last executing test programs: 55.650540856s ago: executing program 1 (id=304): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_INTERRUPT(r6, 0x0, 0xeffd) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r7, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000013c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f00000000c0)) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r3) (async) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"a2e3ad0e090d07f91b5e1a1887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f3b316c030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff34}}, 0x1006) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) (async) write$FUSE_INTERRUPT(r6, 0x0, 0xeffd) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r7, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000013c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) 52.50145873s ago: executing program 1 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 19) 52.290851934s ago: executing program 1 (id=449): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x30) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000001000080004004400000008001b"], 0x30}}, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000080), 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x48882, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000080)='syzkaller\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r7, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r8}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r7, &(0x7f0000000000), &(0x7f0000000780)=@udp6=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r7, &(0x7f0000000000), &(0x7f00000000c0)=@udp6}, 0x20) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'veth0_to_bond\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x1d, 0x3, 0x2, 0x0, 0x9, 0xffff, 0x8, 0xa8, 0x435}}) close_range(r0, 0xffffffffffffffff, 0x0) 52.180750267s ago: executing program 1 (id=454): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000000c0)={0x3000, 0xf000, 0x9, 0x6, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newsa={0x148, 0x10, 0x713, 0x0, 0xfffffffd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x8}, {}, {}, 0x0, 0x3502, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @offload={0xc, 0x1c, {r2, 0x1}}]}, 0x148}}, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x80) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x5, 0x80, 0x1, 0x2, 0x9, 0x101, 0x4, 0x2, 0x8, 0x0, 0x85f, 0x81, 0x5fb9, 0x8, 0x0, 0x0, {0x7, 0x9}, 0x8, 0xe}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x7dea6bc29d40f3c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x800, {0x5, 0x2000000000000005, 0xfffffffffffffffc, 0x800000000000000, 0x8, 0x6, {0x2, 0x6, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x47, 0x0, 0x126, 0x6000, 0x10000, r7, 0x0, 0x900, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x400040, 0x80, 0x2, 0xfffffffb, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r8, 0x80140912, 0x7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000000206030000000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000db7bb8f777ae19e955deb"], 0x48}}, 0x0) 52.04153434s ago: executing program 1 (id=455): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0xe00, 0x400c800}, 0x0) 51.941098751s ago: executing program 1 (id=457): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000340), &(0x7f0000000200)=0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000f00000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000030000050015"], 0x64}}, 0x0) 51.903046733s ago: executing program 32 (id=457): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000340), &(0x7f0000000200)=0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000f00000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000030000050015"], 0x64}}, 0x0) 3.769659937s ago: executing program 0 (id=1579): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) (fail_nth: 2) 3.709794617s ago: executing program 2 (id=1580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r0], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) 3.70962387s ago: executing program 0 (id=1581): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 3.709319149s ago: executing program 2 (id=1582): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000eb3000/0x1000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) munmap(&(0x7f000075a000/0xb000)=nil, 0xb000) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="50100000", @ANYRES16=r3, @ANYRES8=r2], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="997425bd7000fbdbdf25150000c5480001800d0001007564703a73797a320000000008000300090000002c0004001400010002004e24ac1414bb000000000000000014009940bb3d19195692ffff0000000000000000aae0f545bfa50b44f5e3b6dc48c79bd851df8d3d013fc0a2859a3a97cfb25074"], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) munmap(&(0x7f0000482000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ee4000/0x1000)=nil, 0x1000) munmap(&(0x7f0000f62000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x2000000000000005, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000, {0x2, 0xd08, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x47, 0x0, 0x126, 0x6000, 0x10000, r6, 0x0, 0x902, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x10000, 0x204400c8, 0x80, 0x2, 0x8, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r7, 0x400c0930, 0x7) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) socket$pppl2tp(0x18, 0x1, 0x1) 3.050390069s ago: executing program 4 (id=1595): r0 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000001c0), 0x121000, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="9884e8cc7dc5"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000140)=@default_ap_ssid, 0x6, 0x1) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000180)=ANY=[@ANYBLOB="80000000ffffffffffff0802110000003cf2aea2a6ccf4e2b420a3d100000000000000000000640001000006020202020202010882848b960c121824"], 0x36) 2.340747001s ago: executing program 4 (id=1598): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x4, 0x6, 0x4, '\x00', 0x5624}) ioctl$KVM_RUN(r2, 0xae80, 0x40000000000) 2.119672778s ago: executing program 4 (id=1599): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[r1], &(0x7f0000000040)=[0x5], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f00000001c0)={r1, r1, 0x1, 0x5, 0x2}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 2.119083449s ago: executing program 4 (id=1600): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@deltfilter={0x16f8, 0x2d, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xfff3, 0xfff1}, {0x2, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1e0, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_CGROUP_ACT={0x1cc, 0x1, [@m_skbedit={0x104, 0x4, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x3}}]}, {0xc5, 0x6, "c821fd7656f141d052d197804f99afcf6fa32fc5110cc4edf1b2d8fbbfdd38935572013853ec0ba8fd759fe727203e9e4e3439ecf92e0fddfc91c31387c2b87867aed87f0af60249573f62a97adc5fb7adc4c1adc77df70dd14010382e9def1c2e5cb85ecb64206e8e68498dc381db08958117586dde0375f5bb1b5e5a075f44508e9e0e67bf0c3623aeb569a9ee4938d586e0b61a7c5817a47b2d628da4d57b8224dee297c2ec32406eb61b9224be82d540999cd1d5e2a5ba0b9ec85a194c78e5"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0x74, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x800}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xc}]}, {0x30, 0x6, "4bafee7cb0731fd9b2ba6dc800955e757a426ae35b236ecf402075ebb5fb88fe58c7e81b57c791498ff85a90"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x50, 0x10, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1ff}]}, {0x1c, 0x6, "46849f87afe0ccd5fbcd4b3af091e60a99f8ed9d2764eed2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3e, 0x6}}, @filter_kind_options=@f_cgroup={{0xb}, {0x14d4, 0x2, [@TCA_CGROUP_POLICE={0x430, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x27}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x6, 0x9de, 0x0, 0x5, 0x3, 0x4, 0x43f8, 0x3, 0x9, 0x5, 0x6, 0xf6, 0x0, 0x3ff, 0x200, 0x3, 0x8, 0x4, 0xd87b, 0xf, 0x7be, 0xfe, 0x9, 0xfffffffa, 0x2, 0xfffffff0, 0x4, 0x8, 0x5, 0x2, 0xab, 0x5, 0x4, 0xe, 0x7, 0x6, 0x768, 0x1, 0x5, 0xe, 0x6, 0xffff20f0, 0xc, 0x7, 0x7, 0xd7, 0x80000001, 0x7, 0xfc02, 0x2a5, 0x3, 0x1, 0x5, 0x0, 0xff, 0x1, 0x6, 0x9, 0x3, 0x136, 0x1d8bc000, 0x7, 0x0, 0x8, 0x9, 0x0, 0x81, 0xffff, 0x9, 0x6, 0x7fff, 0x3, 0xfffffffd, 0x2, 0x2a3994af, 0x80000000, 0x3, 0x1, 0x4, 0x3, 0x1, 0x1, 0xfd, 0x9, 0x7496, 0x3, 0x1, 0x9, 0xb, 0x6, 0xfffffffe, 0x8, 0x63, 0x2, 0x7fffffff, 0x22316635, 0xffff8041, 0x9, 0x36, 0x3, 0x6, 0x1, 0x800, 0x400, 0x2, 0x40000000, 0x4, 0x800, 0x4, 0xaacf, 0x3ff, 0x200000, 0x9, 0x1ff, 0xffff7829, 0x3, 0x7fffffff, 0xffffa219, 0x1, 0x5, 0x1c9, 0x800, 0x1, 0x3, 0xbad, 0x56d, 0x1000, 0x8, 0x1, 0x9, 0x8, 0x3, 0x6995, 0xa6c0a927, 0x7bd8, 0xffff, 0x1, 0x2, 0xe, 0x4, 0x1, 0x4, 0x0, 0x3, 0x7fffffff, 0x9, 0x9, 0x5, 0xfffffffc, 0x4, 0x40000, 0x3, 0x941f, 0x401, 0x6, 0xa, 0x800, 0x3, 0x101, 0x2, 0x7, 0x2, 0xcf, 0x7eb, 0x5, 0x2, 0x8, 0x1000, 0xfffffffa, 0x8, 0x800, 0xa8000000, 0x9, 0x6, 0x9, 0x3, 0x4, 0x18, 0x80000001, 0x3, 0x8, 0x3, 0x168d, 0x8, 0x80000000, 0x6, 0x80000001, 0xe, 0x8, 0x401, 0x8, 0x1f, 0x7, 0x7f, 0x10001, 0x400, 0x2, 0x3, 0xb, 0xaf, 0x9, 0x8, 0xa4c, 0x1, 0x354, 0x6, 0x44, 0x1000, 0x8000, 0x3, 0x9, 0x4, 0x4, 0x2, 0x1, 0xf96, 0x7fffffff, 0x7, 0x9, 0x1, 0x14, 0x1, 0x2, 0x80, 0x3, 0x7, 0x1, 0xb, 0x3, 0x5, 0x9, 0x94, 0x1, 0x7, 0x7, 0x9c, 0xe4d2, 0x4, 0xe, 0xc7, 0x0, 0x8, 0x3, 0x5, 0x6, 0x5, 0x1c11f969, 0x2e2, 0x8, 0xfffffc00, 0x5, 0xfffffff8, 0x7fffffff, 0x456, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_CGROUP_POLICE={0x828, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x81c5}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7, 0x7, 0x2, 0xca, 0x5, 0x3, 0x9, 0x8, 0x3, 0x7, 0x29ca, 0x7, 0x5, 0x1, 0xffffffff, 0x2, 0x1f, 0xd, 0x5, 0x4, 0x2, 0x9, 0x6, 0x6, 0x9, 0x7, 0x479f, 0x77a, 0x7, 0x2c9, 0x40, 0x4, 0x26ba, 0x9d, 0x7, 0x24, 0x8000, 0x400, 0x0, 0x4, 0x10000, 0xed19, 0x0, 0x2, 0xab16, 0x1000, 0x1, 0x9, 0x7, 0x10001, 0x9, 0x9d6b, 0x0, 0x4ca9, 0x2, 0x3, 0xfffffff5, 0x1, 0x3, 0x2, 0x0, 0x2, 0x8000, 0x1, 0x13bf, 0x8, 0x5, 0x7, 0xaf5, 0x6, 0x7, 0x0, 0x4, 0x40, 0x0, 0x8, 0xfffffffa, 0x0, 0x1, 0x400, 0x2b26ee8, 0x2, 0x6, 0x9, 0x3, 0x5, 0x8, 0x80, 0x1000, 0x8, 0x8, 0x9, 0xacd, 0x5, 0x8000, 0xfffffff8, 0x198, 0xc42b, 0x9, 0x3, 0xc5, 0x8, 0x2e, 0x5, 0x0, 0x9, 0x946, 0x100, 0xcb2b, 0x2, 0x270f410c, 0x4, 0x2, 0x48a263d8, 0x6b, 0x6, 0x2, 0x3, 0x6, 0x2, 0x4, 0x6, 0x4, 0x0, 0x85, 0x7fffffff, 0x7, 0x0, 0x7, 0x8, 0x9, 0x1, 0x0, 0x9, 0x1, 0x9, 0x18337f8, 0x8, 0x4, 0xd68e, 0x0, 0x7, 0x8ded, 0x7, 0x3ff, 0x0, 0x7, 0x1, 0x5, 0x1, 0x0, 0x0, 0x10001, 0x7, 0x7, 0x7fff, 0x4, 0x7, 0x6, 0x6, 0x0, 0xea93, 0xe, 0x10, 0x59, 0x7fff, 0x2, 0x80000001, 0x9, 0x3ff, 0x3ff, 0xb73, 0x1, 0x400, 0x0, 0x2, 0xe05b, 0x5, 0x80, 0xbe4, 0x400, 0x9, 0xc, 0x5, 0x2, 0x6, 0x58, 0x40, 0x0, 0x6, 0x9, 0x2, 0x8, 0x1000, 0x7fff, 0x5, 0x9807589f, 0x9, 0x2, 0x6, 0x4000000, 0xd5c, 0x4, 0x8000, 0x6, 0x74, 0x3, 0x3, 0x7f, 0xe7c3, 0x2, 0x3, 0x9, 0x14, 0x7fff, 0x7, 0x5, 0x3, 0x400, 0x7, 0x7, 0x80000001, 0xfffffff9, 0xec82, 0x8001, 0x7ff, 0x1, 0x80, 0x7, 0x7, 0xcf, 0x401, 0x6f, 0x5, 0x3, 0x3ff, 0x9, 0xb9e, 0x60, 0x1, 0xfffffffa, 0x3ff, 0x9, 0x0, 0x2913, 0x1, 0xffffffd4, 0x0, 0xfffffffa, 0x4b24, 0x7ff, 0x0, 0x6, 0x1, 0x6363]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0xc334, 