248][ T8238] netlink: 'syz.1.621': attribute type 1 has an invalid length. [ 86.650171][ T8238] netlink: 'syz.1.621': attribute type 2 has an invalid length. [ 86.679462][ T40] audit: type=1326 audit(1753747870.410:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8232 comm="syz.5.619" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f7878e9a9 code=0x0 [ 86.933143][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'. [ 86.936079][ T8266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.627'. [ 86.986260][ T40] audit: type=1400 audit(1753747870.720:716): avc: denied { getopt } for pid=8257 comm="syz.4.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.070998][ T40] audit: type=1400 audit(1753747870.800:717): avc: denied { write } for pid=8270 comm="syz.4.629" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 87.149334][ T40] audit: type=1400 audit(1753747870.880:718): avc: denied { bind } for pid=8272 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.155850][ T40] audit: type=1400 audit(1753747870.880:719): avc: denied { node_bind } for pid=8272 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 87.189543][ T8276] netlink: 45 bytes leftover after parsing attributes in process `syz.4.631'. [ 87.206707][ T40] audit: type=1400 audit(1753747870.940:720): avc: denied { ioctl } for pid=8275 comm="syz.4.631" path="socket:[20145]" dev="sockfs" ino=20145 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.291202][ T40] audit: type=1400 audit(1753747871.020:721): avc: denied { ioctl } for pid=8280 comm="syz.4.632" path="socket:[20146]" dev="sockfs" ino=20146 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.299506][ T40] audit: type=1400 audit(1753747871.020:722): avc: denied { bind } for pid=8280 comm="syz.4.632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 87.306259][ T40] audit: type=1400 audit(1753747871.020:723): avc: denied { name_bind } for pid=8280 comm="syz.4.632" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 87.422205][ T8285] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 87.663180][ T8304] program syz.0.638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.670869][ T8308] trusted_key: syz.1.639 sent an empty control message without MSG_MORE. [ 87.712339][ T8310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 87.715091][ T5949] Bluetooth: hci4: command tx timeout [ 87.874257][ T5949] Bluetooth: hci1: command tx timeout [ 88.209937][ T8334] fuse: Bad value for 'rootmode' [ 88.213284][ T8334] fuse: Unknown parameter 'groupid' [ 88.643091][ T8344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48470 sclass=netlink_route_socket pid=8344 comm=syz.4.651 [ 88.647949][ T8344] netlink: 'syz.4.651': attribute type 1 has an invalid length. [ 88.753923][ T8351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.760228][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.654'. [ 88.763996][ T8351] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8351 comm=syz.4.654 [ 88.829279][ T8355] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 88.898060][ T8359] loop4: detected capacity change from 0 to 2560 [ 88.902794][ T7907] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.906062][ T7907] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.908797][ T7907] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.911620][ T7907] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.914879][ T7907] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.925353][ T7907] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.928282][ T7907] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.931387][ T7907] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.934293][ T7907] Buffer I/O error on dev loop4, logical block 0, async page read [ 88.937188][ T7907] Buffer I/O error on dev loop4, logical block 0, async page read [ 89.849346][ T8388] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 89.953928][ T5949] Bluetooth: hci1: command tx timeout [ 90.053633][ T8404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=8404 comm=syz.5.670 [ 90.109870][ T8405] sp0: Synchronizing with TNC [ 90.273938][ T5949] Bluetooth: hci0: command 0x0406 tx timeout [ 90.324403][ T34] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 90.495558][ T34] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.499137][ T34] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 90.502497][ T34] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.506528][ T34] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.512364][ T8407] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 90.518023][ T34] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.722114][ T24] usb 10-1: USB disconnect, device number 2 [ 91.458118][ T8417] netlink: 'syz.5.673': attribute type 39 has an invalid length. [ 91.749437][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 91.749452][ T40] audit: type=1400 audit(1753747875.480:741): avc: denied { listen } for pid=8418 comm="syz.5.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.759901][ T40] audit: type=1400 audit(1753747875.480:742): avc: denied { accept } for pid=8418 comm="syz.5.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 92.033929][ T5949] Bluetooth: hci1: command tx timeout [ 92.166464][ T8442] netlink: 'syz.0.680': attribute type 30 has an invalid length. [ 92.169036][ T8442] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 92.171853][ T8442] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 92.176042][ T40] audit: type=1400 audit(1753747875.910:743): avc: denied { read } for pid=8441 comm="syz.0.680" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.185146][ T40] audit: type=1400 audit(1753747875.910:744): avc: denied { open } for pid=8441 comm="syz.0.680" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.195278][ T40] audit: type=1400 audit(1753747875.910:745): avc: denied { ioctl } for pid=8441 comm="syz.0.680" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.211622][ T8444] CUSE: unknown device info "" [ 92.213238][ T8444] CUSE: zero length info key specified [ 92.759859][ T8468] No source specified [ 92.864308][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'. [ 92.883652][ T8485] libceph: resolve ' [ 92.883652][ T8485] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 92.883652][ T8485] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 92.933554][ T8485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=8485 comm=syz.4.695 [ 92.941038][ T8496] libceph: resolve ' [ 92.941038][ T8496] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 92.941038][ T8496] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 93.051685][ T40] audit: type=1400 audit(1754272164.780:746): avc: denied { bind } for pid=8515 comm="syz.4.705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 93.060284][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'. [ 93.065131][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 93.162360][ T40] audit: type=1400 audit(1754272164.890:747): avc: denied { remount } for pid=8528 comm="syz.1.708" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 93.234781][ T40] audit: type=1400 audit(1754272164.970:748): avc: denied { write } for pid=8541 comm="syz.1.711" path="socket:[24794]" dev="sockfs" ino=24794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 93.397555][ T5949] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 93.473503][ T40] audit: type=1400 audit(1754272165.194:749): avc: denied { ioctl } for pid=8554 comm="syz.4.715" path="socket:[24081]" dev="sockfs" ino=24081 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 93.482697][ T40] audit: type=1400 audit(1754272165.194:750): avc: denied { read } for pid=8554 comm="syz.4.715" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 93.483660][ T8555] overlay: filesystem on ./file1 not supported as upperdir [ 93.644033][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.720'. [ 93.649487][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 93.661487][ T8568] atomic_op ffff88802c6a7998 conn xmit_atomic 0000000000000000 [ 94.119150][ T8606] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 94.178512][ T8607] ptrace attach of "/syz-executor exec"[5945] was attempted by "/syz-executor exec"[8607] [ 94.304381][ T8612] binder: 8611:8612 ioctl 4018620d 0 returned -22 [ 94.877599][ T8606] syz.0.732 (8606): drop_caches: 1 [ 94.907209][ T8606] syz.0.732 (8606): drop_caches: 1 [ 95.024218][ T8655] fuse: Bad value for 'fd' [ 95.061443][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.748'. [ 95.075888][ T8657] tipc: Enabled bearer , priority 0 [ 95.078332][ T8657] syzkaller0: entered promiscuous mode [ 95.080818][ T8657] syzkaller0: entered allmulticast mode [ 95.104213][ T8664] XFS (nullb0): Invalid superblock magic number [ 95.105896][ T8657] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 95.109235][ T8657] UDF-fs: Scanning with blocksize 2048 failed [ 95.116521][ T8657] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 95.119501][ T8657] UDF-fs: Scanning with blocksize 4096 failed [ 95.120058][ T8672] x_tables: duplicate underflow at hook 2 [ 95.120333][ T8664] x_tables: duplicate underflow at hook 2 [ 95.136101][ T8663] XFS (nullb0): Invalid superblock magic number [ 95.503881][ T8681] sch_tbf: burst 0 is lower than device geneve0 mtu (1464) ! [ 95.510055][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.753'. [ 95.514411][ T8681] netlink: 24 bytes leftover after parsing attributes in process `syz.5.753'. [ 95.519229][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.753'. [ 95.660264][ T8681] team0 (unregistering): Port device team_slave_0 removed [ 95.668648][ T8681] team0 (unregistering): Port device team_slave_1 removed [ 95.890336][ T8695] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.903983][ T8656] tipc: Resetting bearer [ 95.933574][ T8656] tipc: Disabling bearer [ 96.158195][ T8708] overlayfs: failed to resolve './file0': -2 [ 96.431158][ T8715] netlink: 100 bytes leftover after parsing attributes in process `syz.1.762'. [ 96.468314][ T8663] syz.4.749 (8663) used greatest stack depth: 20952 bytes left [ 96.471634][ T8717] random: crng reseeded on system resumption [ 97.048925][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 97.048940][ T40] audit: type=1400 audit(1754272168.672:780): avc: denied { getopt } for pid=8741 comm="syz.5.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.100304][ T8747] mkiss: ax0: crc mode is auto. [ 97.410168][ T8751] fuse: Bad value for 'fd' [ 97.643278][ T40] audit: type=1400 audit(1754272169.247:781): avc: denied { setopt } for pid=8752 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.927279][ T8082] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 97.930918][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz-executor Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 97.930933][ T8082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 97.930940][ T8082] Call Trace: [ 97.930944][ T8082] [ 97.930948][ T8082] dump_stack_lvl+0x16c/0x1f0 [ 97.930987][ T8082] dump_header+0x101/0x930 [ 97.931006][ T8082] oom_kill_process+0x270/0xa60 [ 97.931024][ T8082] out_of_memory+0x350/0x1700 [ 97.931043][ T8082] ? __pfx_out_of_memory+0x10/0x10 [ 97.931063][ T8082] mem_cgroup_out_of_memory+0x118/0x130 [ 97.931076][ T8082] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 97.931092][ T8082] ? do_raw_spin_unlock+0x172/0x230 [ 97.931107][ T8082] try_charge_memcg+0x72b/0xd50 [ 97.931120][ T8082] ? __pfx_try_charge_memcg+0x10/0x10 [ 97.931133][ T8082] ? find_held_lock+0x2b/0x80 [ 97.931148][ T8082] charge_memcg+0x8a/0x230 [ 97.931158][ T8082] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 97.931172][ T8082] __read_swap_cache_async+0x43e/0x5a0 [ 97.931189][ T8082] ? __pfx___read_swap_cache_async+0x10/0x10 [ 97.931203][ T8082] ? swp_swap_info+0xce/0x130 [ 97.931213][ T8082] ? __pfx_swp_swap_info+0x10/0x10 [ 97.931222][ T8082] ? mark_held_locks+0x49/0x80 [ 97.931240][ T8082] swap_cluster_readahead+0x4e1/0x710 [ 97.931258][ T8082] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 97.931281][ T8082] ? get_vma_policy+0x242/0x3c0 [ 97.931293][ T8082] swapin_readahead+0x13a/0xd60 [ 97.931311][ T8082] ? __pfx_swapin_readahead+0x10/0x10 [ 97.931324][ T8082] ? __filemap_get_folio+0x32b/0xc30 [ 97.931337][ T8082] ? swap_cache_get_folio+0x1df/0x450 [ 97.931352][ T8082] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 97.931364][ T8082] ? __pfx_get_swap_device+0x10/0x10 [ 97.931380][ T8082] ? do_swap_page+0x125/0x65c0 [ 97.931394][ T8082] do_swap_page+0x635/0x65c0 [ 97.931406][ T8082] ? __lock_acquire+0x622/0x1c90 [ 97.931420][ T8082] ? __pfx_do_swap_page+0x10/0x10 [ 97.931433][ T8082] ? __pfx_default_wake_function+0x10/0x10 [ 97.931449][ T8082] ? rcu_is_watching+0x12/0xc0 [ 97.931462][ T8082] ? ___pte_offset_map+0x1d5/0x570 [ 97.931476][ T8082] __handle_mm_fault+0x162f/0x5490 [ 97.931494][ T8082] ? __pfx___handle_mm_fault+0x10/0x10 [ 97.931507][ T8082] ? lock_vma_under_rcu+0x47d/0x970 [ 97.931520][ T8082] ? lock_vma_under_rcu+0x47d/0x970 [ 97.931544][ T8082] handle_mm_fault+0x589/0xd10 [ 97.931559][ T8082] ? __pkru_allows_pkey+0x51/0xb0 [ 97.931575][ T8082] do_user_addr_fault+0x60c/0x1370 [ 97.931592][ T8082] ? rcu_is_watching+0x12/0xc0 [ 97.931609][ T8082] exc_page_fault+0x5c/0xb0 [ 97.931625][ T8082] asm_exc_page_fault+0x26/0x30 [ 97.931635][ T8082] RIP: 0033:0x7f7f787b67c5 [ 97.931644][ T8082] Code: 00 00 f0 83 88 08 03 00 00 10 64 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b 66 2e 0f 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 8b 90 [ 97.931654][ T8082] RSP: 002b:00007ffe475b96a8 EFLAGS: 00010297 [ 97.931662][ T8082] RAX: 0000000000000002 RBX: 000000000000009f RCX: 0000000000000000 [ 97.931668][ T8082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555581f06808 [ 97.931674][ T8082] RBP: 00007ffe475b975c R08: 0000000000000000 R09: 0000000000000000 [ 97.931680][ T8082] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 97.931686][ T8082] R13: 00000000000927c0 R14: 0000000000017ac8 R15: 00007ffe475b97b0 [ 97.931699][ T8082] [ 97.931703][ T8082] memory: usage 307200kB, limit 307200kB, failcnt 330 [ 98.045832][ T8082] memory+swap: usage 301604kB, limit 9007199254740988kB, failcnt 0 [ 98.052063][ T8082] kmem: usage 300684kB, limit 9007199254740988kB, failcnt 0 [ 98.054932][ T8082] Memory cgroup stats for /syz5: [ 98.055253][ T8082] cache 0 [ 98.061192][ T8082] rss 0 [ 98.062340][ T8082] rss_huge 0 [ 98.063673][ T8082] shmem 0 [ 98.064901][ T8082] mapped_file 0 [ 98.066298][ T8082] dirty 0 [ 98.067921][ T8082] writeback 0 [ 98.069232][ T8082] workingset_refault_anon 16 [ 98.071071][ T8082] workingset_refault_file 0 [ 98.073549][ T8082] swap 393216 [ 98.074895][ T8082] swapcached 8192 [ 98.076432][ T8082] pgpgin 5654 [ 98.080460][ T8082] pgpgout 5652 [ 98.081818][ T8082] pgfault 9154 [ 98.083187][ T8082] pgmajfault 17 [ 98.084503][ T8082] inactive_anon 8192 [ 98.085947][ T8082] active_anon 0 [ 98.087383][ T8082] inactive_file 0 [ 98.090686][ T8082] active_file 0 [ 98.092273][ T8082] unevictable 0 [ 98.093627][ T8082] hierarchical_memory_limit 314572800 [ 98.095759][ T8082] hierarchical_memsw_limit 9223372036854771712 [ 98.098228][ T8082] total_cache 0 [ 98.100761][ T8082] total_rss 0 [ 98.101885][ T8082] total_rss_huge 0 [ 98.103092][ T8082] total_shmem 0 [ 98.104237][ T8082] total_mapped_file 0 [ 98.105510][ T8082] total_dirty 0 [ 98.106634][ T8082] total_writeback 0 [ 98.108007][ T8082] total_workingset_refault_anon 16 [ 98.110188][ T8082] total_workingset_refault_file 0 [ 98.111835][ T8082] total_swap 393216 [ 98.113069][ T8082] total_swapcached 8192 [ 98.114409][ T8082] total_pgpgin 5654 [ 98.115634][ T8082] total_pgpgout 5652 [ 98.116914][ T8082] total_pgfault 9154 [ 98.118192][ T8082] total_pgmajfault 17 [ 98.120079][ T8082] total_inactive_anon 8192 [ 98.121528][ T8082] total_active_anon 0 [ 98.122816][ T8082] total_inactive_file 0 [ 98.124159][ T8082] total_active_file 0 [ 98.125484][ T8082] total_unevictable 0 [ 98.126848][ T8082] anon_cost 0 [ 98.128014][ T8082] file_cost 0 [ 98.129707][ T8082] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.772,pid=8746,uid=0 [ 98.135620][ T8082] Memory cgroup out of memory: Killed process 8746 (syz.5.772) total-vm:101956kB, anon-rss:824kB, file-rss:23624kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 98.218372][ T8768] netlink: 'syz.4.778': attribute type 15 has an invalid length. [ 98.221080][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 98.460218][ T40] audit: type=1400 audit(1754272170.048:782): avc: denied { write } for pid=8774 comm="syz.4.780" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.466720][ T8775] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 98.475833][ T40] audit: type=1400 audit(1754272170.057:783): avc: denied { create } for pid=8774 comm="syz.4.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 98.483914][ T40] audit: type=1400 audit(1754272170.057:784): avc: denied { create } for pid=8774 comm="syz.4.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 98.740168][ T8794] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 98.742657][ T8794] netlink: 500 bytes leftover after parsing attributes in process `syz.4.787'. [ 98.747845][ T8794] fuse: Unknown parameter 'êgroup_id0000000000000000000000000000000000000190' [ 98.789403][ T8796] vxcan1 speed is unknown, defaulting to 1000 [ 98.792969][ T8796] vxcan1 speed is unknown, defaulting to 1000 [ 98.793333][ T40] audit: type=1400 audit(1754272170.370:785): avc: denied { map } for pid=8793 comm="syz.4.787" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 98.798081][ T8796] vxcan1 speed is unknown, defaulting to 1000 [ 98.899570][ T8796] infiniband syz2: set active [ 98.902396][ T8796] infiniband syz2: added vxcan1 [ 98.902675][ T6033] vxcan1 speed is unknown, defaulting to 1000 [ 98.934649][ T8796] RDS/IB: syz2: added [ 98.936929][ T8796] smc: adding ib device syz2 with port count 1 [ 98.939294][ T8796] smc: ib device syz2 port 1 has pnetid [ 98.943002][ T6033] vxcan1 speed is unknown, defaulting to 1000 [ 98.946617][ T8796] vxcan1 speed is unknown, defaulting to 1000 [ 99.052664][ T8803] fuse: Unknown parameter '0x0000000000000000' [ 99.065357][ T8796] vxcan1 speed is unknown, defaulting to 1000 [ 99.071298][ T837] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 99.177976][ T8809] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.198337][ T8796] vxcan1 speed is unknown, defaulting to 1000 [ 99.204135][ T837] usb 10-1: device descriptor read/64, error -71 [ 99.216173][ T8811] netlink: 'syz.4.792': attribute type 7 has an invalid length. [ 99.222389][ T8813] netlink: 'syz.4.792': attribute type 7 has an invalid length. [ 99.324900][ T8796] vxcan1 speed is unknown, defaulting to 1000 [ 99.367031][ T40] audit: type=1326 audit(1754272170.927:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8816 comm="syz.1.794" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11bb38e9a9 code=0x0 [ 99.412310][ T8796] vxcan1 speed is unknown, defaulting to 1000 [ 99.449668][ T837] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 99.499198][ T8796] vxcan1 speed is unknown, defaulting to 1000 [ 99.582262][ T837] usb 10-1: device descriptor read/64, error -71 [ 99.695270][ T837] usb usb10-port1: attempt power cycle [ 99.794257][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 99.952735][ T40] audit: type=1400 audit(1754272171.505:787): avc: denied { bind } for pid=8839 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.052376][ T837] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 100.076084][ T837] usb 10-1: device descriptor read/8, error -71 [ 100.209564][ T40] audit: type=1400 audit(1754272171.759:788): avc: denied { setattr } for pid=8842 comm="syz.4.802" path="socket:[23407]" dev="sockfs" ino=23407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.271877][ T40] audit: type=1400 audit(1754272171.818:789): avc: denied { connect } for pid=8847 comm="syz.4.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.272867][ T8849] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8849 comm=syz.4.804 [ 100.317953][ T837] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 100.340405][ T837] usb 10-1: device descriptor read/8, error -71 [ 100.391457][ T8856] overlay: filesystem on ./bus is read-only [ 100.450830][ T837] usb usb10-port1: unable to enumerate USB device [ 100.739041][ T8861] kvm: pic: non byte write [ 101.662007][ T8907] tty tty21: ldisc open failed (-12), clearing slot 20 [ 101.782357][ T8918] dummy0: left allmulticast mode [ 101.784101][ T8918] bridge0: port 3(dummy0) entered disabled state [ 101.787547][ T8918] bridge_slave_1: left allmulticast mode [ 101.789447][ T8918] bridge_slave_1: left promiscuous mode [ 101.791310][ T8918] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.796039][ T8918] bridge_slave_0: left allmulticast mode [ 101.798307][ T8918] bridge_slave_0: left promiscuous mode [ 101.800461][ T8918] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.838679][ T8919] netlink: 'syz.0.822': attribute type 1 has an invalid length. [ 101.841149][ T8919] netlink: 224 bytes leftover after parsing attributes in process `syz.0.822'. [ 101.956557][ T8929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8929 comm=syz.0.827 [ 101.960764][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 102.223330][ T8961] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 102.290396][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 102.290407][ T40] audit: type=1400 audit(1754272173.798:797): avc: denied { mount } for pid=8968 comm="syz.0.838" name="/" dev="hugetlbfs" ino=25239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 102.306805][ T40] audit: type=1400 audit(1754272173.818:798): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 102.371444][ T40] audit: type=1400 audit(1754272173.877:799): avc: denied { accept } for pid=8975 comm="syz.0.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.407470][ T40] audit: type=1400 audit(1754272173.906:800): avc: granted { setsecparam } for pid=8983 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 102.415634][ T8984] 9pnet_virtio: no channels available for device syz [ 102.417402][ T40] audit: type=1400 audit(1754272173.916:801): avc: denied { write } for pid=8981 comm="syz.4.840" name="bus" dev="9p" ino=37880035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 102.425753][ T40] audit: type=1800 audit(1754272173.916:802): pid=8982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.840" name="bus" dev="9p" ino=37880035 res=0 errno=0 [ 102.428539][ T8984] fuse: Unknown parameter '£”‘ xu&«nQ‹¯' [ 102.437798][ T40] audit: type=1400 audit(1754272173.936:803): avc: granted { setsecparam } for pid=8983 comm="syz.0.841" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 102.439288][ T8984] 9pnet_virtio: no channels available for device syz [ 102.446412][ T8987] fuse: Unknown parameter '£”‘ xu&«nQ‹¯' [ 102.471415][ T8993] netlink: 36 bytes leftover after parsing attributes in process `syz.0.843'. [ 102.474937][ T8993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8993 comm=syz.0.843 [ 102.485838][ T8986] netdevsim netdevsim1 ªªªªªª: renamed from netdevsim0 (while UP) [ 102.521342][ T8996] No source specified [ 102.521989][ T8997] No source specified [ 102.729582][ T9002] program syz.0.846 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.094444][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 103.097766][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 103.294475][ T9035] syz.5.859: attempt to access beyond end of device [ 103.294475][ T9035] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 103.302914][ T9035] syz.5.859: attempt to access beyond end of device [ 103.302914][ T9035] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 103.513309][ T9062] overlay: Unknown parameter 'obj_role' [ 103.517036][ T9062] afs: Unknown parameter 'âšöÙ¦-¿Bʵ9' [ 103.715913][ T40] audit: type=1400 audit(1754272176.211:804): avc: denied { write } for pid=9069 comm="syz.5.869" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.723775][ T9071] netlink: 24 bytes leftover after parsing attributes in process `syz.5.869'. [ 103.786535][ T40] audit: type=1400 audit(1754272176.281:805): avc: denied { setopt } for pid=9073 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 103.989679][ T40] audit: type=1400 audit(1754272176.491:806): avc: denied { watch_mount } for pid=9084 comm="syz.5.874" path="/69" dev="tmpfs" ino=372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 103.997478][ T9086] netlink: 32 bytes leftover after parsing attributes in process `syz.5.874'. [ 104.060661][ T54] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 104.069615][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.073939][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.076246][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.078504][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.080928][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.083207][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.085473][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.087762][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.092317][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.094555][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.096887][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.099750][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.102047][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.104303][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.106578][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.108814][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.111362][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.114247][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.116487][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.118744][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.121923][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.124268][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.126405][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.128630][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.131062][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.133429][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.135624][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.137864][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.140376][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.142643][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.144946][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.147179][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.149518][ T9094] overlayfs: failed to resolve './file0': -2 [ 104.189258][ T54] usb 5-1: device descriptor read/64, error -71 [ 104.439279][ T54] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 104.471739][ T9106] xt_hashlimit: size too large, truncated to 1048576 [ 104.489090][ T9106] syz.1.881: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 104.497979][ T9106] CPU: 1 UID: 0 PID: 