0x9, 0x1, 0x2, 0x11, 0x8, 0x9, 0xc99, 0x100, 0x9, 0x1, 0x2, 0x9, 0x2, 0x4, 0xf1, 0x4, 0x8001, 0x8, 0x5bf, 0x2, 0x9, 0x4, 0x2, 0x9da, 0xbae6, 0x200, 0x6, 0x5, 0x80000000, 0x1ce9cfd6, 0x6, 0xc8, 0xd7a9, 0x2, 0x7, 0x0, 0xc, 0x8, 0x10000, 0x31e, 0x7f, 0xe2ba, 0x6, 0x9, 0x1, 0x1, 0x8, 0x3ff, 0x1, 0x1ff, 0xee12, 0x0, 0x4, 0x7, 0x5, 0x2, 0x5, 0x2cd8, 0x8, 0x7c2, 0x5661, 0x8, 0x955, 0xf, 0x5, 0x3, 0x4, 0x1, 0x20000000, 0xe0c3, 0xb76, 0x8, 0x9, 0x6, 0x7, 0x4, 0x2, 0x2, 0x5, 0x599b, 0xf, 0x5, 0x5, 0x20e9, 0x3, 0x0, 0xb4b, 0x1, 0x21, 0x73, 0x80, 0x8, 0x401, 0xfffffffb, 0x5, 0x6, 0x7, 0xd, 0x9, 0x6b19d282, 0xffff4873, 0x17, 0x8, 0x6, 0x2, 0x9, 0x2841, 0x8, 0xcc, 0x1, 0x1, 0x2, 0x40, 0xffff, 0x5, 0xade, 0x16a, 0x3, 0x5, 0x1, 0xffff8507, 0x4, 0x10, 0x4, 0x7, 0xfffffff4, 0x2, 0x3ff, 0xe, 0x0, 0x8, 0x7, 0x916, 0xfffffff7, 0x883e, 0x1000, 0x10, 0x8, 0x2, 0x8, 0x8, 0x9, 0x0, 0x62b, 0x5, 0x8, 0x0, 0x1, 0xddc, 0x8, 0xd7, 0x2, 0x2d, 0xd5, 0x8, 0x0, 0x80, 0x0, 0x80000000, 0x72, 0x6, 0x4, 0x6, 0x5, 0x4, 0x8, 0x80, 0x95, 0xfff, 0x7, 0x7ff, 0x401, 0x0, 0x8, 0x8, 0x0, 0x1, 0x6, 0x7e, 0x1, 0x800, 0x1, 0x2, 0xfffffffe, 0x1, 0x7f, 0x2d1, 0x7, 0x80000000, 0x5, 0x7, 0x6, 0x81, 0xff, 0x8, 0x8, 0xe3, 0x100, 0x99, 0x6, 0x5, 0xfffffff2, 0x9, 0x5, 0x7ff, 0xa84, 0x9, 0x401, 0x6, 0x81, 0x4, 0x5, 0x19, 0x8, 0x2, 0xffff8001, 0x0, 0x84a, 0x56, 0x1ff, 0x3, 0x40, 0x2, 0xd, 0x9, 0x7, 0x3, 0x8, 0x7fff, 0x681, 0x401, 0x6, 0x4, 0x7, 0x5, 0x94d8, 0xc0ff, 0x1200000, 0xfffffffb, 0xff, 0x80, 0x7fffffff, 0x7fff, 0x8, 0x7, 0x7, 0x8, 0x5ba, 0x6, 0x80000000, 0x3, 0xffff0001, 0x7fffffff, 0x6, 0x5]}]}, @TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xff, 0x3, 0x9}, {0xf, 0x6, 0x6, 0xfffffffb}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9ad}]}, @TCA_CGROUP_POLICE={0x828, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xad2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x4, 0x8001, 0x6dd2, 0x2, 0x8, 0xffffffff, 0x80000000, 0xfffffff4, 0x9, 0xfffffff5, 0xfffffffc, 0x1cd7, 0x401, 0x7, 0x9, 0x10, 0x4, 0xd, 0x4, 0x8, 0x7c10, 0x5, 0xffffffff, 0x3, 0x7ff, 0x7, 0x8989, 0x3, 0x80000000, 0xeeb, 0x7, 0xd, 0x9, 0xff, 0x7, 0x4c8b, 0x2, 0xfe, 0x5, 0x5, 0x200, 0x9, 0x0, 0x81, 0xd, 0x10000, 0x8, 0x1, 0x80000000, 0xb, 0x2, 0x2, 0xa6f, 0x10000, 0xa, 0x19, 0x800, 0x400, 0x7, 0x400, 0x3ff, 0x10, 0x5, 0x1, 0x101, 0x4, 0x1, 0x10001, 0xffffff01, 0xb31, 0x8, 0x7e, 0x4, 0x684, 0xe1c2, 0xe, 0x400, 0x1, 0x4, 0x0, 0xfffff801, 0x3, 0x5, 0x9, 0x253c09a9, 0x1, 0x2, 0x5, 0x1ff, 0x1, 0x2, 0x5, 0x4, 0x2, 0x4c8d, 0x31c, 0x0, 0x7, 0x7fff, 0x2, 0xf4a, 0xc4, 0x0, 0x8, 0x7, 0x9, 0x6b, 0x100, 0x1d36, 0x7fff, 0x3, 0xa, 0x0, 0x5, 0x4d4, 0x1, 0x9, 0x448ffafc, 0x5, 0x2, 0x7, 0x9, 0x7, 0x8, 0x400, 0x2, 0x8, 0xffff, 0x6, 0x3, 0xb, 0x5, 0x99, 0x0, 0x6, 0x80000000, 0x2, 0xbe, 0x4, 0x1, 0xcd97, 0x9d99, 0xd1a, 0x5, 0x9, 0x2, 0x95c, 0x10, 0x9, 0x0, 0x100, 0x596, 0x26cb, 0x5, 0x6, 0x6, 0x5, 0x3, 0x4, 0xb8d0, 0x4, 0x1, 0x4, 0x80, 0xfffffff9, 0x8, 0x1, 0x2, 0xe499, 0x9, 0xfffffffe, 0x4a, 0x2, 0xffffff35, 0x9, 0x90, 0xfffffff9, 0xfffeffff, 0x1, 0x0, 0x80000000, 0x15c80cc8, 0xfffffffb, 0x0, 0x3, 0x2, 0x2, 0x7f, 0x941, 0x5, 0x6, 0x1, 0xb81, 0x9, 0x2, 0x2, 0xfc, 0x80000000, 0x10000, 0x7, 0x9, 0xb8, 0x0, 0x405, 0xa3b0, 0x0, 0x0, 0x8, 0x5, 0x4, 0x8001, 0x800, 0xf9b7, 0x40, 0x9, 0x1, 0x8000, 0x8f, 0x5, 0x7, 0x9, 0x0, 0x2, 0x7, 0x7085, 0x9, 0x7, 0x7, 0x80000000, 0x0, 0x62, 0x7, 0xd, 0x3, 0x0, 0xd81, 0xd, 0x0, 0x9, 0x3, 0x1, 0xffff, 0xf4, 0x6, 0x6, 0x5e93, 0x4, 0x8, 0x393, 0x4, 0x7fff, 0x5, 0x312d, 0xc9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x11, 0xffff, 0x3, 0x1, 0x7, 0x5, 0xca74, 0x0, 0x3c, 0x4, 0x7, 0x2, 0xc45f, 0x1, 0x0, 0x4, 0x3, 0xc1d, 0x10000, 0x40, 0x8, 0x1, 0x3, 0x3, 0x42782d9f, 0x10000, 0xe, 0x8, 0x0, 0x2, 0x5, 0xb, 0x1, 0x1ff, 0xfffffffd, 0xfffffff8, 0xd85, 0x7f, 0x290, 0x3, 0x8, 0x5443b4fa, 0x4, 0x21c, 0x7, 0x8, 0xb, 0x6, 0x3, 0xfffffffe, 0x5, 0x400, 0x3, 0xc1, 0x4, 0x2, 0x2063, 0x1ff, 0x5, 0x4, 0x9, 0x17, 0xfffffffa, 0xb, 0x7, 0x8000, 0x4f1a, 0xffffffff, 0x3, 0x4, 0xfff, 0x0, 0x1, 0xffff, 0xa, 0x4, 0xe, 0xfffff800, 0x80000000, 0x7fff, 0x0, 0x2, 0x935, 0x6, 0xb5c8, 0x2, 0x80000000, 0x7, 0x7, 0x8, 0xb0, 0xfffffff7, 0x80000000, 0x7, 0xff, 0x0, 0x8, 0x37d, 0x1, 0x2, 0x1, 0x5, 0x6, 0x1, 0x6, 0x3, 0x3, 0x7, 0xfff, 0xffffac27, 0x10001, 0x5, 0xfff, 0x6, 0xc, 0x6, 0x101, 0x6, 0xbc3, 0x1, 0xffffffff, 0x3, 0x800, 0xa1, 0x4, 0x1ff, 0x9, 0x8, 0x46230b7e, 0xffff, 0xe20, 0x80, 0x5, 0x8, 0x400, 0x0, 0x6, 0x6, 0x9, 0x40, 0x6, 0x7, 0x8, 0x3, 0x3, 0x3, 0x400, 0x1, 0x3, 0x7, 0x7, 0xffff, 0x4, 0x8, 0x200, 0x4, 0x5, 0xfffffffc, 0x2, 0x7, 0x8, 0x240000, 0xa0000000, 0x5, 0xfffffe71, 0x7, 0xd2, 0x1, 0x36192415, 0x4, 0x1, 0xffffffff, 0x9, 0xf7, 0x0, 0xbff7, 0x6, 0x7fff, 0x6, 0xc08, 0x0, 0xffffff80, 0xd5f6, 0x8e03, 0x9, 0xff, 0x9, 0x4, 0x4, 0xbb, 0x0, 0x400, 0x5c, 0x8000, 0x9, 0x7, 0x1, 0x6, 0x7, 0x80000001, 0x0, 0x0, 0x6, 0x8001, 0x4, 0x2, 0x5, 0x1, 0x9, 0xc23e, 0xfff, 0xda, 0x1ff, 0x10000000, 0x7, 0x9, 0x3, 0x100, 0x8, 0x60e, 0x280, 0x2, 0xffffffff, 0x7, 0x0, 0x4, 0x390, 0xa, 0x4, 0x6, 0x9, 0x8, 0x7f, 0x5, 0x7, 0x7, 0x9, 0x1, 0x34e, 0x6, 0xa7, 0x8, 0x4, 0xc, 0x10001, 0x81, 0x80000001, 0x7, 0x7, 0x1, 0xc, 0x0, 0x2, 0x387b, 0x92f, 0x6]}]}]}}]}, 0x16f8}}, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x105, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x0, "d2ea61bf62041dae026e9e8203614554307c83d774dfc0fb62602f9a84c3bbe4", 0x4745504a}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r2, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x24}}, 0x0) 1.693105006s ago: executing program 3 (id=1603): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x2, 0x0, 0x1) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bind$alg(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x581, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x20}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x3600000000000000, 0x20040000}, 0x0) 1.650754939s ago: executing program 3 (id=1604): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x6, 0x9, "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", 0xd, 0x5, 0x8, 0x2, 0xa, 0x4, 0x6, 0x1}}}, 0x120) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1001, 0x3a, 0x1000, 0x3a, 0x1007ff, 0xf84, 0x4}, 0x1c) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x10003, 0x1, 0x5000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) chdir(&(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 1.579479406s ago: executing program 3 (id=1605): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x35, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) 1.579044086s ago: executing program 0 (id=1606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000002060101000000000000000001009e000c00078005001500efffffff050005000a0000000900020073797a3000000000050004000100000005000100060000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4008000) 1.514087881s ago: executing program 0 (id=1607): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) (async, rerun: 64) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x4) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x340, r2, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x20, 0x4c, [0xfac08, 0xfac06, 0xfac14, 0xfac01, 0x8, 0xfac0e, 0xfac10]}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TX_RATES={0x1a4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x6, 0x8, 0x8, 0x8f, 0x2, 0x4, 0x57f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8, 0x0, 0x7, 0x0, 0xd, 0xabe8, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x277, 0x1, 0x9, 0x906, 0x8e, 0x2, 0x7ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xff80, 0x6, 0x1, 0x6, 0x200, 0xfffe, 0x2]}}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x3, 0x1}, {0x1, 0xa}, {0x0, 0x6}, {0x5, 0x8}, {0x0, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x9, 0x3, 0x3, 0x25, 0x4, 0x1, 0x401]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x6, 0x9}, {0x2}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x6}, {0x2, 0xa}, {}, {0x3, 0x8}, {0x3, 0x8}, {0x5, 0x7}, {0x5, 0x4}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x2}, {0x1, 0xa}, {0x1, 0x5}, {0x2, 0x1}, {0x4, 0xa}, {0x1, 0x6}, {0x0, 0x7}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x7}, {0x1, 0x6}, {0x5, 0x8}, {0x7, 0x6}, {0x0, 0x5}, {0x1, 0xa}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x4}, {0x1, 0x8}, {0x6, 0x3}, {0x6, 0x3}, {0x5, 0x8}, {0x5, 0x8}, {0x1, 0x9}, {0x7, 0x1}, {0x5, 0x5}, {0x3, 0xa}, {0x7, 0xa}, {0x6, 0x3}, {0x4, 0x9}, {0x6, 0x4}, {0x4, 0x8}, {0x3, 0xa}, {0x1, 0x9}, {0x5, 0xa}, {0x4, 0x4}, {0x6, 0x8}, {0x2, 0x5}, {0x2, 0x8}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x6}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x5, 0x33, 0x24, 0x1, 0x1, 0x9, 0x6, 0x9, 0x1e, 0x36, 0x60, 0x56]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x6}, {0x5}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0x2}, {0x0, 0x4}, {0x7, 0x8}, {0x1, 0x9}, {0x4, 0x5}, {0x5, 0x9}, {0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x30, 0x2d, 0x665cc888f7066913, 0x6, 0x1b, 0x6c, 0x6c, 0x16, 0x2, 0x5, 0x5, 0x12, 0x6c, 0x0, 0xb, 0x60, 0x6c, 0x1, 0x24, 0x1b, 0x24]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x4}, {0x7}, {0x4, 0x2}, {0x0, 0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x7}, {0x0, 0x4}, {0x4, 0x9}, {0x4}, {0x6, 0x2}, {0x0, 0x4}, {0x6, 0x8}, {0x2, 0x7}, {0x6, 0x1}, {0x2, 0x9}, {0x1, 0x7}, {0x7, 0x1}, {0x1}, {0x7, 0x3}, {0x2}, {0x1, 0x8}, {0x2, 0xa}, {0x6, 0x8}, {0x6, 0x9}, {0x6, 0x3}, {0x6, 0x9}, {0x2, 0x1}, {0x6, 0x7}, {0x3, 0x5}, {0x0, 0x1}, {0x4}, {0x0, 0xa}, {0x5, 0x6}, {0x3, 0x7}, {0x6, 0x8}, {0x1, 0x5}, {0x1, 0x8}, {0x7, 0xa}, {0x6, 0x3}, {0x5, 0x3}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x5}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x1}, {0x1}, {0x4, 0x8}, {0x7}, {0x3, 0x2}, {0x3, 0x3}, {0x7, 0xa}, {0x0, 0x7}, {0x2, 0x1}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x4, 0x306b, 0x1ff, 0x6, 0x40, 0x5c5]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x6c, 0x6, 0xb, 0x6, 0x1b, 0x9, 0x16, 0x6, 0x5, 0x4, 0x1b, 0x12, 0x3, 0x6, 0x1, 0x1b, 0x3, 0x1b]}]}]}, @NL80211_ATTR_HE_OBSS_PD={0x70, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xc}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x9}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x13}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x8}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "ab73e2641755cdd6"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x5}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "1f01b7ebf50f4055"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "e34f41589ba409e0"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xc}]}, @NL80211_ATTR_TX_RATES={0xe4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x9fdb, 0x8, 0x5, 0x81, 0x401, 0x800, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x5}, {0x6, 0x4}, {0x5, 0x8}, {0x5}, {0x5, 0xa}, {0x2, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x3}, {0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x1, 0x9}, {0x6, 0x1}, {0x7}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x5}, {0x7, 0x1}, {0x0, 0x4}, {0x6, 0x3}, {0x5, 0x2}, {0x1, 0x6}, {0x3, 0x6}, {0x2, 0x2}, {0x6, 0x9}, {0x3, 0x4}, {0x1, 0x5}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x4, 0x5}, {0x7, 0x1}, {0x5}, {0x1, 0x1}, {0x7, 0x4}, {0x0, 0x4}, {0x7, 0x9}, {0x1}, {0x3, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {0x5, 0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x3, 0xa}, {0x4, 0x6}, {0x2, 0x9}, {0x0, 0x4}, {0x1, 0xa}, {0x1, 0x6}, {0x4, 0x7}, {0x1, 0x3}, {0x5, 0x9}, {0x5, 0x7}, {0x2, 0x5}, {0x3, 0x2}, {0x3, 0x8}, {0x3, 0x3}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe0a, 0x7, 0xd3, 0x8, 0x9, 0x100, 0xa77b, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0xd, 0x9, 0x3, 0x0, 0xce, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x80, 0x4, 0x8, 0xea3, 0x0, 0x9, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x16, 0x1, 0xc, 0x4, 0x16, 0x18, 0x12, 0x18, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x340}}, 0x4040000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x2f, 0x21, 0x6, 0xffff, 0x14, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x700, 0x16f, 0x9}}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000005c0)={@local, @local, r4}, 0xc) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r1) (rerun: 64) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r5, 0x508, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x42000}, 0x0) (async, rerun: 64) close_range(r1, r0, 0x0) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xa) ioctl$KVM_CAP_XEN_HVM(r6, 0x4068aea3, &(0x7f0000000740)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x20, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x90) r7 = geteuid() (async, rerun: 64) lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) write$P9_RGETATTR(r1, &(0x7f0000000980)={0xa0, 0x19, 0x1, {0x884, {0x0, 0x1, 0x2}, 0x124, r7, r8, 0x6d0fdffb, 0xef5c, 0x43e, 0x9, 0x6, 0x6, 0x100000001, 0xa, 0x9, 0x4f5d, 0x4, 0x10, 0x4, 0xd08, 0x7fff}}, 0xa0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000a40)={0x1, r1, 0x1}) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000a80)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa4, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x4773b36c00477952}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000c80)={0x3, 0x0, [{0x2, 0x5, 0x0, 0x2, 0xe, 0xff, 0xfffffff9}, {0x4, 0x6, 0x4, 0x3, 0x1ff, 0x10000, 0x401}, {0x7, 0x1, 0x0, 0x1, 0x2, 0x2, 0xafd00}]}) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d40), r1) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x84, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1b}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x40000) getsockopt$SO_J1939_PROMISC(r9, 0x6b, 0x2, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000f40)={0x6, 0x100, 0x4}) r11 = openat$cgroup_freezer_state(r9, &(0x7f0000000f80), 0x2, 0x0) pwritev2(r11, &(0x7f00000022c0)=[{&(0x7f0000000fc0)="37173e89dfdfce579d040e9f2bf2fb181a12929b1849d9a2e85290bb9721383310ea4553e6ce1347913c6c60af24047b2de04ed5764f7cdc818a26dee4730d6de7ac765cc3ede19eedee585c3aa1fc74e1feb04eb064af8d2e6b533f0a610663a2078dae64d3ac932fb72d86fbd58c3099fe655ab1179eec1236df666f5485b7bb199faff55a49aaa487ac4ccce84ea2f729234c24c8b5b691c8a376f5b1ad6cf3a61d1f7c6d003e91386b519b97368fc3607b73469b0c53e2e7500341c03da12a185ef243e8e22286d382585c63", 0xce}, {&(0x7f00000010c0)="fd4e78eb6e95781f889568da2b28b4f729c7fa2d0ada76beb725880b71220da7616d492298fe", 0x26}, {&(0x7f0000001100)="fe68acbe536e9a0d3fe47200c26863023d6cbba60dc4256bafabaaa3cb654d8d3d5ca0c7f78fa610161293d1eb87f0586b8f8a391ec5c988c587c69aeb8c7355ef286c2b5157bb30c3b0e82f233cad96448821d21c537c2d66794591db50100211d7c5f33b771c8a668c3521b81574d2462c53d90878d1fd5e9b518b2c0d7ad8f839becbdabbca98cb59dacb4b9bad42ee24dc5ed59b343d52839283cac2d36c6ef5579d6a4388ac8d0c658a08", 0xad}, {&(0x7f00000011c0)="44a03a86d62c375159927cdb364fc6058f344dec2d88372adc7befd5f7beb5378a426f18c5c1ee139037155149a5966727124e92a56ced8e96dc9286abcf0a84a8eeba4f0f25d154948ba5aef388622702bae8da06a7a67bed66136d15709d921ce03c78a04ece04ae633efc60cd487510e8a95339d683b42a02f716dab37411fe88c642237ac9b7d5bf19e01de50ed6c059d8e5e10df408eb0cf3e1f9d06cb187e0a1f7eaa62bee65521019a9c4ff50e15ab643a0536bbbb6455814e978541fa13ccac10c5589ae267ed60ec4a167048edd4e8b0c19621650456a65d2bd4ae739a85ec346079b186d41a856a7cd26d3", 0xf0}, {&(0x7f00000012c0)="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", 0x1000}], 0x5, 0x1ff, 0xa4c6, 0x2) (async, rerun: 32) ioctl$KDGKBDIACR(r9, 0x4b4a, &(0x7f0000002340)=""/64) (async, rerun: 32) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000003380)={&(0x7f0000002380)=[0x2, 0x68bc, 0x7, 0x6, 0xc8, 0xffffff00, 0x8, 0xb8a, 0x8, 0x9, 0xffff, 0x100, 0x1ff, 0x3ff, 0x400, 0x8, 0x5, 0xe9c4, 0x1, 0x3ff, 0xffff, 0x7fff, 0xdab, 0xe250, 0x1, 0x80000000, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x4, 0x3ff, 0xc, 0x3, 0x0, 0x6, 0x0, 0x1c00, 0x80, 0xc7b, 0x800, 0x0, 0x8, 0x599, 0x5, 0xf6, 0xf8, 0x9, 0x0, 0x9, 0x9, 0x6, 0x70, 0x0, 0x3, 0x4, 0x4, 0xfff, 0xa7c, 0xc, 0xa5, 0x19a, 0x7, 0x1, 0x5caa82a3, 0xa5, 0x6, 0x6b, 0x0, 0xffffff17, 0x7fffffff, 0x4, 0x1, 0x7f, 0x4, 0x3, 0x1, 0xc9, 0x7, 0x80, 0x7, 0x1, 0xf48, 0x0, 0x81, 0x7, 0xfffffff0, 0x8, 0xefd, 0x8, 0xd752, 0x35072ab4, 0xffffffff, 0x2, 0xfff, 0x3, 0x80, 0xfffffff8, 0x0, 0x0, 0x9, 0x225, 0x8b8, 0x81, 0xe, 0x3b, 0x0, 0x9, 0x4, 0x7, 0x1, 0x4, 0x5, 0xfffffffc, 0x3, 0x9, 0x2, 0x1, 0x4, 0x2, 0x5, 0x9, 0xff, 0x200, 0x7, 0xff, 0x9, 0x9, 0xede1, 0x4, 0x0, 0x3, 0x0, 0x2, 0xeb9, 0x8, 0xeb, 0xb, 0x0, 0x9, 0x1000, 0x6, 0x8, 0x6, 0x6, 0xe, 0x8, 0xff, 0x6, 0xc2, 0xffff, 0x4, 0x7, 0xf5, 0x9, 0x5, 0x2, 0x3, 0x81, 0x4, 0x2893, 0xb, 0x230, 0x8, 0x3, 0x1f2, 0xf, 0x2, 0xe, 0xf, 0xffffffff, 0x0, 0x6cfc23d2, 0xff, 0x200, 0xf, 0x7fff, 0x681, 0xb64, 0xa6, 0x6, 0x5, 0x0, 0x8000, 0x951, 0x6, 0x3, 0xa, 0x8, 0x2a, 0x5, 0x6, 0xe3c, 0xf, 0xffffffff, 0x8, 0x9, 0xc, 0x192c, 0xa2000, 0x5, 0x1, 0x5d97a0bd, 0x8, 0x10000, 0xa102687f, 0x6, 0x6, 0x3, 0x400, 0x7, 0x8, 0x0, 0x800, 0x7, 0xff, 0x8, 0x2a73, 0x3, 0x4, 0x7fffffff, 0x8, 0x8, 0xfffffffd, 0x0, 0x80, 0x5f, 0xffffffff, 0x4, 0xffffffff, 0x4a, 0x80000000, 0x5, 0x200, 0xfffffff8, 0xa, 0x1, 0x7, 0x5, 0x7, 0x2, 0x1, 0xdd20, 0xfffffffc, 0x7fffffff, 0x5, 0x100, 0x7f, 0x0, 0x2, 0x9aa6, 0x5, 0x4ed, 0x7fff, 0x0, 0x80000001, 0x2, 0x7, 0x5, 0x1, 0x4, 0x80000000, 0xd, 0x4, 0x1, 0x0, 0x80000001, 0x4, 0xc34, 0x875, 0xc43, 0x5, 0x80, 0x7fff, 0x9fdc, 0xfffffff7, 0x15, 0x8, 0xa8b0, 0x3, 0x62, 0x8, 0x1, 0x6, 0x6, 0x8, 0x8, 0x1, 0x1, 0x5, 0x2, 0x8, 0x2, 0x9, 0x0, 0x18a, 0x1, 0x3000, 0x5b2, 0x400, 0x8053, 0x0, 0xffc00000, 0x9, 0x58, 0x80470000, 0xc0, 0x8d, 0x4, 0x1, 0x9, 0x6, 0xadc, 0x4, 0xf, 0x800, 0x8000, 0x6, 0x4, 0x4, 0x10000, 0x3a, 0x2, 0x8001, 0x1, 0xfffffff8, 0x2, 0x100, 0x7, 0x28000, 0x2, 0x9, 0x9, 0x1000, 0x2, 0x6, 0x4, 0x188, 0x3, 0x2, 0x5, 0xffff, 0x4, 0x6, 0xfffffffe, 0x5, 0x5, 0xffe00000, 0xff, 0x2, 0x8, 0x6, 0x0, 0x4, 0xfffffffd, 0x5e2, 0x8, 0x80008000, 0x8, 0x5, 0xf, 0x71, 0x3, 0x3, 0x8, 0x5, 0x80, 0x0, 0x1ff, 0x0, 0x0, 0x9, 0x5, 0x2, 0x0, 0x101, 0xd1a1, 0xfffffc01, 0x3, 0x5, 0x0, 0x8, 0x200, 0x4e5, 0x5, 0x4, 0xa4ac, 0x100, 0x7f, 0x0, 0xff, 0x5, 0xa8a, 0x4d, 0x100, 0x15b4, 0x80000000, 0x3, 0xe1a2, 0x2, 0x7ff, 0x9, 0x8, 0xffff7fff, 0x6, 0x8c, 0x8, 0x7, 0x862e, 0x1ff, 0x6, 0x80000000, 0x4f, 0x5, 0x6, 0x9, 0x40, 0x0, 0x1000, 0x8, 0x4, 0x4, 0x40, 0x6, 0x5, 0x9, 0xfffffff3, 0xe, 0x5, 0x3, 0x5, 0x10, 0x1, 0x8, 0x100, 0xfffffff7, 0xff, 0x903, 0x220, 0x0, 0x4, 0x499f, 0x10000, 0xc, 0x33f, 0x5b13, 0x7ff, 0x8, 0xe4a, 0x2, 0x8, 0x3, 0x8000, 0xffff, 0x3ff, 0x7f, 0x563, 0x5, 0x1, 0x2, 0x4, 0xfffffe00, 0x3, 0x7, 0x4, 0x1, 0x80000000, 0xa, 0x1, 0xb, 0x200, 0x8, 0x10001, 0x200, 0x2, 0x10, 0x3, 0x1, 0x3, 0x4, 0x9, 0xfffffff5, 0x80, 0x2, 0xbaaf, 0xffff7fff, 0x0, 0x3, 0x1, 0x101, 0x4, 0xfffffffc, 0x7, 0xffff105c, 0xa70, 0xffffffff, 0xffffffff, 0x0, 0x6, 0x7, 0x7, 0x3, 0x8, 0x8000, 0x5, 0x100, 0xa, 0x5, 0x9, 0x1, 0x3ff, 0x9, 0x8000, 0xfffffffa, 0x8, 0x2, 0x4, 0x200, 0xe684, 0x5, 0x6, 0x8, 0x3, 0xc63a, 0x10001, 0x37a, 0x1, 0x5, 0x5, 0x100, 0x7, 0x7, 0xffff, 0x1, 0x200, 0x7, 0x9, 0x9, 0x2, 0xfd3, 0x2, 0x9, 0x4, 0x7, 0x6, 0x59, 0xffffffa1, 0x7ac, 0x5, 0x7, 0x4, 0x6, 0x4e5, 0x1, 0xfffffffc, 0x8, 0x8, 0x8, 0x8, 0x6, 0x8001, 0x7, 0x0, 0x8, 0x9, 0x7f, 0x5, 0x1, 0x1, 0x7fff, 0x8, 0xfffffffa, 0x40, 0x2, 0x5, 0x9, 0x7, 0x0, 0x4, 0x4, 0x3, 0x9, 0xd, 0x537, 0x8, 0x6fdb, 0xfffffffb, 0x5, 0x3, 0x0, 0x5, 0x1, 0x0, 0x101, 0x8, 0x7, 0x4, 0x4, 0x1, 0x9, 0xb6, 0x71f2, 0x7, 0x3, 0x2f29, 0x38a, 0x2, 0x4a, 0x6, 0x8, 0x101, 0x1ff, 0x18a, 0x6, 0x603, 0x400, 0x10, 0xaa, 0x560, 0x2, 0x7755, 0x0, 0xf, 0x3ff, 0x5, 0x5, 0x8, 0x2, 0x5, 0x10001, 0x0, 0x3, 0x0, 0x29, 0xff, 0x6, 0x1, 0xfffffff8, 0x8, 0x2a76, 0x2, 0x4, 0x9, 0x5, 0x8, 0x8, 0x34a8, 0x6, 0x23, 0x6, 0xfffffff7, 0x40, 0x0, 0x9cd, 0x9, 0x6, 0x3, 0x8, 0xe40f, 0x0, 0x5, 0x5, 0x8001, 0x8, 0x3, 0x17, 0x7fff, 0x8, 0x7, 0x0, 0x7, 0x10, 0xf, 0x8, 0x8, 0x6, 0x0, 0x69b, 0x6, 0xd34, 0x7ff, 0x10, 0x4, 0x9, 0xe79, 0xff, 0xc, 0x401, 0x994, 0x5, 0x3, 0x5d, 0xdf, 0x10002000, 0x14, 0x7, 0x4aa3, 0xffffffff, 0x7ff, 0x4, 0x9, 0x81, 0x8, 0x3460000, 0x1, 0x100, 0x8, 0x66b, 0x1c39b8d4, 0x2, 0x6, 0x9, 0x4, 0x80000000, 0x40, 0x1f8, 0x4e6, 0x8, 0x7, 0x1, 0x52, 0x3, 0x3, 0x1, 0x0, 0xb4c9, 0x7fffffff, 0x1, 0xfb6e, 0x4, 0x8, 0x7f, 0x0, 0x0, 0x51, 0x3, 0xff, 0xd41, 0xffffffff, 0x728, 0x0, 0x9, 0x4, 0x6, 0x4, 0x8, 0x0, 0x95, 0x223288fe, 0x3, 0x8, 0x3, 0x9, 0x5, 0x4, 0x1, 0x1, 0x9b, 0x7fff, 0x2, 0x7fffffff, 0x4, 0x3, 0x8000, 0xc, 0x1, 0xffff, 0x3, 0x4, 0x2, 0xc, 0x1, 0x7fffffff, 0xe, 0xf08b, 0x8, 0x6, 0x2, 0x23, 0x40, 0x0, 0x3, 0x0, 0xee, 0x1, 0x1, 0x8000, 0x9f4, 0x4, 0x9, 0x26c4, 0x1, 0xfffffff8, 0xe579, 0x5, 0x6, 0x6, 0x8, 0x5, 0x400, 0xa3ec, 0x0, 0x2, 0x8000000, 0x1, 0x4, 0x1, 0xf, 0x4, 0x8, 0xf2d8, 0xfc8e457, 0x7, 0x3c0f, 0x3, 0x7, 0x7, 0x6, 0x3, 0x4, 0x0, 0x59d, 0x85, 0x100, 0x299, 0x8, 0x10, 0x7, 0x5, 0xc1ac, 0xb9fe, 0x9, 0x1dcc, 0x9, 0x5, 0x9, 0xfffffffe, 0x8, 0xa, 0x2c, 0x9, 0xb26f, 0x9, 0x1000, 0x163f, 0x3, 0x6, 0x5, 0xbd, 0x0, 0x4, 0xc, 0xffff497d, 0x7, 0xd, 0x6f73, 0x1ff, 0x9, 0x2, 0x4, 0x7, 0xffffffff, 0x4d14, 0x52, 0xca, 0x100, 0x3f, 0xc, 0x0, 0x2, 0x4, 0x9, 0x10, 0x1dd, 0x80000000, 0x3, 0x4, 0xe3, 0x2332, 0x81, 0x1, 0x8, 0x3, 0x6, 0x415876b5, 0x5, 0x1, 0x50, 0x9, 0x1ff, 0x2, 0x6, 0x73484651, 0x9, 0x9, 0x10001, 0x7f, 0x4, 0x9, 0x4, 0x9, 0xffffffff, 0x6bc6df06, 0x1, 0x7, 0x2, 0x7f, 0x800, 0x43, 0x40, 0x9, 0x400, 0x62, 0x6, 0x9, 0x72f, 0x4, 0x1000, 0x8, 0x9, 0x3, 0x3, 0xb4, 0x0, 0x57eb, 0x5, 0xf, 0x6, 0xdc, 0x1, 0x6, 0x1000, 0xb, 0x80000000, 0x81, 0x3, 0x4, 0xe0c, 0x0, 0x2, 0x5293, 0x10000, 0x0, 0xb, 0x5, 0x7, 0x526, 0xf, 0x4, 0xff, 0x7, 0x8, 0x400, 0x7fffffff, 0x7f, 0xc, 0x1, 0x1, 0x6, 0x80, 0x6, 0x0, 0x7, 0x8001, 0x78ef, 0x2, 0xaf, 0x3, 0x5, 0x818, 0x10001, 0x1, 0x4, 0xf, 0x2, 0x9, 0xfffffff0, 0x4b31, 0x80000000, 0x5, 0x1, 0x4, 0x80, 0x4, 0x3, 0x7, 0xff, 0x7, 0x5, 0x100, 0x0, 0x76c7, 0x9, 0x3, 0x4, 0xffffffff, 0x4, 0x9, 0xd38, 0x2, 0x3aed, 0x6, 0x10000, 0x5, 0x0, 0xcd0, 0x2, 0x7, 0x9, 0x1, 0x4, 0xfffffcc7, 0x400, 0xff, 0x1, 0x8, 0x4, 0x1000, 0x8, 0x10, 0x300000, 0x6, 0x6], 0x2, 0x400, 0x5}) 1.513775623s ago: executing program 3 (id=1608): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x600}, 0x0) 1.4268538s ago: executing program 3 (id=1609): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="f84ce885b5ebb27c5b52dae00eacbc00", 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) r4 = accept4$alg(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000001dc0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)='V%', 0x2}], 0x1, 0x0, 0x0, 0x40801}], 0x1, 0x800) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)=0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000feffffff004800"/20, @ANYRES32=r1, @ANYBLOB="af1f010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x20005000) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) fdatasync(r5) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="f84ce885b5ebb27c5b52dae00eacbc00", 