9106 Comm: syz.1.881 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 104.498001][ T9106] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.498012][ T9106] Call Trace: [ 104.498018][ T9106] [ 104.498025][ T9106] dump_stack_lvl+0x16c/0x1f0 [ 104.498057][ T9106] warn_alloc+0x248/0x3a0 [ 104.498084][ T9106] ? __pfx_warn_alloc+0x10/0x10 [ 104.498120][ T9106] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 104.498145][ T9106] ? __vmalloc_node_noprof+0xad/0xf0 [ 104.498171][ T9106] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 104.498202][ T9106] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 104.498231][ T9106] ? __lock_acquire+0x622/0x1c90 [ 104.498248][ T9106] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.498271][ T9106] ? __alloc_pages_noprof+0xb/0x1b0 [ 104.498296][ T9106] ? ___kmalloc_large_node+0x84/0x1e0 [ 104.498322][ T9106] __kvmalloc_node_noprof+0x30a/0x620 [ 104.498347][ T9106] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 104.498371][ T9106] ? net_generic+0xea/0x2a0 [ 104.498392][ T9106] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 104.498421][ T9106] ? hashlimit_mt_check_common+0x8bb/0x1460 [ 104.498444][ T9106] hashlimit_mt_check_common+0x8bb/0x1460 [ 104.498475][ T9106] hashlimit_mt_check+0x71/0x90 [ 104.498497][ T9106] ? __pfx_hashlimit_mt_check+0x10/0x10 [ 104.498520][ T9106] xt_check_match+0x283/0xa50 [ 104.498542][ T9106] ? __init_zone_device_page+0x2d2/0x690 [ 104.498567][ T9106] ? __pfx_xt_check_match+0x10/0x10 [ 104.498593][ T9106] ? pcpu_alloc_noprof+0x1f5/0x1470 [ 104.498622][ T9106] ? xt_find_match+0x1f6/0x290 [ 104.498650][ T9106] find_check_entry.constprop.0+0x34e/0xa20 [ 104.498683][ T9106] ? __pfx_find_check_entry.constprop.0+0x10/0x10 [ 104.498715][ T9106] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.498745][ T9106] ? kfree+0x2b4/0x4d0 [ 104.498765][ T9106] ? translate_table+0xc0e/0x17b0 [ 104.498792][ T9106] translate_table+0xd0b/0x17b0 [ 104.498825][ T9106] ? __pfx_translate_table+0x10/0x10 [ 104.498855][ T9106] do_ip6t_set_ctl+0x570/0xb00 [ 104.498878][ T9106] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 104.498910][ T9106] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 104.498936][ T9106] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.498967][ T9106] ? nf_sockopt_find.constprop.0+0x222/0x290 [ 104.498991][ T9106] nf_setsockopt+0x8a/0xf0 [ 104.499014][ T9106] ipv6_setsockopt+0x135/0x170 [ 104.499039][ T9106] rawv6_setsockopt+0xc2/0x510 [ 104.499059][ T9106] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 104.499080][ T9106] ? selinux_socket_setsockopt+0x6a/0x80 [ 104.499129][ T9106] ? sock_common_setsockopt+0x2e/0xf0 [ 104.499149][ T9106] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 104.499171][ T9106] do_sock_setsockopt+0xf0/0x1d0 [ 104.499195][ T9106] __sys_setsockopt+0x1a0/0x230 [ 104.499222][ T9106] __x64_sys_setsockopt+0xbd/0x160 [ 104.499244][ T9106] ? do_syscall_64+0x91/0x4c0 [ 104.499257][ T9106] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.499278][ T9106] do_syscall_64+0xcd/0x4c0 [ 104.499293][ T9106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.499308][ T9106] RIP: 0033:0x7f11bb38e9a9 [ 104.499322][ T9106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.499338][ T9106] RSP: 002b:00007f11bc215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.499354][ T9106] RAX: ffffffffffffffda RBX: 00007f11bb5b5fa0 RCX: 00007f11bb38e9a9 [ 104.499365][ T9106] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 104.499375][ T9106] RBP: 00007f11bb410d69 R08: 00000000000005c0 R09: 0000000000000000 [ 104.499385][ T9106] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000000 [ 104.499396][ T9106] R13: 0000000000000000 R14: 00007f11bb5b5fa0 R15: 00007ffdfd237e58 [ 104.499420][ T9106] [ 104.627844][ T9111] hpfs: hpfs_map_sector(): read error [ 104.642835][ T9106] Mem-Info: [ 104.644108][ T9106] active_anon:903 inactive_anon:10928 isolated_anon:0 [ 104.644108][ T9106] active_file:3136 inactive_file:1672 isolated_file:0 [ 104.644108][ T9106] unevictable:10988 dirty:67 writeback:0 [ 104.644108][ T9106] slab_reclaimable:9087 slab_unreclaimable:82484 [ 104.644108][ T9106] mapped:31138 shmem:2408 pagetables:1479 [ 104.644108][ T9106] sec_pagetables:312 bounce:0 [ 104.644108][ T9106] kernel_misc_reclaimable:0 [ 104.644108][ T9106] free:472355 free_pcp:10582 free_cma:0 [ 104.666000][ T9106] Node 0 active_anon:3568kB inactive_anon:43708kB active_file:12544kB inactive_file:6520kB unevictable:26860kB isolated(anon):0kB isolated(file):0kB mapped:119252kB dirty:252kB writeback:0kB shmem:6096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15792kB pagetables:5764kB sec_pagetables:1248kB all_unreclaimable? no Balloon:0kB [ 104.682872][ T9106] Node 1 active_anon:44kB inactive_anon:4kB active_file:0kB inactive_file:168kB unevictable:17092kB isolated(anon):0kB isolated(file):0kB mapped:5300kB dirty:16kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:176kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 104.694565][ T9106] Node 0 DMA free:9532kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:512kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:184kB local_pcp:4kB free_cma:0kB [ 104.706761][ T9106] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 104.709267][ T54] usb 5-1: device descriptor read/64, error -71 [ 104.713302][ T9106] Node 0 DMA32 free:309948kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3524kB inactive_anon:43704kB active_file:12544kB inactive_file:6520kB unevictable:26348kB writepending:252kB present:2080628kB managed:1264288kB mlocked:0kB bounce:0kB free_pcp:20272kB local_pcp:4152kB free_cma:0kB [ 104.727879][ T9106] lowmem_reserve[]: 0 0 0 0 0 [ 104.729648][ T9106] Node 1 Normal free:1569532kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:4kB active_file:0kB inactive_file:168kB unevictable:17092kB writepending:16kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:22372kB local_pcp:9928kB free_cma:0kB [ 104.739497][ T9106] lowmem_reserve[]: 0 0 0 0 0 [ 104.741081][ T9106] Node 0 DMA: 25*4kB (UM) 13*8kB (UM) 9*16kB (UM) 5*32kB (UM) 3*64kB (UM) 7*128kB (UM) 11*256kB (UM) 4*512kB (UM) 1*1024kB (U) 1*2048kB (M) 0*4096kB = 9532kB [ 104.746208][ T9106] Node 0 DMA32: 2130*4kB (UME) 1644*8kB (UME) 701*16kB (UME) 550*32kB (UME) 410*64kB (UME) 183*128kB (UME) 91*256kB (UME) 72*512kB (UM) 64*1024kB (UM) 9*2048kB (UM) 16*4096kB (U) = 309816kB [ 104.752701][ T9106] Node 1 Normal: 23*4kB (UM) 60*8kB (UME) 46*16kB (UME) 109*32kB (UM) 69*64kB (UE) 60*128kB (UM) 43*256kB (UME) 33*512kB (UM) 17*1024kB (UM) 8*2048kB (UME) 364*4096kB (UM) = 1569532kB [ 104.760729][ T9106] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.764745][ T9106] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.768593][ T9106] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 104.772678][ T9106] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 104.776535][ T9106] 16455 total pagecache pages [ 104.778527][ T9106] 10 pages in swap cache [ 104.780456][ T9106] Free swap = 123096kB [ 104.782355][ T9106] Total swap = 124996kB [ 104.784143][ T9106] 1048443 pages RAM [ 104.785716][ T9106] 0 pages HighMem/MovableOnly [ 104.787720][ T9106] 283042 pages reserved [ 104.789576][ T9106] 0 pages cma reserved [ 104.819504][ T54] usb usb5-port1: attempt power cycle [ 104.880904][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 105.169951][ T54] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 105.201684][ T54] usb 5-1: device descriptor read/8, error -71 [ 105.439225][ T54] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 105.464194][ T54] usb 5-1: device descriptor read/8, error -71 [ 105.474892][ T9166] overlayfs: failed to clone upperpath [ 105.579406][ T54] usb usb5-port1: unable to enumerate USB device [ 105.681513][ T9183] batadv_slave_0: entered promiscuous mode [ 105.684448][ T9183] batadv_slave_0: left promiscuous mode [ 105.796268][ T9187] veth1_to_bond: entered allmulticast mode [ 105.800173][ T9187] netlink: 9 bytes leftover after parsing attributes in process `syz.1.899'. [ 105.844288][ T9187] veth1_to_bond (unregistering): left allmulticast mode [ 106.035782][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 106.038539][ T9195] netlink: 'syz.1.902': attribute type 30 has an invalid length. [ 106.041391][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'. [ 106.178277][ T9210] mkiss: ax0: crc mode is auto. [ 106.268250][ T9215] netlink: 'syz.1.909': attribute type 10 has an invalid length. [ 106.270878][ T9215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.909'. [ 106.282176][ T9215] team0: Port device geneve0 added [ 107.040428][ T9272] syz.0.926: attempt to access beyond end of device [ 107.040428][ T9272] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 107.044977][ T9272] XFS (nbd0): SB validate failed with error -5. [ 107.101659][ T9272] syz.0.926 (9272) used greatest stack depth: 18728 bytes left [ 107.269653][ T9297] netlink: 92 bytes leftover after parsing attributes in process `syz.4.932'. [ 107.468108][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 107.569917][ T9325] hsr_slave_0 (unregistering): left promiscuous mode [ 107.601263][ T6042] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 107.610009][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.941'. [ 107.634928][ T9333] vlan0: entered promiscuous mode [ 107.645238][ T9333] team0: Port device vlan0 added [ 107.724179][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 107.724195][ T40] audit: type=1400 audit(1754272180.221:812): avc: denied { write } for pid=9342 comm="syz.1.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.760915][ T6042] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 107.763630][ T6042] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.767740][ T6042] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 107.770618][ T6042] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 107.773112][ T6042] usb 5-1: Manufacturer: syz [ 107.775823][ T6042] usb 5-1: config 0 descriptor?? [ 107.784271][ T9348] overlay: ./file0 is not a directory [ 107.819249][ T6042] rc_core: IR keymap rc-hauppauge not found [ 107.821407][ T6042] Registered IR keymap rc-empty [ 107.824384][ T6042] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 107.828372][ T6042] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 107.837637][ T40] audit: type=1400 audit(1754272180.331:813): avc: denied { connect } for pid=9354 comm="syz.5.948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.845941][ T40] audit: type=1400 audit(1754272180.331:814): avc: denied { read } for pid=5345 comm="acpid" name="event4" dev="devtmpfs" ino=3231 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.855260][ T40] audit: type=1400 audit(1754272180.331:815): avc: denied { open } for pid=5345 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3231 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.863249][ T40] audit: type=1400 audit(1754272180.331:816): avc: denied { ioctl } for pid=5345 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3231 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 107.894565][ T9359] netlink: 'syz.5.949': attribute type 4 has an invalid length. [ 107.940773][ T9363] nbd: must specify a size in bytes for the device [ 107.944323][ T9363] program syz.5.951 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.993750][ T53] usb 5-1: USB disconnect, device number 8 [ 108.073613][ T9372] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 108.083951][ T9372] kvm: pic: non byte read [ 108.086364][ T9372] kvm: pic: level sensitive irq not supported [ 108.086811][ T9372] kvm: pic: non byte read [ 108.093327][ T9372] kvm: pic: level sensitive irq not supported [ 108.094728][ T9372] kvm: pic: non byte read [ 108.099514][ T9372] kvm: pic: level sensitive irq not supported [ 108.099821][ T9372] kvm: pic: non byte read [ 108.105285][ T9372] kvm: pic: level sensitive irq not supported [ 108.105552][ T9372] kvm: pic: non byte read [ 108.111956][ T9372] kvm: pic: level sensitive irq not supported [ 108.112414][ T9372] kvm: pic: non byte read [ 108.440584][ T40] audit: type=1400 audit(1754272180.941:817): avc: denied { name_connect } for pid=9385 comm="syz.4.960" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 108.454016][ T9386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.526777][ T9388] netlink: 'syz.0.961': attribute type 1 has an invalid length. [ 108.542839][ T9388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.553576][ T9388] bond1: (slave batadv1): Opening slave failed [ 108.698418][ T40] audit: type=1400 audit(1754272181.191:818): avc: denied { write } for pid=9393 comm="syz.0.