0x18) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) (async) accept4$alg(r2, 0x0, 0x0, 0x80800) (async) sendmmsg$alg(r4, &(0x7f0000001dc0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)='V%', 0x2}], 0x1, 0x0, 0x0, 0x40801}], 0x1, 0x800) (async) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)=0x2) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000feffffff004800"/20, @ANYRES32=r1, @ANYBLOB="af1f010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x20005000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) fdatasync(r5) (async) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) (async) 1.426761977s ago: executing program 0 (id=1610): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000800), 0x20801) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000840)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x20008080) syz_open_dev$vim2m(0x0, 0x7, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0x1}}, 0x4) 573.09349ms ago: executing program 3 (id=1611): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x418082, 0x0) (async) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x418082, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="9e91896460c807f4f8876fda535f52f73662a7b7514d74cf06c1445589957b6a76721eda6dd7a2", 0x27}], 0x1, 0x5, 0x10001) splice(r0, &(0x7f0000000100)=0x1, r1, &(0x7f0000000140)=0xfffffffffffffffd, 0x8, 0x9) ioctl$BSG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000180)=0x2) (async) ioctl$BSG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000180)=0x2) getsockname$tipc(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10) signalfd(r0, &(0x7f0000000240)={[0x3]}, 0x8) (async) r2 = signalfd(r0, &(0x7f0000000240)={[0x3]}, 0x8) write$uinput_user_dev(r2, &(0x7f0000000280)={'syz0\x00', {0x8, 0x308c, 0x2, 0x1}, 0x37, [0x0, 0x7, 0x6, 0xc, 0x5, 0x30, 0x400, 0x8, 0x3ff, 0x1, 0x80, 0x8, 0x0, 0x77d, 0x4, 0x5, 0xe, 0xfffffffa, 0x1, 0x4, 0x2, 0x1, 0x8000000, 0x5, 0x6, 0x7f, 0x5ceccdaf, 0xfffffffd, 0x7fffffff, 0x2, 0xff, 0x3, 0x9, 0x1, 0x7, 0xfffffff7, 0x10000, 0x0, 0x30a, 0x5, 0x9, 0x3, 0x8, 0x6, 0x4, 0xd4, 0x7, 0x10, 0x4256, 0x100, 0xe, 0xc, 0x1, 0x9, 0x8, 0x7ff, 0x9, 0x859a, 0x5, 0x5, 0x80, 0x40, 0xffff, 0x2], [0xfffffffa, 0x5, 0xd0b, 0x4, 0x100, 0x10, 0x1, 0x5, 0x9, 0xa, 0xfff, 0x8, 0x5, 0x7, 0x9, 0xc, 0x8, 0xea, 0x5, 0xac79, 0x8, 0x5, 0x8001, 0x9, 0x40, 0x8, 0x0, 0x1, 0x7, 0xd, 0xcce3, 0x8, 0x3ff, 0xc4c8, 0x81bf, 0x3, 0x7, 0x5, 0xa02c, 0x1ff, 0x5, 0xfffffffb, 0x1b4, 0x5, 0x1, 0xca29, 0x26, 0x2934, 0x4, 0xffff, 0xef5, 0x2c, 0x5, 0xfff, 0xf9, 0x7, 0x7, 0x5, 0x7, 0x4, 0x7, 0x7, 0x8, 0xc], [0x11e7182, 0x7, 0x8, 0x6, 0x3, 0x80, 0x9, 0x6, 0x9, 0x40, 0x401, 0x3, 0x9, 0xf4, 0x6938, 0x8, 0x6, 0x6, 0x101, 0x5, 0x1, 0x6, 0x2, 0x3, 0x4, 0x5, 0x6, 0x390, 0x8, 0x3, 0x5, 0x37014482, 0x7, 0x5, 0x100, 0x8000, 0x4, 0x9, 0x8, 0x20, 0x70000, 0x3, 0x8, 0x9, 0x7, 0xf0000000, 0x400, 0x2, 0x81, 0xd, 0x2c1, 0x7ff, 0xf, 0xc9f, 0x50c, 0x8, 0x7, 0x8d0a, 0xf, 0x8001, 0x7, 0xfff, 0x8001, 0xc4a], [0x2, 0x6, 0x0, 0x8, 0x8001, 0x9, 0xe, 0x11a450bb, 0xd2, 0x6, 0x7, 0xffffff00, 0x4, 0x80000001, 0x4, 0xa, 0x8, 0x2e2c0, 0x7, 0x3, 0x5, 0x1, 0x7, 0x7fffffff, 0x5, 0xfffffffc, 0x6, 0x0, 0x8401, 0x8001, 0x10, 0x7, 0x7, 0x0, 0x0, 0xa20, 0x372f, 0x400, 0x9, 0x59c5, 0xfd1, 0x3, 0x0, 0x200, 0xec4, 0x0, 0x1ffc00, 0xa03, 0x7, 0x2, 0xd, 0x6, 0x8, 0x149e30db, 0xffff8000, 0x6, 0x46, 0x9, 0x80, 0x5, 0x5132, 0x800, 0x7, 0x80000000]}, 0x45c) (async) write$uinput_user_dev(r2, &(0x7f0000000280)={'syz0\x00', {0x8, 0x308c, 0x2, 0x1}, 0x37, [0x0, 0x7, 0x6, 0xc, 0x5, 0x30, 0x400, 0x8, 0x3ff, 0x1, 0x80, 0x8, 0x0, 0x77d, 0x4, 0x5, 0xe, 0xfffffffa, 0x1, 0x4, 0x2, 0x1, 0x8000000, 0x5, 0x6, 0x7f, 0x5ceccdaf, 0xfffffffd, 0x7fffffff, 0x2, 0xff, 0x3, 0x9, 0x1, 0x7, 0xfffffff7, 0x10000, 0x0, 0x30a, 0x5, 0x9, 0x3, 0x8, 0x6, 0x4, 0xd4, 0x7, 0x10, 0x4256, 0x100, 0xe, 0xc, 0x1, 0x9, 0x8, 0x7ff, 0x9, 0x859a, 0x5, 0x5, 0x80, 0x40, 0xffff, 0x2], [0xfffffffa, 0x5, 0xd0b, 0x4, 0x100, 0x10, 0x1, 0x5, 0x9, 0xa, 0xfff, 0x8, 0x5, 0x7, 0x9, 0xc, 0x8, 0xea, 0x5, 0xac79, 0x8, 0x5, 0x8001, 0x9, 0x40, 0x8, 0x0, 0x1, 0x7, 0xd, 0xcce3, 0x8, 0x3ff, 0xc4c8, 0x81bf, 0x3, 0x7, 0x5, 0xa02c, 0x1ff, 0x5, 0xfffffffb, 0x1b4, 0x5, 0x1, 0xca29, 0x26, 0x2934, 0x4, 0xffff, 0xef5, 0x2c, 0x5, 0xfff, 0xf9, 0x7, 0x7, 0x5, 0x7, 0x4, 0x7, 0x7, 0x8, 0xc], [0x11e7182, 0x7, 0x8, 0x6, 0x3, 0x80, 0x9, 0x6, 0x9, 0x40, 0x401, 0x3, 0x9, 0xf4, 0x6938, 0x8, 0x6, 0x6, 0x101, 0x5, 0x1, 0x6, 0x2, 0x3, 0x4, 0x5, 0x6, 0x390, 0x8, 0x3, 0x5, 0x37014482, 0x7, 0x5, 0x100, 0x8000, 0x4, 0x9, 0x8, 0x20, 0x70000, 0x3, 0x8, 0x9, 0x7, 0xf0000000, 0x400, 0x2, 0x81, 0xd, 0x2c1, 0x7ff, 0xf, 0xc9f, 0x50c, 0x8, 0x7, 0x8d0a, 0xf, 0x8001, 0x7, 0xfff, 0x8001, 0xc4a], [0x2, 0x6, 0x0, 0x8, 0x8001, 0x9, 0xe, 0x11a450bb, 0xd2, 0x6, 0x7, 0xffffff00, 0x4, 0x80000001, 0x4, 0xa, 0x8, 0x2e2c0, 0x7, 0x3, 0x5, 0x1, 0x7, 0x7fffffff, 0x5, 0xfffffffc, 0x6, 0x0, 0x8401, 0x8001, 0x10, 0x7, 0x7, 0x0, 0x0, 0xa20, 0x372f, 0x400, 0x9, 0x59c5, 0xfd1, 0x3, 0x0, 0x200, 0xec4, 0x0, 0x1ffc00, 0xa03, 0x7, 0x2, 0xd, 0x6, 0x8, 0x149e30db, 0xffff8000, 0x6, 0x46, 0x9, 0x80, 0x5, 0x5132, 0x800, 0x7, 0x80000000]}, 0x45c) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000700)={0x2, 0xe5, "7c68e6468ed01bf86258fa629a323996532f47e08a46704ad38d173c421a93f36dcad78aefb2c42b4ba615c0a87a3fbc7235b6142e47c1a409e8fdaa317d1cf479f1a13a1cd2539a3532687d04548f70686e82b35db5f2ac08331d6f8812842aa1c50b1bf15ac04195c2196dd453ffb580a9e09a0666a9f3341d3a9a10d0d1f922ee0af871ee114e1163fa75160e53fd2804709612a00a159d7a2c6b8a40b2bd3e63585d0399d8b1ffb2b25af8c239ee712f5ad7f27a808454c1cac395d8ceda598dc97bfe27702c728c15cf38dc4dfae189cf36817dcd84f4def55033d7d36d5cb5ff858c"}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000800)=0xffffffffffffffff) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000840)=@target={'target ', {'PCI:', 'e', ':', '14', ':', 'e', '.', '8'}}, 0x14) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000880)=0xa) syz_emit_ethernet(0x1e, &(0x7f00000008c0)={@remote, @local, @void, {@can={0xc, {{}, 0x2, 0x1, 0x0, 0x0, "e9ee937b9e0d5221"}}}}, &(0x7f0000000900)={0x0, 0x4, [0x148, 0xeb8, 0xeff, 0xe07]}) ppoll(&(0x7f0000000940)=[{r2, 0x90}, {r2, 0x1}, {0xffffffffffffffff, 0x2}], 0x3, &(0x7f0000000980)={0x77359400}, &(0x7f00000009c0)={[0x5]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000a00)={0x80000016}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000a00)={0x80000016}) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000b00)={0x1, 0x5d95, 0xb0, &(0x7f0000000a40)=""/176}) clock_gettime(0x0, &(0x7f0000000b40)) (async) clock_gettime(0x0, &(0x7f0000000b40)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000b80)=@fd={0x7fff, 0x1, 0x4, 0x1000, 0x2, {r4, r5/1000+10000}, {0x3, 0x1, 0x1, 0x3c, 0x5, 0x1, "418e6f85"}, 0x10, 0x4, {}, 0x6, 0x0, 0xffffffffffffffff}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000c00)={@broadcast, @local, 0x0}, &(0x7f0000000c40)=0xc) sendmsg$can_bcm(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x1d, r7}, 0x10, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x2, 0x208, 0x0, {}, {}, {0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x1}, 0x3c, 0x0, 0x0, 0x0, "c3a5489ddb610ca821b3dcc033e96cf17bcb730a93a2fae65c637682e850569f08da34e8fefce838b35c84448117f5f0896302ebd808df1d417875d9b7122033"}}, 0x80}, 0x1, 0x0, 0x0, 0x20840}, 0x4400c) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000dc0)=0x10000) close_range(r6, r3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e00)={'virt_wifi0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000e00)={'virt_wifi0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000e40)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4c, r8}) syz_open_dev$vim2m(&(0x7f0000000e80), 0x1, 0x2) (async) r9 = syz_open_dev$vim2m(&(0x7f0000000e80), 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000f80)=@multiplanar_mmap={0x1, 0x3, 0x4, 0x4, 0x7, {r10, r11/1000+60000}, {0x4, 0x1, 0x6, 0x0, 0x7, 0x94, "fa06044a"}, 0x9, 0x1, {&(0x7f0000000f00)=[{0x7, 0x80000000, {0x4}, 0x4000}, {0x37, 0xffff, {0x4}, 0x8}]}, 0x0, 0x0, r2}) io_setup(0x7, &(0x7f0000001000)) (async) io_setup(0x7, &(0x7f0000001000)=0x0) io_pgetevents(r12, 0x1ff, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000001080)={0x0, 0x989680}, &(0x7f0000001100)={&(0x7f00000010c0)={[0x400000]}, 0x8}) 572.782938ms ago: executing program 0 (id=1612): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) ioctl$TIOCSBRK(r2, 0x5427) 122.480546ms ago: executing program 2 (id=1583): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 58.242677ms ago: executing program 4 (id=1613): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000000)=[r1], 0x0, 0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x300) 57.785842ms ago: executing program 4 (id=1614): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) socket$inet(0x2, 0x80000, 0xce) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r2, &(0x7f0000000080), 0xffffff1c) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000500)="0000be7f3d1562b4427f8658827f37cdcd87fc62", 0x14) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000080)=[r4, r4, r4], &(0x7f0000000040)=[0x7, 0x8000000000000001, 0x8, 0xfffffffffffffffd], 0x3ffffffffffffda5}) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000714000127bd7000ffdbdf2508004400", @ANYRES32=r5, @ANYBLOB="0800000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000008240), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3a, 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, './file0'}, 0x79) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x489, 0x0, 0xffff}]}) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="015300000000000000fe01"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x2044) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f00000001c0)={r4, r4, 0x1, 0x5, 0x2}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r11 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r11, 0x29, 0x1c, &(0x7f0000000580)={@private1={0xfc, 0x1, '\x00', 0x1}, r12}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r12, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30008804}, 0x200088c0) r13 = socket$unix(0x1, 0x5, 0x0) r14 = dup2(r13, r10) close_range(r14, 0xffffffffffffffff, 0x0) 57.582736ms ago: executing program 2 (id=1615): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)=ANY=[@ANYBLOB="40002a40679f686f806f9bcb33ff098f0000", @ANYRES16=r2, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r1, @ANYBLOB="24000300"/36], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x40, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x40}}, 0x0) 210.143µs ago: executing program 2 (id=1616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000020601010000000000000000010000000c00078005001500efffffff050005000a0000000900020073797a3000f0ff00050004000100000005000100060000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x240040c1}, 0x4008000) 0s ago: executing program 2 (id=1617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf250f0000000c0009800800010005000000040003803c00078008000100400000000c001a0081000000000000000800020001feffff0c0003"], 0x140}, 0x1, 0xe0ffff00000000, 0x0, 0x8000}, 0x4000000) kernel console output (not intermixed with test programs): .137'. [ 60.175320][ T6556] netlink: 68 bytes leftover after parsing attributes in process `syz.2.138'. [ 60.346883][ T6578] netlink: 132 bytes leftover after parsing attributes in process `syz.1.145'. [ 60.362987][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 60.381316][ T6582] loop7: detected capacity change from 0 to 7 [ 60.428841][ T6061] Dev loop7: unable to read RDB block 7 [ 60.430662][ T6061] loop7: unable to read partition table [ 60.432508][ T6061] loop7: partition table beyond EOD, truncated [ 60.476720][ T6582] Dev loop7: unable to read RDB block 7 [ 60.478983][ T6582] loop7: unable to read partition table [ 60.480875][ T6582] loop7: partition table beyond EOD, truncated [ 60.483288][ T6582] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 60.759954][ T6625] overlayfs: failed to resolve './file0': -2 [ 60.762990][ T6626] overlayfs: failed to resolve './file0': -2 [ 60.875894][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 60.975224][ T6655] netlink: 132 bytes leftover after parsing attributes in process `syz.2.176'. [ 61.003187][ T6658] netlink: 224 bytes leftover after parsing attributes in process `syz.2.177'. [ 61.005986][ T6658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 61.009017][ T6658] tipc: Started in network mode [ 61.010679][ T6658] tipc: Node identity fffffe01, cluster identity 64 [ 61.012804][ T6658] tipc: Node number set to 4294966785 [ 61.038385][ T6660] bridge_slave_0: left allmulticast mode [ 61.040495][ T6660] bridge_slave_0: left promiscuous mode [ 61.042415][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.046150][ T6660] bridge_slave_1: left allmulticast mode [ 61.048040][ T6660] bridge_slave_1: left promiscuous mode [ 61.049930][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.054450][ T6660] bond0: (slave bond_slave_0): Releasing backup interface [ 61.058644][ T6660] bond0: (slave bond_slave_1): Releasing backup interface [ 61.062327][ T6660] team0: Port device team_slave_0 removed [ 61.065632][ T6660] team0: Port device team_slave_1 removed [ 61.067902][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.070950][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.076508][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.178'. [ 61.079701][ T6660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.178'. [ 61.083883][ T6660] vlan0: entered promiscuous mode [ 61.182501][ T5973] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 61.184569][ T5973] Bluetooth: Wrong link type (-22) [ 61.323642][ T6724] mkiss: ax0: crc mode is auto. [ 61.338276][ T40] kauditd_printk_skb: 70 callbacks suppressed [ 61.338290][ T40] audit: type=1400 audit(1758277933.051:254): avc: denied { search } for pid=5684 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.347478][ T40] audit: type=1400 audit(1758277933.061:255): avc: denied { search } for pid=5684 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.356587][ T40] audit: type=1400 audit(1758277933.061:256): avc: denied { search } for pid=5684 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.372761][ T40] audit: type=1400 audit(1758277933.061:257): avc: denied { read } for pid=5684 comm="dhcpcd" name="n103" dev="tmpfs" ino=2317 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.381721][ T40] audit: type=1400 audit(1758277933.061:258): avc: denied { open } for pid=5684 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2317 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.383308][ T6724] kvm: pic: non byte write [ 61.393282][ T40] audit: type=1400 audit(1758277933.061:259): avc: denied { getattr } for pid=5684 comm="dhcpcd" path="/run/udev/data/n103" dev="tmpfs" ino=2317 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.405124][ T40] audit: type=1400 audit(1758277933.131:260): avc: denied { create } for pid=6734 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.414288][ T40] audit: type=1400 audit(1758277933.131:261): avc: denied { write } for pid=6734 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.421707][ T40] audit: type=1400 audit(1758277933.131:262): avc: denied { nlmsg_write } for pid=6734 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.458960][ T40] audit: type=1400 audit(1758277933.181:263): avc: denied { load_policy } for pid=6734 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 61.459159][ T6739] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 61.470041][ T6739] SELinux: failed to load policy [ 61.626108][ T6745] IPv6: NLM_F_CREATE should be specified when creating new route [ 62.236885][ T6779] validate_nla: 10 callbacks suppressed [ 62.236901][ T6779] netlink: 'syz.2.200': attribute type 27 has an invalid length. [ 62.242853][ T6779] vlan0: left promiscuous mode [ 62.391319][ T5973] Bluetooth: Frame is too long (len 19, expected len 4) [ 62.541377][ T6804] netlink: 'syz.2.210': attribute type 27 has an invalid length. [ 62.607855][ T6806] capability: warning: `syz.2.211' uses 32-bit capabilities (legacy support in use) [ 62.713846][ T6873] comedi comedi3: comedi_config --init_data is deprecated [ 62.758538][ T6879] IPv6: NLM_F_CREATE should be specified when creating new route [ 62.790640][ T5973] Bluetooth: Frame is too long (len 19, expected len 4) [ 62.907983][ T6906] FAULT_INJECTION: forcing a failure. [ 62.907983][ T6906] name failslab, interval 1, probability 0, space 0, times 0 [ 62.912072][ T6906] CPU: 1 UID: 0 PID: 6906 Comm: syz.1.228 Not tainted syzkaller #0 PREEMPT(full) [ 62.912087][ T6906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.912093][ T6906] Call Trace: [ 62.912097][ T6906] [ 62.912102][ T6906] dump_stack_lvl+0x16c/0x1f0 [ 62.912119][ T6906] should_fail_ex+0x512/0x640 [ 62.912133][ T6906] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 62.912147][ T6906] should_failslab+0xc2/0x120 [ 62.912160][ T6906] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 62.912171][ T6906] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 62.912188][ T6906] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 62.912203][ T6906] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 62.912221][ T6906] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 62.912242][ T6906] mmu_topup_memory_caches+0x25/0x170 [ 62.912254][ T6906] kvm_mmu_load+0xd6/0x23c0 [ 62.912265][ T6906] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 62.912277][ T6906] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 62.912289][ T6906] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 62.912305][ T6906] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 62.912319][ T6906] ? __pfx_kvm_mmu_load+0x10/0x10 [ 62.912329][ T6906] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 62.912346][ T6906] ? kvm_check_and_inject_events+0x71c/0x1310 [ 62.912366][ T6906] vcpu_run+0x35a3/0x55a0 [ 62.912387][ T6906] ? __lock_acquire+0xb97/0x1ce0 [ 62.912416][ T6906] ? __pfx_vcpu_run+0x10/0x10 [ 62.912441][ T6906] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 62.912462][ T6906] ? __local_bh_enable_ip+0xa4/0x120 [ 62.912480][ T6906] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 62.912496][ T6906] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 62.912515][ T6906] kvm_vcpu_ioctl+0x5eb/0x1690 [ 62.912531][ T6906] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 62.912545][ T6906] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 62.912560][ T6906] ? do_vfs_ioctl+0x128/0x14f0 [ 62.912577][ T6906] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 62.912594][ T6906] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 62.912617][ T6906] ? hook_file_ioctl_common+0x145/0x410 [ 62.912632][ T6906] ? selinux_file_ioctl+0x180/0x270 [ 62.912647][ T6906] ? selinux_file_ioctl+0xb4/0x270 [ 62.912664][ T6906] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 62.912678][ T6906] __x64_sys_ioctl+0x18e/0x210 [ 62.912696][ T6906] do_syscall_64+0xcd/0x4e0 [ 62.912712][ T6906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.912722][ T6906] RIP: 0033:0x7fc47ad8ec29 [ 62.912731][ T6906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.912742][ T6906] RSP: 002b:00007fc47bbf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.912752][ T6906] RAX: ffffffffffffffda RBX: 00007fc47afd5fa0 RCX: 00007fc47ad8ec29 [ 62.912759][ T6906] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 62.912765][ T6906] RBP: 00007fc47bbf4090 R08: 0000000000000000 R09: 0000000000000000 [ 62.912771][ T6906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.912777][ T6906] R13: 00007fc47afd6038 R14: 00007fc47afd5fa0 R15: 00007ffd74c32258 [ 62.912790][ T6906] [ 63.030648][ T6919] input: syz1 as /devices/virtual/input/input5 [ 63.075597][ T6932] tipc: Started in network mode [ 63.077907][ T6932] tipc: Node identity fffffe01, cluster identity 64 [ 63.080474][ T6932] tipc: Node number set to 4294966785 [ 63.117917][ T6943] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 63.214082][ T6963] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.257907][ T6981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.286319][ T5973] Bluetooth: Frame is too long (len 19, expected len 4) [ 63.502172][ T7006] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 63.502172][ T7006] The task syz.2.256 (7006) triggered the difference, watch for misbehavior. [ 63.519805][ T7001] kvm: pic: non byte write [ 63.749797][ T7027] tipc: Started in network mode [ 63.751841][ T7027] tipc: Node identity fffffe01, cluster identity 64 [ 63.754445][ T7027] tipc: Node number set to 4294966785 [ 63.893105][ T7044] netlink: 'syz.2.269': attribute type 29 has an invalid length. [ 63.907123][ T7038] netlink: 'syz.2.269': attribute type 29 has an invalid length. [ 64.045482][ T7055] vlan0: entered promiscuous mode [ 64.187547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.217372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.224631][ T7075] input: syz1 as /devices/virtual/input/input6 [ 64.233660][ T7078] syzkaller1: entered promiscuous mode [ 64.235427][ T7078] syzkaller1: entered allmulticast mode [ 64.592597][ T7137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13672 sclass=netlink_route_socket pid=7137 comm=syz.0.290 [ 64.621750][ T7143] fuse: Unknown parameter 'fsuuid' [ 64.652867][ T7146] ip_vti0: entered promiscuous mode [ 64.654971][ T7146] ip_vti0: entered allmulticast mode [ 65.580930][ T7208] __nla_validate_parse: 22 callbacks suppressed [ 65.580946][ T7208] netlink: 224 bytes leftover after parsing attributes in process `syz.2.312'. [ 65.587176][ T7208] netlink: 36 bytes leftover after parsing attributes in process `syz.2.312'. [ 65.587928][ T7214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.313'. [ 65.622089][ T7219] vlan0: entered promiscuous mode [ 65.704403][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 65.898738][ T7268] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 65.964092][ T7281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.338'. [ 65.966809][ T7281] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.016683][ T7291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53416 sclass=netlink_route_socket pid=7291 comm=syz.3.342 [ 66.091546][ T5973] Bluetooth: Frame is too long (len 19, expected len 4) [ 66.150161][ T7319] netlink: 'syz.0.352': attribute type 21 has an invalid length. [ 66.153347][ T7319] netlink: 'syz.0.352': attribute type 6 has an invalid length. [ 66.156407][ T7319] netlink: 132 bytes leftover