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 108.707569][ T40] audit: type=1400 audit(1754272181.201:819): avc: denied { write } for pid=9393 comm="syz.0.963" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 108.734145][ T9398] FAT-fs (nullb0): bogus number of reserved sectors [ 108.738576][ T9398] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 108.844521][ T9404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9404 comm=syz.0.967 [ 108.850492][ T9404] __nla_validate_parse: 5 callbacks suppressed [ 108.850503][ T9404] netlink: 188348 bytes leftover after parsing attributes in process `syz.0.967'. [ 108.904781][ T9406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.973889][ T40] audit: type=1401 audit(1754272181.471:820): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 109.200928][ T9427] netlink: 340 bytes leftover after parsing attributes in process `syz.5.975'. [ 109.229351][ T7738] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 109.276690][ T40] audit: type=1400 audit(1754272181.771:821): avc: denied { ioctl } for pid=9426 comm="syz.5.975" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 109.301520][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.975'. [ 109.303993][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.975'. [ 109.389418][ T7738] usb 5-1: Using ep0 maxpacket: 8 [ 109.392139][ T7738] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 109.395213][ T7738] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 109.397925][ T7738] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 109.400991][ T7738] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.404425][ T7738] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 109.406849][ T7738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.568899][ T9445] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 109.571161][ T9445] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.626246][ T7738] usb 5-1: GET_CAPABILITIES returned 0 [ 109.627840][ T7738] usbtmc 5-1:16.0: can't read capabilities [ 109.853058][ T34] usb 5-1: USB disconnect, device number 9 [ 110.221169][ T9457] netlink: 16 bytes leftover after parsing attributes in process `syz.5.981'. [ 110.303209][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 110.307463][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 110.407545][ T9469] bond3: entered promiscuous mode [ 110.410253][ T9469] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.422781][ T9470] bond4: entered promiscuous mode [ 110.424710][ T9470] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.430761][ T9469] 9pnet_fd: Insufficient options for proto=fd [ 110.535871][ T9487] ipvlan2: entered promiscuous mode [ 110.537852][ T9487] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 110.541756][ T9487] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 110.564764][ T9488] ipvlan2: entered promiscuous mode [ 110.566714][ T9488] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 110.569312][ T9488] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 110.852200][ T9501] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 110.888855][ T9503] 9pnet_fd: Insufficient options for proto=fd [ 110.985183][ T9507] vcan1: entered allmulticast mode [ 110.991420][ T9507] overlay: ./file0 is not a directory [ 111.224682][ T9516] bond0: entered promiscuous mode [ 111.226386][ T9516] bond_slave_0: entered promiscuous mode [ 111.228305][ T9516] bond_slave_1: entered promiscuous mode [ 111.232048][ T9516] batadv0: entered promiscuous mode [ 111.234474][ T9516] batadv0: left promiscuous mode [ 111.236952][ T9516] bond0: left promiscuous mode [ 111.238501][ T9516] bond_slave_0: left promiscuous mode [ 111.243429][ T9516] bond_slave_1: left promiscuous mode [ 111.409519][ T9519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1004'. [ 111.604793][ T9530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9530 comm=syz.0.1007 [ 111.609529][ T9534] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1008'. [ 111.725756][ T9538] vxcan1 speed is unknown, defaulting to 1000 [ 111.917827][ T9546] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 112.525344][ T9567] tipc: Enabled bearer , priority 10 [ 112.606185][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1024'. [ 112.610650][ T9579] fuse: Bad value for 'fd' [ 112.682653][ T9585] tipc: Started in network mode [ 112.684334][ T9585] tipc: Node identity ac14140f, cluster identity 4711 [ 112.687770][ T9585] tipc: New replicast peer: 127.0.0.1 [ 112.689995][ T9585] tipc: Enabled bearer , priority 10 [ 112.847677][ T9595] netlink: 'syz.1.1030': attribute type 83 has an invalid length. [ 112.854254][ T9595] tipc: Enabled bearer , priority 10 [ 113.034404][ T9606] 9pnet: Found fid 0 not clunked [ 113.036681][ T6042] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 113.203096][ T6042] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.206993][ T6042] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 113.210589][ T6042] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.216021][ T6042] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 113.220206][ T6042] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 113.221728][ T9623] vlan0: entered promiscuous mode [ 113.228356][ T6042] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 113.231961][ T6042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.238736][ T9588] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.242516][ T6042] hub 5-1:1.0: bad descriptor, ignoring hub [ 113.249113][ T6042] hub 5-1:1.0: probe with driver hub failed with error -5 [ 113.252387][ T6042] cdc_wdm 5-1:1.0: skipping garbage [ 113.254876][ T6042] cdc_wdm 5-1:1.0: skipping garbage [ 113.265031][ T6042] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 113.267360][ T6042] cdc_wdm 5-1:1.0: Unknown control protocol [ 113.274061][ T9623] syz.5.1036: attempt to access beyond end of device [ 113.274061][ T9623] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 113.278373][ T9623] (syz.5.1036,9623,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 113.280822][ T9623] (syz.5.1036,9623,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 113.283146][ T9623] (syz.5.1036,9623,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 113.287001][ T9623] (syz.5.1036,9623,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 113.350312][ T9634] CUSE: unknown device info "" [ 113.351941][ T9634] CUSE: zero length info key specified [ 113.451646][ T9651] overlayfs: missing 'lowerdir' [ 113.455121][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 113.455132][ T40] audit: type=1400 audit(1754796473.922:838): avc: denied { read write } for pid=9587 comm="syz.0.1028" name="cdc-wdm0" dev="devtmpfs" ino=3249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 113.457879][ T9651] overlay: Unknown parameter 'uid<00000000000000000000' [ 113.475028][ T40] audit: type=1400 audit(1754796473.922:839): avc: denied { open } for pid=9587 comm="syz.0.1028" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 113.555864][ T6033] tipc: Node number set to 1970660146 [ 113.813661][ T40] audit: type=1400 audit(1754796474.271:840): avc: denied { ioctl } for pid=9657 comm="syz.4.1048" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 113.882901][ T6033] tipc: Node number set to 2886997007 [ 114.056618][ T6042] usb 5-1: USB disconnect, device number 10 [ 114.058573][ T9588] cdc_wdm 5-1:1.0: Error autopm - -16 [ 114.192140][ T6042] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 114.357036][ T6042] usb 5-1: Using ep0 maxpacket: 8 [ 114.360003][ T6042] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.363299][ T6042] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.366152][ T6042] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.370377][ T6042] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.373798][ T6042] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 114.377079][ T6042] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 114.380724][ T6042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.388735][ T9656] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.391996][ T6042] hub 5-1:1.0: bad descriptor, ignoring hub [ 114.393876][ T6042] hub 5-1:1.0: probe with driver hub failed with error -5 [ 114.397094][ T6042] cdc_wdm 5-1:1.0: skipping garbage [ 114.398865][ T6042] cdc_wdm 5-1:1.0: skipping garbage [ 114.401785][ T6042] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 114.403740][ T6042] cdc_wdm 5-1:1.0: Unknown control protocol [ 114.707364][ T6042] usb 5-1: USB disconnect, device number 11 [ 114.898719][ T40] audit: type=1400 audit(1754796475.319:841): avc: denied { mount } for pid=9695 comm="syz.1.1057" name="/" dev="ramfs" ino=35729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 114.903713][ T7250] wlan1: Trigger new scan to find an IBSS to join [ 115.195136][ T9722] xt_policy: output policy not valid in PREROUTING and INPUT [ 115.249236][ T9727] futex_wake_op: syz.0.1066 tries to shift op by -1; fix this program [ 115.315281][ T9717] __nla_validate_parse: 2 callbacks suppressed [ 115.315298][ T9717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1063'. [ 115.321766][ T9717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1063'. [ 115.934097][ T9744] kvm: kvm [9743]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x300000079 [ 115.938415][ T9744] kvm: kvm [9743]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x20000009f [ 115.948616][ T9744] kvm: kvm [9743]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x20000005b [ 116.022670][ T9748] fuse: Bad value for 'fd' [ 116.028382][ T9748] fuse: Bad value for 'fd' [ 116.511535][ T9770] sp0: Synchronizing with TNC [ 116.666421][ T9775] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1080'. [ 116.773730][ T9789] FAULT_INJECTION: forcing a failure. [ 116.773730][ T9789] name failslab, interval 1, probability 0, space 0, times 0 [ 116.777239][ T9789] CPU: 2 UID: 0 PID: 9789 Comm: syz.0.1083 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 116.777252][ T9789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.777259][ T9789] Call Trace: [ 116.777263][ T9789] [ 116.777267][ T9789] dump_stack_lvl+0x16c/0x1f0 [ 116.777299][ T9789] should_fail_ex+0x512/0x640 [ 116.777319][ T9789] ? fs_reclaim_acquire+0xae/0x150 [ 116.777333][ T9789] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 116.777344][ T9789] should_failslab+0xc2/0x120 [ 116.777354][ T9789] __kmalloc_noprof+0xd2/0x510 [ 116.777372][ T9789] tomoyo_realpath_from_path+0xc2/0x6e0 [ 116.777383][ T9789] ? tomoyo_profile+0x47/0x60 [ 116.777396][ T9789] tomoyo_path_number_perm+0x245/0x580 [ 116.777410][ T9789] ? tomoyo_path_number_perm+0x237/0x580 [ 116.777426][ T9789] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.777454][ T9789] ? find_held_lock+0x2b/0x80 [ 116.777480][ T9789] ? find_held_lock+0x2b/0x80 [ 116.777492][ T9789] ? hook_file_ioctl_common+0x145/0x410 [ 116.777507][ T9789] ? __fget_files+0x20e/0x3c0 [ 116.777519][ T9789] security_file_ioctl+0x9b/0x240 [ 116.777530][ T9789] __x64_sys_ioctl+0xb7/0x210 [ 116.777545][ T9789] do_syscall_64+0xcd/0x4c0 [ 116.777557][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.777567][ T9789] RIP: 0033:0x7f884d98e9a9 [ 116.777576][ T9789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.777586][ T9789] RSP: 002b:00007f884b7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.777597][ T9789] RAX: ffffffffffffffda RBX: 00007f884dbb5fa0 RCX: 00007f884d98e9a9 [ 116.777603][ T9789] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 116.777609][ T9789] RBP: 00007f884b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 116.777615][ T9789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.777620][ T9789] R13: 0000000000000000 R14: 00007f884dbb5fa0 R15: 00007ffc19a0b4f8 [ 116.777633][ T9789] [ 116.777650][ T9789] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.011518][ T9797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9797 comm=syz.0.1085 [ 117.015190][ T9797] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 117.200745][ T40] audit: type=1400 audit(1754796477.559:842): avc: denied { map } for pid=9802 comm="syz.0.1088" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 117.205930][ T9803] netlink: 'syz.0.1088': attribute type 11 has an invalid length. [ 117.210966][ T9803] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.1088'. [ 117.224651][ T9802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.433507][ T9810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1091'. [ 117.439120][ T9810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1091'. [ 117.544562][ T9816] overlayfs: failed to resolve './file0': -2 [ 117.611956][ T9833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.631412][ T9838] netlink: 'syz.1.1099': attribute type 1 has an invalid length. [ 117.634432][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 117.657928][ T9838] veth3: entered promiscuous mode [ 117.760209][ T9846] overlayfs: failed to clone upperpath [ 117.800398][ T40] audit: type=1400 audit(1754796478.144:843): avc: denied { accept } for pid=9841 comm="syz.0.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.805014][ T9842] veth2: entered allmulticast mode [ 117.821045][ T9842] veth3: entered promiscuous mode [ 117.822671][ T9842] veth3: entered allmulticast mode [ 117.992405][ T40] audit: type=1400 audit(1754796478.330:844): avc: denied { read } for pid=9858 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 118.002472][ T40] audit: type=1400 audit(1754796478.330:845): avc: denied { setattr } for pid=9858 comm="syz.0.1106" name="QIPCRTR" dev="sockfs" ino=43093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 118.012861][ T40] audit: type=1400 audit(1754796478.330:846): avc: denied { setopt } for pid=9858 comm="syz.0.