after parsing attributes in process `syz.0.352'. [ 66.222603][ T7335] netlink: 20 bytes leftover after parsing attributes in process `syz.2.359'. [ 66.226197][ T7335] erspan0: entered promiscuous mode [ 66.230861][ T7337] netlink: 224 bytes leftover after parsing attributes in process `syz.0.358'. [ 66.234786][ T7335] erspan0: entered allmulticast mode [ 66.239441][ T7337] netlink: 36 bytes leftover after parsing attributes in process `syz.0.358'. [ 66.321533][ T7347] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 66.330629][ T7347] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 66.333835][ T7347] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 66.336706][ T7347] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 66.339877][ T7347] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 66.342739][ T7347] kvm: requested 88000 ns i8254 timer period limited to 200000 ns [ 66.345321][ T7347] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 66.348343][ T7347] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 66.350825][ T7347] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 66.353599][ T7347] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 66.454859][ T7364] kvm: pic: non byte write [ 66.481404][ T7379] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 66.488755][ T7377] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 66.537642][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 66.540369][ T7388] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 66.542753][ T7388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 66.601978][ T5973] Bluetooth: Frame is too long (len 19, expected len 4) [ 66.604603][ T7398] process 'syz.0.380' launched './file0' with NULL argv: empty string added [ 66.609371][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 66.609381][ T40] audit: type=1400 audit(1758277938.331:311): avc: denied { execute_no_trans } for pid=7397 comm="syz.0.380" path="/76/file0" dev="tmpfs" ino=420 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.692777][ T7417] fuse: Bad value for 'fd' [ 66.956934][ T7449] overlayfs: empty lowerdir [ 67.203246][ T40] audit: type=1400 audit(1758277938.921:312): avc: denied { bind } for pid=7463 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.490971][ T7478] kvm: pic: non byte write [ 67.626378][ T40] audit: type=1400 audit(1758277939.341:313): avc: denied { create } for pid=7500 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.633121][ T40] audit: type=1400 audit(1758277939.351:314): avc: denied { bind } for pid=7500 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.639352][ T40] audit: type=1400 audit(1758277939.361:315): avc: denied { connect } for pid=7500 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.646226][ T40] audit: type=1400 audit(1758277939.361:316): avc: denied { read } for pid=7500 comm="syz.0.413" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.656570][ T40] audit: type=1400 audit(1758277939.361:317): avc: denied { open } for pid=7500 comm="syz.0.413" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.665987][ T40] audit: type=1400 audit(1758277939.361:318): avc: denied { ioctl } for pid=7500 comm="syz.0.413" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 67.705161][ T40] audit: type=1400 audit(1758277939.421:319): avc: denied { setopt } for pid=7511 comm="syz.2.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.744530][ T40] audit: type=1400 audit(1758277939.461:320): avc: denied { setopt } for pid=7519 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.816964][ T7525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7525 comm=syz.0.423 [ 68.140173][ T7573] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.203127][ T7580] FAULT_INJECTION: forcing a failure. [ 68.203127][ T7580] name failslab, interval 1, probability 0, space 0, times 0 [ 68.206990][ T7580] CPU: 0 UID: 0 PID: 7580 Comm: syz.1.445 Not tainted syzkaller #0 PREEMPT(full) [ 68.207005][ T7580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 68.207012][ T7580] Call Trace: [ 68.207016][ T7580] [ 68.207020][ T7580] dump_stack_lvl+0x16c/0x1f0 [ 68.207038][ T7580] should_fail_ex+0x512/0x640 [ 68.207053][ T7580] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 68.207067][ T7580] should_failslab+0xc2/0x120 [ 68.207079][ T7580] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 68.207090][ T7580] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 68.207106][ T7580] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 68.207121][ T7580] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 68.207140][ T7580] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 68.207160][ T7580] mmu_topup_memory_caches+0x25/0x170 [ 68.207173][ T7580] kvm_mmu_load+0xd6/0x23c0 [ 68.207195][ T7580] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 68.207209][ T7580] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 68.207222][ T7580] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 68.207238][ T7580] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 68.207251][ T7580] ? __pfx_kvm_mmu_load+0x10/0x10 [ 68.207261][ T7580] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 68.207278][ T7580] ? kvm_check_and_inject_events+0x71c/0x1310 [ 68.207296][ T7580] vcpu_run+0x35a3/0x55a0 [ 68.207311][ T7580] ? __lock_acquire+0xb97/0x1ce0 [ 68.207332][ T7580] ? __pfx_vcpu_run+0x10/0x10 [ 68.207349][ T7580] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 68.207364][ T7580] ? __local_bh_enable_ip+0xa4/0x120 [ 68.207380][ T7580] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 68.207395][ T7580] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 68.207415][ T7580] kvm_vcpu_ioctl+0x5eb/0x1690 [ 68.207431][ T7580] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.207445][ T7580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.207459][ T7580] ? do_vfs_ioctl+0x128/0x14f0 [ 68.207476][ T7580] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 68.207493][ T7580] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 68.207514][ T7580] ? hook_file_ioctl_common+0x145/0x410 [ 68.207530][ T7580] ? selinux_file_ioctl+0x180/0x270 [ 68.207545][ T7580] ? selinux_file_ioctl+0xb4/0x270 [ 68.207565][ T7580] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 68.207579][ T7580] __x64_sys_ioctl+0x18e/0x210 [ 68.207597][ T7580] do_syscall_64+0xcd/0x4e0 [ 68.207613][ T7580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.207624][ T7580] RIP: 0033:0x7fc47ad8ec29 [ 68.207632][ T7580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.207642][ T7580] RSP: 002b:00007fc47bbf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.207653][ T7580] RAX: ffffffffffffffda RBX: 00007fc47afd5fa0 RCX: 00007fc47ad8ec29 [ 68.207659][ T7580] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 68.207666][ T7580] RBP: 00007fc47bbf4090 R08: 0000000000000000 R09: 0000000000000000 [ 68.207672][ T7580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 68.207678][ T7580] R13: 00007fc47afd6038 R14: 00007fc47afd5fa0 R15: 00007ffd74c32258 [ 68.207691][ T7580] [ 68.320776][ C0] vkms_vblank_simulate: vblank timer overrun [ 68.466834][ T7604] netlink: 'syz.2.452': attribute type 21 has an invalid length. [ 68.472173][ T7604] netlink: 'syz.2.452': attribute type 6 has an invalid length. [ 68.601077][ T7612] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 68.604963][ T7612] block device autoloading is deprecated and will be removed. [ 68.937457][ T5974] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.941947][ T5974] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.945379][ T5974] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.950291][ T5974] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.953773][ T5974] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.158895][ T7634] chnl_net:caif_netlink_parms(): no params data found [ 69.264433][ T12] bridge_slave_1: left allmulticast mode [ 69.270443][ T12] bridge_slave_1: left promiscuous mode [ 69.274443][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.283285][ T12] bridge_slave_0: left allmulticast mode [ 69.285112][ T12] bridge_slave_0: left promiscuous mode [ 69.287141][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.359415][ T5973] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 69.367538][ T5973] Bluetooth: hci0: command 0x1407 tx timeout [ 69.505964][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.509725][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.512814][ T12] bond0 (unregistering): Released all slaves [ 69.592677][ T12] tipc: Left network mode [ 69.629271][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.632334][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.635282][ T7634] bridge_slave_0: entered allmulticast mode [ 69.639750][ T7634] bridge_slave_0: entered promiscuous mode [ 69.644906][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.648018][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.650921][ T7634] bridge_slave_1: entered allmulticast mode [ 69.654604][ T7634] bridge_slave_1: entered promiscuous mode [ 69.669236][ T5973] Bluetooth: Frame is too long (len 19, expected len 4) [ 69.794958][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.806546][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.890372][ T7634] team0: Port device team_slave_0 added [ 69.902993][ T7634] team0: Port device team_slave_1 added [ 69.980185][ T12] hsr_slave_0: left promiscuous mode [ 69.982525][ T12] hsr_slave_1: left promiscuous mode [ 69.984545][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.988922][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.012719][ T8345] snd_dummy snd_dummy.0: control 3:65535:412554035:syz0:2 is already present [ 70.500559][ T12] team0 (unregistering): Port device team_slave_1 removed [ 70.539537][ T8360] netlink: 'syz.0.473': attribute type 5 has an invalid length. [ 70.561352][ T12] team0 (unregistering): Port device team_slave_0 removed [ 70.953189][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.957269][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.965211][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.969621][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.971742][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.979548][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.037365][ T5973] Bluetooth: hci2: command tx timeout [ 71.071529][ T7634] hsr_slave_0: entered promiscuous mode [ 71.074452][ T7634] hsr_slave_1: entered promiscuous mode [ 71.319388][ T7634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.324055][ T7634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.329996][ T7634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.334570][ T7634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.411174][ T7634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.442195][ T7634] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.452459][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.455376][ T6542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.465867][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.468869][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.497283][ T53] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.619589][ T40] kauditd_printk_skb: 21547 callbacks suppressed [ 71.619604][ T40] audit: type=1326 audit(1758277943.331:21868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7638ec29 