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 118.222474][ T9889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.302649][ T40] audit: type=1400 audit(1754796478.642:847): avc: denied { getopt } for pid=9900 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 118.375481][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 118.378310][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1122'. [ 118.385525][ T9912] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.388200][ T9912] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.390812][ T9912] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.393637][ T9912] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.434546][ T9916] netlink: 'syz.1.1124': attribute type 4 has an invalid length. [ 118.437922][ T9917] netlink: 'syz.1.1124': attribute type 4 has an invalid length. [ 118.441155][ T9916] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1124'. [ 118.505145][ T9917] : renamed from bond0 (while UP) [ 118.628990][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 118.629002][ T40] audit: type=1326 audit(1754796478.955:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9931 comm="syz.1.1129" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11bb38e9a9 code=0x0 [ 118.698622][ T837] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 118.749643][ T40] audit: type=1400 audit(1754796479.072:851): avc: denied { read } for pid=9894 comm="syz.5.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 118.795349][ T9946] netlink: 'syz.1.1133': attribute type 13 has an invalid length. [ 118.800021][ T40] audit: type=1400 audit(1754796479.121:852): avc: denied { read } for pid=9945 comm="syz.1.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.800485][ T9947] netlink: 'syz.4.1131': attribute type 13 has an invalid length. [ 118.808573][ T9947] netlink: 'syz.4.1131': attribute type 17 has an invalid length. [ 118.819035][ T40] audit: type=1400 audit(1754796479.141:853): avc: denied { relabelfrom } for pid=9945 comm="syz.1.1133" name="" dev="pipefs" ino=44450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 118.880963][ T9950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9950 comm=syz.1.1134 [ 118.885041][ T9950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=9950 comm=syz.1.1134 [ 118.888854][ T9950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2590 sclass=netlink_route_socket pid=9950 comm=syz.1.1134 [ 118.896507][ T9950] netlink: 'syz.1.1134': attribute type 1 has an invalid length. [ 118.983201][ T9952] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 118.986146][ T9952] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 118.988645][ T9952] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 118.993690][ T9955] netlink: 'syz.1.1136': attribute type 1 has an invalid length. [ 119.125546][ T9960] bridge3: entered allmulticast mode [ 119.155164][ T9964] overlay: Unknown parameter 'fowner' [ 119.543798][ T40] audit: type=1400 audit(1754796479.845:854): avc: denied { getopt } for pid=9974 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.757181][ T40] audit: type=1400 audit(1754796480.060:855): avc: denied { execute } for pid=9999 comm="syz.1.1151" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 120.069527][ T7251] wlan1: Trigger new scan to find an IBSS to join [ 120.076683][ T40] audit: type=1400 audit(1754796480.364:856): avc: denied { setopt } for pid=10004 comm="syz.1.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.453644][T10026] __nla_validate_parse: 4 callbacks suppressed [ 120.453659][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'. [ 120.460059][ T40] audit: type=1400 audit(1754796480.736:857): avc: denied { nlmsg_read } for pid=10025 comm="syz.0.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.686354][T10047] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.1163'. [ 120.748372][T10052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.800382][ T5949] Bluetooth: hci4: Malformed LE Event: 0x0b [ 120.979592][ T40] audit: type=1400 audit(1754796481.256:858): avc: denied { shutdown } for pid=10071 comm="syz.5.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.981547][T10074] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 121.019429][ T7272] wlan1: Creating new IBSS network, BSSID 86:68:39:23:71:1d [ 121.041721][ T40] audit: type=1400 audit(1754796481.315:859): avc: denied { ioctl } for pid=10071 comm="syz.5.1172" path="socket:[45915]" dev="sockfs" ino=45915 ioctlcmd=0x542a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.046532][T10072] 9pnet_fd: Insufficient options for proto=fd [ 121.228013][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1176'. [ 121.231110][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1176'. [ 121.291632][T10088] bridge2: entered promiscuous mode [ 121.367371][T10099] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1181'. [ 121.370627][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 121.419352][T10106] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1183'. [ 121.487069][T10109] fuse: Unknown parameter 'fe}0x0000000000000003' [ 121.527784][T10113] netlink: 'syz.4.1183': attribute type 11 has an invalid length. [ 121.532067][T10113] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.1183'. [ 121.721038][T10139] 9pnet_fd: Insufficient options for proto=fd [ 121.731540][T10105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.526073][T10182] fuse: Bad value for 'fd' [ 122.559096][T10188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=10188 comm=syz.4.1208 [ 122.602803][T10190] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1209'. [ 122.604976][T10191] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1209'. [ 122.617290][T10193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10193 comm=syz.5.1210 [ 122.621250][T10190] sctp: [Deprecated]: syz.4.1209 (pid 10190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.621250][T10190] Use struct sctp_sack_info instead [ 122.640630][T10193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.643497][T10193] bond2: (slave bond3): making interface the new active one [ 122.646158][T10193] bond2: (slave bond3): Enslaving as an active interface with an up link [ 122.659661][T10193] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.927300][T10213] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 122.962354][ T1337] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 123.083054][T10223] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 123.102145][T10226] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 123.116120][ T1337] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 123.118518][ T1337] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.122137][ T1337] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.129600][ T1337] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.133150][ T1337] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 123.140050][ T1337] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 123.142803][ T1337] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.147377][ T1337] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.151740][ T1337] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.155753][ T1337] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 123.168080][ T1337] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 123.170968][ T1337] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 123.174696][ T1337] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.179076][ T1337] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 123.183034][ T1337] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 123.194385][T10233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65143 sclass=netlink_route_socket pid=10233 comm=syz.4.1221 [ 123.199710][ T1337] usb 10-1: string descriptor 0 read error: -22 [ 123.201876][ T1337] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 123.215064][ T1337] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.228919][ T1337] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 123.365845][T10257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.368833][T10257] IPv6: NLM_F_CREATE should be set when creating new route [ 123.413778][T10257] netem: incorrect ge model size [ 123.415956][T10257] netem: change failed [ 123.419159][T10255] lo: entered promiscuous mode [ 123.422560][T10255] lo: entered allmulticast mode [ 123.427331][T10255] tunl0: entered allmulticast mode [ 123.434168][T10255] gre0: entered allmulticast mode [ 123.440202][T10255] gretap0: entered allmulticast mode [ 123.450234][T10255] erspan0: entered allmulticast mode [ 123.455349][T10255] ip_vti0: entered allmulticast mode [ 123.457873][T10255] ip6_vti0: entered allmulticast mode [ 123.461856][T10255] sit0: entered allmulticast mode [ 123.473775][T10255] ip6tnl0: entered allmulticast mode [ 123.476726][T10255] ip6gre0: entered allmulticast mode [ 123.484436][T10255] syz_tun: entered allmulticast mode [ 123.494359][T10255] ip6gretap0: entered allmulticast mode [ 123.500205][T10255] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.503289][T10255] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.506482][T10255] bridge0: entered allmulticast mode [ 123.509606][T10255] vcan0: entered allmulticast mode [ 123.513341][T10255] bond0: entered allmulticast mode [ 123.515289][T10255] bond_slave_0: entered allmulticast mode [ 123.517419][T10255] bond_slave_1: entered allmulticast mode [ 123.522334][T10255] team0: entered allmulticast mode [ 123.525474][T10255] team_slave_0: entered allmulticast mode [ 123.528677][T10255] team_slave_1: entered allmulticast mode [ 123.536511][T10255] dummy0: entered allmulticast mode [ 123.543682][T10255] nlmon0: entered allmulticast mode [ 123.546981][T10255] caif0: entered allmulticast mode [ 123.549580][T10255] batadv0: entered allmulticast mode [ 123.555950][T10255] vxcan0: entered allmulticast mode [ 123.557981][T10255] vxcan1: entered allmulticast mode [ 123.562261][T10255] veth0: entered allmulticast mode [ 123.567797][T10255] veth1: entered allmulticast mode [ 123.576337][T10255] wg0: entered allmulticast mode [ 123.585182][T10255] wg1: entered allmulticast mode [ 123.590519][T10255] wg2: entered allmulticast mode [ 123.595668][T10255] veth0_to_bridge: entered allmulticast mode [ 123.606253][T10255] veth1_to_bridge: entered allmulticast mode [ 123.610418][T10255] veth0_to_bond: entered allmulticast mode [ 123.619848][T10255] veth1_to_bond: entered allmulticast mode [ 123.626254][T10255] veth0_to_team: entered allmulticast mode [ 123.630469][T10255] veth1_to_team: entered allmulticast mode [ 123.642198][T10255] veth0_to_batadv: entered allmulticast mode [ 123.651428][T10255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.653819][T10255] batadv_slave_0: entered allmulticast mode [ 123.658941][T10255] veth1_to_batadv: entered allmulticast mode [ 123.665226][T10255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.667536][T10255] batadv_slave_1: entered allmulticast mode [ 123.673083][T10255] xfrm0: entered allmulticast mode [ 123.679627][T10255] veth0_to_hsr: entered allmulticast mode [ 123.684215][T10255] hsr_slave_0: entered allmulticast mode [ 123.689499][T10255] veth1_to_hsr: entered allmulticast mode [ 123.694064][T10255] hsr_slave_1: entered allmulticast mode [ 123.700853][T10255] hsr0: entered allmulticast mode [ 123.707041][T10255] veth1_virt_wifi: entered allmulticast mode [ 123.712333][T10255] veth0_virt_wifi: entered allmulticast mode [ 123.717323][T10255] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 123.719729][T10255] veth1_macvtap: entered allmulticast mode [ 123.727241][T10255] veth0_macvtap: entered allmulticast mode [ 123.733642][T10255] macvtap0: entered allmulticast mode [ 123.739525][T10255] macsec0: entered allmulticast mode [ 123.747744][T10255] geneve0: entered allmulticast mode [ 123.757627][T10255] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.761105][T10255] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.764691][T10255] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.769821][T10255] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.774681][T10255] geneve1: entered allmulticast mode [ 123.782675][T10255] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 123.798779][T10255] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 123.815342][T10255] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 123.824916][T10255] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 123.846604][T10255] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 123.874168][T10255] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 123.879568][T10255] gtp0: entered allmulticast mode [ 123.883595][T10255] ip6tnl1: entered allmulticast mode [ 123.886750][T10255] @: entered allmulticast mode [ 123.890546][T10255] gtp1: entered allmulticast mode [ 123.894400][T10255] mac80211_hwsim hwsim16 wlan2: entered allmulticast mode [ 123.896702][T10255] mac80211_hwsim hwsim17 wlan3: entered allmulticast mode [ 123.903288][T10255] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.906226][T10255] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.909133][T10255] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.911830][T10255] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.916334][T10255] vxlan0: entered allmulticast mode [ 123.930878][T10255] bond1: entered allmulticast mode [ 123.933808][T10255] veth2: entered allmulticast mode [ 123.935618][T10255] veth3: entered allmulticast mode [ 123.943038][T10254] lo: left promiscuous mode [ 124.000887][ T34] usb 10-1: USB disconnect, device number 8 [ 124.047096][T10271] Process accounting resumed [ 124.072084][T10274] validate_nla: 4 callbacks suppressed [ 124.072095][T10274] netlink: 'syz.4.1233': attribute type 10 has an invalid length. [ 124.076267][T10274] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 124.080792][T10274] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 124.083363][T10274] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 124.087159][T10273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.186721][T10283] IPVS: Error joining to the multicast group [ 124.213839][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 124.213849][ T40] audit: type=1400 audit(1754796484.439:870): avc: denied { execute } for pid=10282 comm="syz.5.1237" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 124.791978][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057044c00: rx timeout, send abort [ 124.798582][ T40] audit: type=1400 audit(1754796485.010:871): avc: denied { read } for pid=5342 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 124.812894][ T40] audit: type=1400 audit(1754796485.010:872): avc: denied { search } for pid=5342 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.820203][ T40] audit: type=1400 audit(1754796485.010:873): avc: denied { search } for pid=5342 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.842285][ T40] audit: type=1400 audit(1754796485.010:874): avc: denied { add_name } for pid=5342 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.868021][ T40] audit: type=1400 audit(1754796485.010:875): avc: denied { create } for pid=5342 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.885233][ T40] audit: type=1400 audit(1754796485.010:876): avc: denied { append open } for pid=5342 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.892487][ T40] audit: type=1400 audit(1754796485.010:877): avc: denied { getattr } for pid=5342 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.999943][ T40] audit: type=1400 audit(1754796485.207:878): avc: denied { map } for pid=10302 comm="syz.5.1244" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 125.061097][ T40] audit: type=1400 audit(1754796485.207:879): avc: denied { execute } for pid=10302 comm="syz.5.1244" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 125.303769][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057044c00: abort rx timeout. Force session deactivation [ 125.320175][ T6032] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 125.434991][T10330] fuse: Bad value for 'fd' [ 125.484068][ T6032] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 125.486474][ T6032] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 125.489825][ T6032] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.500460][ T6032] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 125.505021][ T6032] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 125.510224][ T6032] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 125.512625][ T6032] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 125.516701][ T6032] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.520380][ T6032] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 125.524053][ T6032] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 125.531024][ T6032] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 125.532366][T10336] netlink: 'syz.4.1255': attribute type 11 has an invalid length. [ 125.533600][ T6032] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 125.533616][ T6032] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.533628][ T6032] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 125.533641][ T6032] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 125.538671][ T6032] usb 10-1: string descriptor 0 read error: -22 [ 125.563358][ T6032] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 125.566562][ T6032] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.572825][ T6032] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 125.699788][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 125.836382][T10353] uprobe: syz.4.1259:10353 failed to unregister, leaking uprobe [ 125.876250][T10362] program syz.0.1261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.879718][T10362] ata1.00: invalid service action 31 [ 125.927218][ T34] usb 10-1: USB disconnect, device number 9 [ 126.002692][T10366] overlayfs: failed to clone upperpath [ 126.164999][T10371] __nla_validate_parse: 7 callbacks suppressed [ 126.165010][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 126.169753][T10371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.300969][T10371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.426021][ T34] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 126.510545][T10388] ptrace attach of "/syz-executor exec"[10379] was attempted by "/syz-executor exec"[10388] [ 126.601270][ T34] usb 10-1: Using ep0 maxpacket: 8 [ 126.608687][T10369] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1264'. [ 126.616077][ T34] usb 10-1: unable to get BOS descriptor or descriptor too short [ 126.628866][ T34] usb 10-1: no configurations [ 126.630950][ T34] usb 10-1: can't read configurations, error -22 [ 126.653408][T10401] vxcan1 speed is unknown, defaulting to 1000 [ 126.944407][T10380] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.946633][T10380] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 126.970441][T10380] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.972377][T10380] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 126.995343][T10380] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 126.997726][T10380] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 127.014868][T10380] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 127.016790][T10380] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 127.052437][T10380] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.058489][T10380] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 127.175008][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1273'. [ 127.247860][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 127.253394][T10416] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 127.263083][T10416] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1274'. [ 127.381527][T10436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8516 sclass=netlink_route_socket pid=10436 comm=syz.1.1279 [ 127.422168][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1281'. [ 127.499592][T10453] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1285'. [ 127.620525][T10465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1289'. [ 127.626464][T10465] netlink: 'syz.0.1289': attribute type 7 has an invalid length. [ 127.629706][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1289'. [ 127.630413][T10467] o2cb: This node has not been configured. [ 127.637159][T10467] o2cb: Cluster check failed. Fix errors before retrying. [ 127.640127][T10467] (syz.1.1290,10467,2):user_dlm_register:674 ERROR: status = -22 [ 127.652566][T10467] (syz.1.1290,10467,2):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 127.693376][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1291'. [ 127.853613][T10500] x_tables: duplicate underflow at hook 1 [ 127.858244][T10496] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 127.909259][T10505] netlink: 'syz.1.1298': attribute type 39 has an invalid length. [ 127.957826][T10503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10503 comm=syz.0.1297 [ 128.225601][T10523] xt_l2tp: missing protocol rule (udp|l2tpip) [ 128.286313][T10519] kvm: kvm [10516]: vcpu5, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x5 [ 128.317857][T10519] kvm: kvm [10516]: vcpu5, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x5 [ 128.322024][T10519] kvm: kvm [10516]: vcpu5, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x5 [ 128.348230][T10519] kvm_intel: kvm [10516]: vcpu5, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x5 [ 128.489715][T10546] netlink: 'syz.4.1307': attribute type 12 has an invalid length. [ 128.544333][T10551] binder: BINDER_SET_CONTEXT_MGR already set [ 128.549444][T10551] binder: 10550:10551 ioctl 4018620d 200000000340 returned -16 [ 128.568984][T10551] binder: BINDER_SET_CONTEXT_MGR already set [ 128.571601][T10551] binder: 10550:10551 ioctl 4018620d 200000000340 returned -16 [ 128.636735][T10562] netlink: 'syz.4.1310': attribute type 10 has an invalid length. [ 128.927316][T10581] Invalid ELF header magic: != ELF [ 129.389514][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 129.389524][ T40] audit: type=1400 audit(1754796489.538:902): avc: denied { execute } for pid=10625 comm="syz.0.1331" path="/dev/nullb0" dev="devtmpfs" ino=3264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 129.399323][ T40] audit: type=1800 audit(1754796489.548:903): pid=10626 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1331" name="nullb0" dev="devtmpfs" ino=3264 res=0 errno=0 [ 129.480894][T10640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.546644][T10645] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 129.549771][T10645] netlink: 'syz.0.1338': attribute type 4 has an invalid length. [ 129.646012][T10643] overlayfs: failed to clone upperpath [ 129.714380][ T40] audit: type=1400 audit(1754796489.854:904): avc: denied { listen } for pid=10672 comm="syz.4.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.756196][T10680] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 129.760896][T10680] overlayfs: missing 'lowerdir' [ 129.782234][T10683] tipc: Enabled bearer , priority 0 [ 129.823289][T10690] tipc: Enabled bearer , priority 8 [ 129.842561][T10697] binder: BINDER_SET_CONTEXT_MGR already set [ 129.844494][T10697] binder: 10696:10697 ioctl 4018620d 2000000000c0 returned -16 [ 129.852691][T10697] binder: BINDER_SET_CONTEXT_MGR already set [ 129.854583][T10697] binder: 10696:10697 ioctl 4018620d 200000000040 returned -16 [ 129.858604][T10697] binder: 10696:10697 ioctl c0306201 200000000240 returned -11 [ 129.958830][T10715] sctp: [Deprecated]: syz.5.1355 (pid 10715) Use of int in max_burst socket option deprecated. [ 129.958830][T10715] Use struct sctp_assoc_value instead [ 129.965546][ T40] audit: type=1400 audit(1754796490.111:905): avc: denied { read } for pid=10705 comm="syz.5.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.013369][ T40] audit: type=1400 audit(1754796490.161:906): avc: denied { setattr } for pid=10716 comm="syz.0.1360" name="/" dev="9p" ino=37879868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.040597][ T40] audit: type=1400 audit(1754796490.181:907): avc: denied { getopt } for pid=10722 comm="syz.4.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 130.062398][ T40] audit: type=1326 audit(1754796490.210:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.5.1364" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f7878e9a9 code=0x0 [ 130.125596][T10731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10731 comm=syz.4.1366 [ 130.183237][ T40] audit: type=1400 audit(1754796490.329:909): avc: denied { connect } for pid=10737 comm="syz.5.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 130.249910][T10736] kvm: kvm [10735]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xe0000011 [ 130.254158][T10736] kvm: kvm [10735]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xe0000011 [ 130.277544][T10736] kvm: kvm [10735]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xe0000011 [ 130.286054][T10744] openvswitch: netlink: Key type 179 is out of range max 32 [ 130.298097][T10736] kvm: kvm [10735]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xe0000011 [ 130.301861][T10736] kvm: kvm [10735]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xe0000011 [ 130.316938][T10736] kvm_intel: kvm [10735]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0xe0000011 [ 130.433808][T10750] program syz.5.1372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.522351][T10764] nbd: must specify an index to disconnect [ 130.717202][T10775] netlink: 'syz.4.1379': attribute type 10 has an invalid length. [ 130.723149][T10775] openvswitch: netlink: Flow key attr not present in new flow. [ 130.807924][T10783] ipt_rpfilter: unknown options [ 130.825481][ T40] audit: type=1400 audit(1754796490.962:910): avc: denied { accept } for pid=10779 comm="syz.4.1380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.841286][ T54] tipc: Node number set to 2327033070 [ 131.380229][ T40] audit: type=1400 audit(1754796491.506:911): avc: denied { setopt } for pid=10812 comm="syz.0.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 131.908699][T10861] sp0: Synchronizing with TNC [ 131.955992][T10863] netlink: 'syz.1.1409': attribute type 27 has an invalid length. [ 132.037578][T10868] __nla_validate_parse: 11 callbacks suppressed [ 132.037598][T10868] netlink: 57 bytes leftover after parsing attributes in process `syz.4.1411'. [ 132.053146][T10863] vxcan1: left promiscuous mode [ 132.098624][T10873] sctp: [Deprecated]: syz.4.1411 (pid 10873) Use of int in max_burst socket option deprecated. [ 132.098624][T10873] Use struct sctp_assoc_value instead [ 132.151111][T10863] vlan0: left promiscuous mode [ 132.205588][T10863] netdevsim netdevsim1 ªªªªªª: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.205953][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'. [ 132.208364][T10863] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.215021][T10863] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.217857][T10863] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.242304][T10863] bond3: left promiscuous mode [ 132.247087][T10863] bond4: left promiscuous mode [ 132.249008][T10863] bridge3: left allmulticast mode [ 132.285377][T10872] 8021q: adding VLAN 0 to HW filter on device  [ 132.288084][T10872] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.293449][T10872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 132.448458][T10896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.495928][T10891] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42 sclass=netlink_xfrm_socket pid=10891 comm=syz.1.1420 [ 132.593302][T10911] fuse: Bad value for 'user_id' [ 132.594890][T10911] fuse: Bad value for 'user_id' [ 132.597802][ T29] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 132.685396][T10924] Sensor B: ================= START STATUS ================= [ 132.688621][T10924] Sensor B: Test Pattern: 75% Colorbar [ 132.691395][T10924] Sensor B: Show Information: All [ 132.693294][T10924] Sensor B: Vertical Flip: false [ 132.695818][T10924] Sensor B: Horizontal Flip: false [ 132.698042][T10924] Sensor B: Brightness: 128 [ 132.702122][T10924] Sensor B: Contrast: 128 [ 132.710098][T10924] Sensor B: Hue: 0 [ 132.712281][T10924] Sensor B: Saturation: 128 [ 132.714260][T10924] Sensor B: ================== END STATUS ================== [ 132.760648][ T29] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 132.764055][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.766944][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.770605][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 132.774227][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.777131][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.780997][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 132.784674][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.787433][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.791018][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 132.800224][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.803089][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.806927][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 132.820682][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.823526][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.826925][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 132.836184][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.840454][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.845076][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 132.848897][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.853383][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.858014][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 132.862231][ T29] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.866015][ T29] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.871695][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 132.877386][ T29] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 132.882581][ T29] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 132.886112][ T29] usb 10-1: Product: syz [ 132.888076][ T29] usb 10-1: Manufacturer: syz [ 132.890117][ T29] usb 10-1: SerialNumber: syz [ 132.899844][ T29] usb 10-1: config 0 descriptor?? [ 132.907694][ T29] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 133.043691][T10954] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1438'. [ 133.049408][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1438'. [ 133.053718][T10954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1438'. [ 133.095036][T10958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1440'. [ 133.108738][ T29] usb 10-1: USB disconnect, device number 12 [ 133.118438][ T29] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 133.134132][T10960] netlink: 'syz.4.1441': attribute type 64 has an invalid length. [ 133.137398][T10960] netlink: 'syz.4.1441': attribute type 4 has an invalid length. [ 133.141395][T10960] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1441'. [ 133.146059][T10960] openvswitch: netlink: Duplicate or invalid key (type 0). [ 133.149074][T10960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.154573][T10962] openvswitch: netlink: Duplicate or invalid key (type 0). [ 133.156874][T10962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.218476][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.221275][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.253820][T10973] cgroup: No subsys list or none specified [ 133.263228][T10972] netlink: 'syz.0.1444': attribute type 1 has an invalid length. [ 133.271115][T10972] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1444'. [ 133.323129][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 133.326257][T10982] netlink: 'syz.4.1447': attribute type 19 has an invalid length. [ 133.328730][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1447'. [ 133.331792][T10982] netlink: 'syz.4.1447': attribute type 19 has an invalid length. [ 133.526840][T11004] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46608 sclass=netlink_xfrm_socket pid=11004 comm=syz.4.1453 [ 133.726074][T11015] netlink: 'syz.1.1457': attribute type 1 has an invalid length. [ 133.732505][T11015] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 133.853647][T11025] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 133.889458][ T837] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 134.049557][ T837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.054317][ T837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.056316][T11042] bond0: entered promiscuous mode [ 134.059078][ T837] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.059124][ T837] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.060876][T11042] bond_slave_0: entered promiscuous mode [ 134.067002][ T837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.068962][T11042] bond_slave_1: entered promiscuous mode [ 134.083165][ T837] usb 5-1: config 0 descriptor?? [ 134.123754][T11047] 9pnet_fd: Insufficient options for proto=fd [ 134.127000][T11047] autofs: Unknown parameter './file0' [ 134.241355][T11058] 8021q: adding VLAN 0 to HW filter on device bond5 [ 134.313875][T11068] 8021q: adding VLAN 0 to HW filter on device bond5 [ 134.317041][T11068] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 134.323741][T11068] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 134.352772][T11072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.356902][T11072] batadv_slave_1: entered promiscuous mode [ 134.362394][T11072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.376614][T11072] bond5: (slave batadv_slave_1): making interface the new active one [ 134.380569][T11072] bond5: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 134.388232][T11067] overlayfs: missing 'lowerdir' [ 134.396980][T11072] 8021q: adding VLAN 0 to HW filter on device bond5 [ 134.404528][T11072] binder: 11056:11072 ioctl c0306201 200000000640 returned -22 [ 134.483696][T11013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.892065][ T837] usbhid 5-1:0.0: can't add hid device: -71 [ 134.894091][ T837] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 134.899138][ T837] usb 5-1: USB disconnect, device number 12 [ 135.259329][T11097] overlay: Unknown parameter 'euid>00000000000000000000' [ 135.442718][T11112] 9pnet_virtio: no channels available for device syz [ 135.519627][T11121] 9pnet_fd: Insufficient options for proto=fd [ 135.525029][T11121] overlayfs: failed to clone upperpath [ 135.930057][T11145] nft_compat: unsupported protocol 0 [ 135.968061][T11149] trusted_key: encrypted_key: insufficient parameters specified [ 135.973877][T11149] trusted_key: encrypted_key: insufficient parameters specified [ 136.011807][T11154] lo: entered allmulticast mode [ 136.015014][T11152] lo: left allmulticast mode [ 136.198007][T11119] team0: Device gtp2 is of different type [ 136.459626][T11183] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.462446][T11183] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.465876][T11183] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.468602][T11183] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.564220][T11194] overlayfs: failed to clone upperpath [ 136.613437][T11199] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.711368][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 136.711409][ T40] audit: type=1800 audit(1754796496.789:921): pid=11203 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1512" name="file0" dev="tmpfs" ino=2190 res=0 errno=0 [ 136.720095][ T40] audit: type=1804 audit(1754796496.789:922): pid=11203 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1512" name="/newroot/404/file0" dev="tmpfs" ino=2190 res=1 errno=0 [ 136.795948][T11216] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 136.963356][T11258] validate_nla: 1 callbacks suppressed [ 136.963367][T11258] netlink: 'syz.1.1532': attribute type 1 has an invalid length. [ 137.031725][ T40] audit: type=1400 audit(1754796497.107:923): avc: denied { module_load } for pid=11257 comm="syz.1.1532" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=67983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 137.056052][T11260] Invalid ELF header magic: != ELF [ 137.068802][T11260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.419947][T11264] __nla_validate_parse: 7 callbacks suppressed [ 137.419960][T11264] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1534'. [ 137.555321][T11275] /dev/nullb0: Can't lookup blockdev [ 137.556164][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1539'. [ 137.591967][T11284] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=11284 comm=syz.4.1543 [ 137.596603][T11283] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=11283 comm=syz.4.1543 [ 137.600874][T11283] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1543'. [ 137.602197][T11288] IPVS: Unknown mcast interface: nicvf0 [ 137.631464][ T40] audit: type=1400 audit(1754796497.703:924): avc: denied { shutdown } for pid=11289 comm="syz.4.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 137.653527][T11293] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 137.668192][ T40] audit: type=1400 audit(1754796497.723:925): avc: denied { relabelto } for pid=11291 comm="syz.5.1545" name="cgroup.procs" dev="cgroup" ino=468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 137.680441][ T40] audit: type=1400 audit(1754796497.752:926): avc: denied { associate } for pid=11291 comm="syz.5.1545" name="cgroup.procs" dev="cgroup" ino=468 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 137.715157][T11298] Cannot find set identified by id 2 to match [ 137.751463][T11305] 8021q: adding VLAN 0 to HW filter on device bond6 [ 137.866584][T11319] netlink: 'syz.0.1552': attribute type 22 has an invalid length. [ 137.869166][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1552'. [ 137.874995][T11319] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.877849][T11319] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.880530][T11319] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.883286][T11319] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.890505][T11319] netlink: 'syz.0.1552': attribute type 22 has an invalid length. [ 137.893345][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1552'. [ 137.897819][T11322] netdevsim netdevsim1 ªªªªªª: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.900505][T11322] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.903428][T11322] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.906097][T11322] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.966957][T11337] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 138.592633][T11360] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1564'. [ 138.903309][ T40] audit: type=1400 audit(1754796498.964:927): avc: denied { map } for pid=11371 comm="syz.1.1570" path="socket:[68046]" dev="sockfs" ino=68046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 138.993612][T11391] nftables ruleset with unbound chain [ 139.005629][T11391] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 139.037223][ T40] audit: type=1400 audit(1754796499.093:928): avc: denied { mounton } for pid=11394 comm="syz.5.1573" path="/181/bus" dev="tmpfs" ino=982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 139.037276][T11395] /dev/nullb0: Can't lookup blockdev [ 139.050500][ T40] audit: type=1400 audit(1754796499.113:929): avc: denied { ioctl } for pid=11396 comm="syz.0.1574" path="socket:[68064]" dev="sockfs" ino=68064 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.058038][ T40] audit: type=1400 audit(1754796499.113:930): avc: denied { shutdown } for pid=11396 comm="syz.0.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 139.088971][T11399] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20002 [ 139.123777][T11406] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 139.210541][T11416] block device autoloading is deprecated and will be removed. [ 139.387175][T11432] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 139.387528][T11433] openvswitch: netlink: IP tunnel dst address not specified [ 139.389665][T11432] overlayfs: failed to set xattr on upper [ 139.395304][T11432] overlayfs: ...falling back to redirect_dir=nofollow. [ 139.397459][T11432] overlayfs: ...falling back to index=off. [ 139.399379][T11432] overlayfs: ...falling back to uuid=null. [ 139.422520][T11436] 9pnet_virtio: no channels available for device syz [ 139.502249][T11445] ------------[ cut here ]------------ [ 139.504214][T11445] WARNING: CPU: 3 PID: 11445 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 139.507462][T11445] Modules linked in: [ 139.509304][T11445] CPU: 3 UID: 0 PID: 11445 Comm: syz.5.1588 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 139.515544][T11445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.519762][T11445] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 139.522767][T11445] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 139.530249][T11445] RSP: 0018:ffffc9000fb1f438 EFLAGS: 00010246 [ 139.532557][T11445] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 139.535044][T11445] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000040dc0 [ 139.537536][T11445] RBP: 0000000040000000 R08: 0000000000000005 R09: 0000000000000000 [ 139.540037][T11445] R10: 0000000008000000 R11: 0000000000000001 R12: 0000000000000012 [ 139.543095][T11445] R13: 1ffff92001f63e9c R14: 0000000040000000 R15: 0000000000000012 [ 139.545806][T11445] FS: 00007f7f795c76c0(0000) GS:ffff8880d6a20000(0000) knlGS:0000000000000000 [ 139.548997][T11445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.551234][T11445] CR2: 0000200000001000 CR3: 000000003325e000 CR4: 0000000000352ef0 [ 139.553892][T11445] Call Trace: [ 139.554975][T11445] [ 139.555944][T11445] ? stack_trace_save+0x8e/0xc0 [ 139.557493][T11445] ? __pfx_stack_trace_save+0x10/0x10 [ 139.559189][T11445] ? stack_depot_save_flags+0x28/0xa40 [ 139.560944][T11445] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.563006][T11445] ? kasan_save_stack+0x42/0x60 [ 139.564554][T11445] ? kasan_save_stack+0x33/0x60 [ 139.566092][T11445] ? kasan_save_track+0x14/0x30 [ 139.567773][T11445] ? __kasan_kmalloc+0xaa/0xb0 [ 139.569370][T11445] ? common_read+0xc1/0x3d0 [ 139.570893][T11445] ? policydb_read+0x871/0x3220 [ 139.572724][T11445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.574718][T11445] ? hashtab_init+0x1b1/0x290 [ 139.576234][T11445] __alloc_pages_noprof+0xb/0x1b0 [ 139.577831][T11445] ___kmalloc_large_node+0x84/0x1e0 [ 139.579513][T11445] ? hashtab_init+0x1b1/0x290 [ 139.581022][T11445] __kmalloc_large_node_noprof+0x1c/0x70 [ 139.582973][T11445] __kmalloc_noprof.cold+0xc/0x61 [ 139.584601][T11445] hashtab_init+0x1b1/0x290 [ 139.586045][T11445] ? __asan_memcpy+0x3c/0x60 [ 139.587533][T11445] common_read+0x1c2/0x3d0 [ 139.588955][T11445] ? __pfx_common_read+0x10/0x10 [ 139.590522][T11445] ? __kmalloc_noprof+0x242/0x510 [ 139.592199][T11445] ? __pfx_common_read+0x10/0x10 [ 139.593773][T11445] policydb_read+0x871/0x3220 [ 139.595268][T11445] ? __pfx_policydb_read+0x10/0x10 [ 139.596919][T11445] security_load_policy+0x15c/0x12c0 [ 139.598590][T11445] ? irqentry_exit+0x3b/0x90 [ 139.600076][T11445] ? __pfx_security_load_policy+0x10/0x10 [ 139.601883][T11445] ? _copy_from_user+0x93/0xd0 [ 139.603483][T11445] sel_write_load+0x332/0x1bd0 [ 139.605015][T11445] ? __lock_acquire+0xb8a/0x1c90 [ 139.606587][T11445] ? __pfx_sel_write_load+0x10/0x10 [ 139.608262][T11445] ? __pfx_sel_write_load+0x10/0x10 [ 139.609928][T11445] vfs_write+0x2a0/0x1150 [ 139.611311][T11445] ? __pfx___mutex_lock+0x10/0x10 [ 139.613024][T11445] ? __pfx_vfs_write+0x10/0x10 [ 139.614560][T11445] ? __fget_files+0x20e/0x3c0 [ 139.616111][T11445] ksys_write+0x12a/0x250 [ 139.617499][T11445] ? __pfx_ksys_write+0x10/0x10 [ 139.619063][T11445] do_syscall_64+0xcd/0x4c0 [ 139.620551][T11445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.622500][T11445] RIP: 0033:0x7f7f7878e9a9 [ 139.623948][T11445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.629921][T11445] RSP: 002b:00007f7f795c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.632591][T11445] RAX: ffffffffffffffda RBX: 00007f7f789b5fa0 RCX: 00007f7f7878e9a9 [ 139.635075][T11445] RDX: 0000000000001790 RSI: 0000200000000000 RDI: 0000000000000006 [ 139.637554][T11445] RBP: 00007f7f78810d69 R08: 0000000000000000 R09: 0000000000000000 [ 139.640071][T11445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.642678][T11445] R13: 0000000000000000 R14: 00007f7f789b5fa0 R15: 00007ffe475b9398 [ 139.645185][T11445] [ 139.646201][T11445] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.648499][T11445] CPU: 3 UID: 0 PID: 11445 Comm: syz.5.1588 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 139.651623][T11445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 139.654975][T11445] Call Trace: [ 139.656071][T11445] [ 139.657037][T11445] dump_stack_lvl+0x3d/0x1f0 [ 139.658535][T11445] panic+0x71c/0x800 [ 139.659832][T11445] ? __pfx_panic+0x10/0x10 [ 139.661275][T11445] ? show_trace_log_lvl+0x29b/0x3e0 [ 139.662946][T11445] ? check_panic_on_warn+0x1f/0xb0 [ 139.664584][T11445] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 139.666496][T11445] check_panic_on_warn+0xab/0xb0 [ 139.668080][T11445] __warn+0xf6/0x3c0 [ 139.669342][T11445] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 139.671249][T11445] report_bug+0x3c3/0x580 [ 139.672640][T11445] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 139.674543][T11445] handle_bug+0x184/0x210 [ 139.675933][T11445] exc_invalid_op+0x17/0x50 [ 139.677375][T11445] asm_exc_invalid_op+0x1a/0x20 [ 139.678923][T11445] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 139.681024][T11445] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 9d 46 7d 0e 00 75 0b c6 05 94 46 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 139.686948][T11445] RSP: 0018:ffffc9000fb1f438 EFLAGS: 00010246 [ 139.688864][T11445] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 139.691334][T11445] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000040dc0 [ 139.693821][T11445] RBP: 0000000040000000 R08: 0000000000000005 R09: 0000000000000000 [ 139.696284][T11445] R10: 0000000008000000 R11: 0000000000000001 R12: 0000000000000012 [ 139.698742][T11445] R13: 1ffff92001f63e9c R14: 0000000040000000 R15: 0000000000000012 [ 139.701239][T11445] ? stack_trace_save+0x8e/0xc0 [ 139.702784][T11445] ? __pfx_stack_trace_save+0x10/0x10 [ 139.704489][T11445] ? stack_depot_save_flags+0x28/0xa40 [ 139.706214][T11445] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.708215][T11445] ? kasan_save_stack+0x42/0x60 [ 139.709770][T11445] ? kasan_save_stack+0x33/0x60 [ 139.711327][T11445] ? kasan_save_track+0x14/0x30 [ 139.712897][T11445] ? __kasan_kmalloc+0xaa/0xb0 [ 139.714456][T11445] ? common_read+0xc1/0x3d0 [ 139.715915][T11445] ? policydb_read+0x871/0x3220 [ 139.717455][T11445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.719413][T11445] ? hashtab_init+0x1b1/0x290 [ 139.720922][T11445] __alloc_pages_noprof+0xb/0x1b0 [ 139.722522][T11445] ___kmalloc_large_node+0x84/0x1e0 [ 139.724170][T11445] ? hashtab_init+0x1b1/0x290 [ 139.725668][T11445] __kmalloc_large_node_noprof+0x1c/0x70 [ 139.727439][T11445] __kmalloc_noprof.cold+0xc/0x61 [ 139.729044][T11445] hashtab_init+0x1b1/0x290 [ 139.730485][T11445] ? __asan_memcpy+0x3c/0x60 [ 139.731966][T11445] common_read+0x1c2/0x3d0 [ 139.733384][T11445] ? __pfx_common_read+0x10/0x10 [ 139.734944][T11445] ? __kmalloc_noprof+0x242/0x510 [ 139.736561][T11445] ? __pfx_common_read+0x10/0x10 [ 139.738119][T11445] policydb_read+0x871/0x3220 [ 139.739644][T11445] ? __pfx_policydb_read+0x10/0x10 [ 139.741277][T11445] security_load_policy+0x15c/0x12c0 [ 139.742979][T11445] ? irqentry_exit+0x3b/0x90 [ 139.744449][T11445] ? __pfx_security_load_policy+0x10/0x10 [ 139.746237][T11445] ? _copy_from_user+0x93/0xd0 [ 139.747760][T11445] sel_write_load+0x332/0x1bd0 [ 139.749303][T11445] ? __lock_acquire+0xb8a/0x1c90 [ 139.750877][T11445] ? __pfx_sel_write_load+0x10/0x10 [ 139.752531][T11445] ? __pfx_sel_write_load+0x10/0x10 [ 139.754178][T11445] vfs_write+0x2a0/0x1150 [ 139.755575][T11445] ? __pfx___mutex_lock+0x10/0x10 [ 139.757159][T11445] ? __pfx_vfs_write+0x10/0x10 [ 139.758680][T11445] ? __fget_files+0x20e/0x3c0 [ 139.760204][T11445] ksys_write+0x12a/0x250 [ 139.761606][T11445] ? __pfx_ksys_write+0x10/0x10 [ 139.763147][T11445] do_syscall_64+0xcd/0x4c0 [ 139.764598][T11445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.766446][T11445] RIP: 0033:0x7f7f7878e9a9 [ 139.767872][T11445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.773811][T11445] RSP: 002b:00007f7f795c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.776412][T11445] RAX: ffffffffffffffda RBX: 00007f7f789b5fa0 RCX: 00007f7f7878e9a9 [ 139.779025][T11445] RDX: 0000000000001790 RSI: 0000200000000000 RDI: 0000000000000006 [ 139.781520][T11445] RBP: 00007f7f78810d69 R08: 0000000000000000 R09: 0000000000000000 [ 139.783992][T11445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.786449][T11445] R13: 0000000000000000 R14: 00007f7f789b5fa0 R15: 00007ffe475b9398 [ 139.788932][T11445] [ 139.790580][T11445] Kernel Offset: disabled [ 139.791967][T11445] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:07:47 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffc9002252fd68 RCX=ffffffff82064b39 RDX=1ffffd4000201d99 RSI=ffffffff82071829 RDI=ffffea000100ecc8 RBP=ffffea000100ecc0 RSP=ffffc9002252fb58 R8 =0000000000000006 R9 =0000000000013d3f R10=00000000000403b3 R11=0000000000000001 R12=ffff888033ee4a00 R13=ffff888033ee4a20 R14=ffffea000100ed08 R15=0000000000000000 RIP=ffffffff8207184c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558124d500 ffffffff 00c00000 GS =0000 ffff8880d6720000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f11bb5b6070 CR3=000000005be66000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11bb411d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11bb411d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11bb411d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11bb411d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11bb411de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11bb411ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11bb586488 00007f11bb586480 00007f11bb586478 00007f11bb586450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11bc0ed100 00007f11bb586440 00007f11bb586458 00007f11bb5864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f11bb586498 00007f11bb586490 00007f11bb586488 00007f11bb586480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff888026a28000 RCX=ffffc90023ba7504 RDX=0000000000000000 RSI=ffffffff8de0ad95 RDI=ffff888026a28444 RBP=ffff888026a28000 RSP=ffffc90023ba7510 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff888026a28000 R13=0000000000000001 R14=0000000000000001 R15=0000000000003a94 RIP=ffffffff81a2396e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6820000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c291946 CR3=0000000024c46000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000063e 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005800448100006 0102e20108000588 0300080005800306 0000029500000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00902b8f00000000 0100004754eb4b4e 71dbb6d23cd5544d 0582d122e8a93c1f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f255cadc0006776f 8aacfa4f71498949 24d88cd97f819bd9 5a720beb1e3f716e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e9160ef339f0000 0000000000950000 0000000000c60000 000000581061007f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffd000005b40592 0815800315800408 9003080800088803 1c08000880031010 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f00300080009e803 01080009e0030008 0009d80320080009 d003000800180308 ZMM25=07b3764b07b3764b 07b3764b07b3764b 07b3764b07b3764b 07b3764b07b3764b 07b3764b07b3764b 07b3764b07b3764b 07b3764b07b3764b 07b3764b07b3764b ZMM26=82b0705282b07052 82b0705282b07052 82b0705282b07052 82b0705282b07052 82b0705282b07052 82b0705282b07052 82b0705282b07052 82b0705282b07052 ZMM27=e081c6f2e081c6f2 e081c6f2e081c6f2 e081c6f2e081c6f2 e081c6f2e081c6f2 e081c6f2e081c6f2 e081c6f2e081c6f2 e081c6f2e081c6f2 e081c6f2e081c6f2 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a6070000a6070000 a6070000a6070000 a6070000a6070000 a6070000a6070000 a6070000a6070000 a6070000a6070000 a6070000a6070000 a6070000a6070000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90000648b08 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000040 RDI=ffffc90000648d08 RBP=0000000000000000 RSP=ffffc90000648b08 R8 =0000000000000100 R9 =0000000000000000 R10=ffffed1007880ac0 R11=0000000000000001 R12=0000000000000001 R13=000000000021a008 R14=ffffea0000f10140 R15=0000000000000000 RIP=ffffffff822105db RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558124d808 CR3=0000000032c17000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e0000007 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555666ff375 00005555666ff220 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555666fd1c5 00005555666fcf30 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a800050180041881 c3938c0800010800 060113e220800800 0198030a08000190 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10000fb180800404 0143b80010000fff ffffffffff040880 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00100024e010000f 9ec080040c0141da 01c08010000995c0 8004040143b84080 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080607800301c0 8010000ed8808004 040143b800100001 0800409880e21000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010810000780042c 10000601028c0100 0000080607800301 c08010000ed88080 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04040143b8001000 010800409880e210 0000100024e01000 0f9ec080040c0141 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 da01c08010000995 c08004040143b840 8010000fb1808004 040143b80010000f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0408 8080818210000280 8010000c80040100 000608060c0156ce ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a57c5 RDI=ffffffff9b0b9e60 RBP=ffffffff9b0b9e20 RSP=ffffc9000fb1eda0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b0b9e20 R15=ffffffff855a5760 RIP=ffffffff855a57ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f7f795c76c0 ffffffff 00c00000 GS =0000 ffff8880d6a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000003325e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006e75745f7a7973 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000