code=0x50000 [ 71.640325][ T40] audit: type=1326 audit(1758277943.351:21869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7638ec29 code=0x50000 [ 71.649826][ T40] audit: type=1326 audit(1758277943.351:21870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7638ec29 code=0x50000 [ 71.651746][ T53] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 71.659089][ T40] audit: type=1326 audit(1758277943.351:21871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7638ec29 code=0x50000 [ 71.659129][ T40] audit: type=1326 audit(1758277943.351:21872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7638ec29 code=0x50000 [ 71.659164][ T40] audit: type=1326 audit(1758277943.351:21873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7638ec29 code=0x50000 [ 71.670328][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.672770][ T40] audit: type=1326 audit(1758277943.351:21874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7638ec29 code=0x50000 [ 71.681262][ T53] usb 5-1: Product: syz [ 71.703827][ T53] usb 5-1: Manufacturer: syz [ 71.705865][ T53] usb 5-1: SerialNumber: syz [ 71.710658][ T40] audit: type=1326 audit(1758277943.351:21875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7638ec29 code=0x50000 [ 71.719770][ T7634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.720040][ T40] audit: type=1326 audit(1758277943.351:21876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7638ec29 code=0x50000 [ 71.729292][ T8752] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 71.732063][ T40] audit: type=1326 audit(1758277943.351:21877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.2.464" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d7638ec29 code=0x50000 [ 71.833972][ T8762] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 71.923166][ T8694] overlayfs: missing 'lowerdir' [ 71.936797][ T7634] veth0_vlan: entered promiscuous mode [ 71.943251][ T8771] __nla_validate_parse: 9 callbacks suppressed [ 71.943260][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.487'. [ 71.945417][ T7634] veth1_vlan: entered promiscuous mode [ 71.976630][ T8776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.488'. [ 71.983582][ T7634] veth0_macvtap: entered promiscuous mode [ 71.992368][ T7634] veth1_macvtap: entered promiscuous mode [ 71.997891][ T53] rtl8150 5-1:1.0: couldn't reset the device [ 72.000602][ T53] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 72.002904][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.008305][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.012414][ T53] usb 5-1: USB disconnect, device number 2 [ 72.020540][ T6527] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.023304][ T6527] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.026600][ T6527] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.031013][ T6527] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.054584][ T8784] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 72.065195][ T8784] CIFS mount error: No usable UNC path provided in device string! [ 72.065195][ T8784] [ 72.072059][ T8784] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 72.080366][ T6527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.082713][ T6527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.100690][ T6527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.103586][ T6527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.257973][ T8825] input: syz1 as /devices/virtual/input/input7 [ 72.260793][ T8825] input: failed to attach handler leds to device input7, error: -6 [ 72.349577][ T5973] Bluetooth: Frame is too long (len 19, expected len 4) [ 72.419708][ T8841] netlink: 224 bytes leftover after parsing attributes in process `syz.3.500'. [ 72.422596][ T8841] netlink: 'syz.3.500': attribute type 3 has an invalid length. [ 72.552744][ T8867] netlink: 'syz.0.509': attribute type 21 has an invalid length. [ 72.555566][ T8867] netlink: 'syz.0.509': attribute type 6 has an invalid length. [ 72.560301][ T8867] netlink: 132 bytes leftover after parsing attributes in process `syz.0.509'. [ 72.760720][ T5973] Bluetooth: Frame is too long (len 19, expected len 4) [ 72.769190][ T5973] Bluetooth: hci3: SCO packet for unknown connection handle 1 [ 72.829155][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.523'. [ 72.857036][ T8916] netlink: 'syz.4.525': attribute type 27 has an invalid length. [ 72.893403][ T8916] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.896899][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.947080][ T8919] kvm: pic: non byte write [ 72.975912][ T8916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.985665][ T8916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.091463][ T8942] netlink: 96 bytes leftover after parsing attributes in process `syz.2.533'. [ 73.099496][ T8923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.103862][ T8923] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.111341][ T8923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.117567][ T5973] Bluetooth: hci2: command tx timeout [ 73.123710][ T6525] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.128896][ T6525] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.135993][ T6525] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.139294][ T6525] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.209190][ T8957] FAULT_INJECTION: forcing a failure. [ 73.209190][ T8957] name failslab, interval 1, probability 0, space 0, times 0 [ 73.213339][ T8957] CPU: 0 UID: 0 PID: 8957 Comm: syz.3.539 Not tainted syzkaller #0 PREEMPT(full) [ 73.213353][ T8957] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.213360][ T8957] Call Trace: [ 73.213365][ T8957] [ 73.213369][ T8957] dump_stack_lvl+0x16c/0x1f0 [ 73.213403][ T8957] should_fail_ex+0x512/0x640 [ 73.213422][ T8957] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 73.213436][ T8957] should_failslab+0xc2/0x120 [ 73.213449][ T8957] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 73.213460][ T8957] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 73.213481][ T8957] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 73.213496][ T8957] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 73.213515][ T8957] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 73.213536][ T8957] mmu_topup_memory_caches+0x25/0x170 [ 73.213549][ T8957] kvm_mmu_load+0xd6/0x23c0 [ 73.213560][ T8957] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 73.213572][ T8957] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 73.213585][ T8957] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 73.213601][ T8957] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 73.213614][ T8957] ? __pfx_kvm_mmu_load+0x10/0x10 [ 73.213624][ T8957] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 73.213642][ T8957] ? kvm_check_and_inject_events+0x71c/0x1310 [ 73.213660][ T8957] vcpu_run+0x35a3/0x55a0 [ 73.213675][ T8957] ? __lock_acquire+0xb97/0x1ce0 [ 73.213696][ T8957] ? __pfx_vcpu_run+0x10/0x10 [ 73.213713][ T8957] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 73.213728][ T8957] ? __local_bh_enable_ip+0xa4/0x120 [ 73.213745][ T8957] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 73.213760][ T8957] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 73.213779][ T8957] kvm_vcpu_ioctl+0x5eb/0x1690 [ 73.213796][ T8957] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.213810][ T8957] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.213824][ T8957] ? do_vfs_ioctl+0x128/0x14f0 [ 73.213841][ T8957] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 73.213858][ T8957] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.213880][ T8957] ? hook_file_ioctl_common+0x145/0x410 [ 73.213895][ T8957] ? selinux_file_ioctl+0x180/0x270 [ 73.213910][ T8957] ? selinux_file_ioctl+0xb4/0x270 [ 73.213927][ T8957] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.213942][ T8957] __x64_sys_ioctl+0x18e/0x210 [ 73.213959][ T8957] do_syscall_64+0xcd/0x4e0 [ 73.213980][ T8957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.213996][ T8957] RIP: 0033:0x7fae0278ec29 [ 73.214010][ T8957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.214024][ T8957] RSP: 002b:00007fae03704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.214041][ T8957] RAX: ffffffffffffffda RBX: 00007fae029d5fa0 RCX: 00007fae0278ec29 [ 73.214053][ T8957] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 73.214064][ T8957] RBP: 00007fae03704090 R08: 0000000000000000 R09: 0000000000000000 [ 73.214074][ T8957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.214084][ T8957] R13: 00007fae029d6038 R14: 00007fae029d5fa0 R15: 00007fffb7c86358 [ 73.214108][ T8957] [ 73.239226][ T8973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.543'. [ 73.264549][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'. [ 73.380244][ T8985] netlink: 'syz.2.547': attribute type 29 has an invalid length. [ 73.393131][ T8991] netlink: 224 bytes leftover after parsing attributes in process `syz.3.548'. [ 73.395875][ T8991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.548'. [ 73.715701][ T9056] FAULT_INJECTION: forcing a failure. [ 73.715701][ T9056] name failslab, interval 1, probability 0, space 0, times 0 [ 73.721310][ T9056] CPU: 3 UID: 0 PID: 9056 Comm: syz.0.571 Not tainted syzkaller #0 PREEMPT(full) [ 73.721331][ T9056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.721341][ T9056] Call Trace: [ 73.721346][ T9056] [ 73.721353][ T9056] dump_stack_lvl+0x16c/0x1f0 [ 73.721379][ T9056] should_fail_ex+0x512/0x640 [ 73.721398][ T9056] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 73.721416][ T9056] should_failslab+0xc2/0x120 [ 73.721432][ T9056] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 73.721447][ T9056] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 73.721469][ T9056] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 73.721491][ T9056] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 73.721519][ T9056] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 73.721544][ T9056] mmu_topup_memory_caches+0x25/0x170 [ 73.721564][ T9056] kvm_mmu_load+0xd6/0x23c0 [ 73.721580][ T9056] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 73.721598][ T9056] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 73.721617][ T9056] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 73.721639][ T9056] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 73.721656][ T9056] ? __pfx_kvm_mmu_load+0x10/0x10 [ 73.721669][ T9056] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 73.721694][ T9056] ? kvm_check_and_inject_events+0x71c/0x1310 [ 73.721721][ T9056] vcpu_run+0x35a3/0x55a0 [ 73.721748][ T9056] ? __lock_acquire+0xb97/0x1ce0 [ 73.721774][ T9056] ? __pfx_vcpu_run+0x10/0x10 [ 73.721799][ T9056] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 73.721819][ T9056] ? __local_bh_enable_ip+0xa4/0x120 [ 73.721844][ T9056] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 73.721865][ T9056] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 73.721891][ T9056] kvm_vcpu_ioctl+0x5eb/0x1690 [ 73.721912][ T9056] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.721934][ T9056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 73.721955][ T9056] ? do_vfs_ioctl+0x128/0x14f0 [ 73.721979][ T9056] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 73.722003][ T9056] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 73.722032][ T9056] ? hook_file_ioctl_common+0x145/0x410 [ 73.722056][ T9056] ? selinux_file_ioctl+0x180/0x270 [ 73.722078][ T9056] ? selinux_file_ioctl+0xb4/0x270 [ 73.722101][ T9056] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 73.722121][ T9056] __x64_sys_ioctl+0x18e/0x210 [ 73.722143][ T9056] do_syscall_64+0xcd/0x4e0 [ 73.722167][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.722182][ T9056] RIP: 0033:0x7f0c3338ec29 [ 73.722195][ T9056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.722210][ T9056] RSP: 002b:00007f0c34226038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.722225][ T9056] RAX: ffffffffffffffda RBX: 00007f0c335d5fa0 RCX: 00007f0c3338ec29 [ 73.722236][ T9056] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 73.722242][ T9056] RBP: 00007f0c34226090 R08: 0000000000000000 R09: 0000000000000000 [ 73.722249][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.722258][ T9056] R13: 00007f0c335d6038 R14: 00007f0c335d5fa0 R15: 00007ffe58dd2c78 [ 73.722281][ T9056] [ 73.846266][ C3] vkms_vblank_simulate: vblank timer overrun [ 74.038878][ T9161] validate_nla: 2 callbacks suppressed [ 74.038889][ T9161] netlink: 'syz.0.579': attribute type 21 has an invalid length. [ 74.043320][ T9161] netlink: 'syz.0.579': attribute type 6 has an invalid length. [ 74.314208][ T9201] FAULT_INJECTION: forcing a failure. [ 74.314208][ T9201] name failslab, interval 1, probability 0, space 0, times 0 [ 74.321745][ T9201] CPU: 1 UID: 0 PID: 9201 Comm: syz.4.592 Not tainted syzkaller #0 PREEMPT(full) [ 74.321766][ T9201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.321775][ T9201] Call Trace: [ 74.321780][ T9201] [ 74.321787][ T9201] dump_stack_lvl+0x16c/0x1f0 [ 74.321812][ T9201] should_fail_ex+0x512/0x640 [ 74.321831][ T9201] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 74.321850][ T9201] should_failslab+0xc2/0x120 [ 74.321868][ T9201] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 74.321882][ T9201] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 74.321906][ T9201] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 74.321927][ T9201] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 74.321954][ T9201] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 74.321983][ T9201] mmu_topup_memory_caches+0x25/0x170 [ 74.322001][ T9201] kvm_mmu_load+0xd6/0x23c0 [ 74.322017][ T9201] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 74.322033][ T9201] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 74.322051][ T9201] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 74.322075][ T9201] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 74.322096][ T9201] ? __pfx_kvm_mmu_load+0x10/0x10 [ 74.322111][ T9201] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 74.322136][ T9201] ? kvm_check_and_inject_events+0x71c/0x1310 [ 74.322163][ T9201] vcpu_run+0x35a3/0x55a0 [ 74.322186][ T9201] ? __lock_acquire+0xb97/0x1ce0 [ 74.322219][ T9201] ? __pfx_vcpu_run+0x10/0x10 [ 74.322246][ T9201] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 74.322268][ T9201] ? __local_bh_enable_ip+0xa4/0x120 [ 74.322294][ T9201] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 74.322317][ T9201] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 74.322348][ T9201] kvm_vcpu_ioctl+0x5eb/0x1690 [ 74.322374][ T9201] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 74.322397][ T9201] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.322419][ T9201] ? do_vfs_ioctl+0x128/0x14f0 [ 74.322447][ T9201] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 74.322480][ T9201] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 74.322515][ T9201] ? hook_file_ioctl_common+0x145/0x410 [ 74.322540][ T9201] ? selinux_file_ioctl+0x180/0x270 [ 74.322561][ T9201] ? selinux_file_ioctl+0xb4/0x270 [ 74.322585][ T9201] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 74.322607][ T9201] __x64_sys_ioctl+0x18e/0x210 [ 74.322633][ T9201] do_syscall_64+0xcd/0x4e0 [ 74.322657][ T9201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.322674][ T9201] RIP: 0033:0x7fd665d8ec29 [ 74.322691][ T9201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.322707][ T9201] RSP: 002b:00007fd666cea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.322724][ T9201] RAX: ffffffffffffffda RBX: 00007fd665fd5fa0 RCX: 00007fd665d8ec29 [ 74.322735][ T9201] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 74.322744][ T9201] RBP: 00007fd666cea090 R08: 0000000000000000 R09: 0000000000000000 [ 74.322755][ T9201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.322766][ T9201] R13: 00007fd665fd6038 R14: 00007fd665fd5fa0 R15: 00007ffcf2f26168 [ 74.322789][ T9201] [ 74.750092][ T9230] FAULT_INJECTION: forcing a failure. [ 74.750092][ T9230] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.755252][ T9230] CPU: 1 UID: 0 PID: 9230 Comm: syz.4.599 Not tainted syzkaller #0 PREEMPT(full) [ 74.755276][ T9230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.755286][ T9230] Call Trace: [ 74.755292][ T9230] [ 74.755299][ T9230] dump_stack_lvl+0x16c/0x1f0 [ 74.755326][ T9230] should_fail_ex+0x512/0x640 [ 74.755352][ T9230] _copy_from_user+0x2e/0xd0 [ 74.755378][ T9230] copy_msghdr_from_user+0x98/0x160 [ 74.755401][ T9230] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 74.755433][ T9230] ___sys_sendmsg+0xfe/0x1d0 [ 74.755456][ T9230] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.755505][ T9230] __sys_sendmsg+0x16d/0x220 [ 74.755527][ T9230] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.755566][ T9230] do_syscall_64+0xcd/0x4e0 [ 74.755589][ T9230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.755605][ T9230] RIP: 0033:0x7fd665d8ec29 [ 74.755617][ T9230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.755631][ T9230] RSP: 002b:00007fd666cea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.755647][ T9230] RAX: ffffffffffffffda RBX: 00007fd665fd5fa0 RCX: 00007fd665d8ec29 [ 74.755658][ T9230] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 74.755668][ T9230] RBP: 00007fd666cea090 R08: 0000000000000000 R09: 0000000000000000 [ 74.755677][ T9230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.755688][ T9230] R13: 00007fd665fd6038 R14: 00007fd665fd5fa0 R15: 00007ffcf2f26168 [ 74.755711][ T9230] [ 74.974738][ T5973] Bluetooth: Frame is too long (len 19, expected len 4) [ 74.979659][ T5973] Bluetooth: hci2: SCO packet for unknown connection handle 1 [ 75.197449][ T5973] Bluetooth: hci2: command tx timeout [ 75.238264][ T9291] FAULT_INJECTION: forcing a failure. [ 75.238264][ T9291] name failslab, interval 1, probability 0, space 0, times 0 [ 75.242325][ T9291] CPU: 2 UID: 0 PID: 9291 Comm: syz.0.621 Not tainted syzkaller #0 PREEMPT(full) [ 75.242340][ T9291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.242347][ T9291] Call Trace: [ 75.242351][ T9291] [ 75.242355][ T9291] dump_stack_lvl+0x16c/0x1f0 [ 75.242375][ T9291] should_fail_ex+0x512/0x640 [ 75.242390][ T9291] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 75.242403][ T9291] should_failslab+0xc2/0x120 [ 75.242416][ T9291] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 75.242426][ T9291] ? __kvm_mmu_topup_memory_cache+0x450/0x600 [ 75.242443][ T9291] ? kvm_hv_setup_tsc_page+0x29a/0x8d0 [ 75.242458][ T9291] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 75.242482][ T9291] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 75.242512][ T9291] mmu_topup_memory_caches+0x25/0x170 [ 75.242528][ T9291] kvm_mmu_load+0xd6/0x23c0 [ 75.242539][ T9291] ? kvm_apic_has_interrupt+0x106/0x1f0 [ 75.242551][ T9291] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 75.242569][ T9291] ? __pfx_vmx_flush_tlb_guest+0x10/0x10 [ 75.242585][ T9291] ? __pfx_kvm_guest_time_update+0x10/0x10 [ 75.242599][ T9291] ? __pfx_kvm_mmu_load+0x10/0x10 [ 75.242609][ T9291] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 75.242626][ T9291] ? kvm_check_and_inject_events+0x71c/0x1310 [ 75.242644][ T9291] vcpu_run+0x35a3/0x55a0 [ 75.242661][ T9291] ? __lock_acquire+0xb97/0x1ce0 [ 75.242684][ T9291] ? __pfx_vcpu_run+0x10/0x10 [ 75.242701][ T9291] ? fpu_swap_kvm_fpstate+0x1be/0x410 [ 75.242716][ T9291] ? __local_bh_enable_ip+0xa4/0x120 [ 75.242733][ T9291] ? kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 75.242748][ T9291] kvm_arch_vcpu_ioctl_run+0x1023/0x1980 [ 75.242768][ T9291] kvm_vcpu_ioctl+0x5eb/0x1690 [ 75.242785][ T9291] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.242800][ T9291] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.242815][ T9291] ? do_vfs_ioctl+0x128/0x14f0 [ 75.242833][ T9291] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 75.242850][ T9291] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 75.242872][ T9291] ? hook_file_ioctl_common+0x145/0x410 [ 75.242888][ T9291] ? selinux_file_ioctl+0x180/0x270 [ 75.242903][ T9291] ? selinux_file_ioctl+0xb4/0x270 [ 75.242920][ T9291] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 75.242935][ T9291] __x64_sys_ioctl+0x18e/0x210 [ 75.242953][ T9291] do_syscall_64+0xcd/0x4e0 [ 75.242969][ T9291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.242980][ T9291] RIP: 0033:0x7f0c3338ec29 [ 75.242989][ T9291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.243000][ T9291] RSP: 002b:00007f0c34226038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.243011][ T9291] RAX: ffffffffffffffda RBX: 00007f0c335d5fa0 RCX: 00007f0c3338ec29 [ 75.243018][ T9291] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 75.243024][ T9291] RBP: 00007f0c34226090 R08: 0000000000000000 R09: 0000000000000000 [ 75.243030][ T9291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.243037][ T9291] R13: 00007f0c335d6038 R14: 00007f0c335d5fa0 R15: 00007ffe58dd2c78 [ 75.243051][ T9291] [ 75.457990][ T9313] netlink: 'syz.0.627': attribute type 21 has an invalid length. [ 75.461414][ T9313] netlink: 'syz.0.627': attribute type 6 has an invalid length. [ 75.505311][ T9320] random: crng reseeded on system resumption [ 75.575125][ T9332] netlink: 'syz.3.634': attribute type 1 has an invalid length. [ 75.780591][ T9346] fuse: Bad value for 'fd' [ 75.822928][ T9282] syz.4.613 (9282): drop_caches: 2 [ 76.008153][ T9375] overlayfs: invalid origin (0000) [ 76.045133][ T9387] netlink: 'syz.0.656': attribute type 21 has an invalid length. [ 76.045368][ T9386] erspan0: vlans aren't supported yet for dev_uc|mc_add() [ 76.050063][ T9387] netlink: 'syz.0.656': attribute type 6 has an invalid length. [ 76.085525][ T9390] dlm: Unknown command passed to DLM device : 255 [ 76.085525][ T9390] [ 76.276391][ T9427] netlink: 'syz.2.668': attribute type 4 has an invalid length. [ 76.283891][ T9427] netlink: 'syz.2.668': attribute type 4 has an invalid length. [ 76.384354][ T9447] futex_wake_op: syz.4.674 tries to shift op by 32; fix this program [ 76.453729][ T9457] ip_vti0: entered promiscuous mode [ 76.456211][ T9457] ip_vti0: entered allmulticast mode [ 76.492114][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.494890][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.497046][ T9462] tipc: Started in network mode [ 76.499643][ T9462] tipc: Node identity fefffe01, cluster identity 64 [ 76.502424][ T9462] tipc: Node number set to 4278189569 [ 76.526807][ T9465] fuse: Bad value for 'fd' [ 76.602899][ T5973] Bluetooth: Unexpected start frame (len 19) [ 76.604883][ T5973] Bluetooth: Frame is too long (len 19, expected len 4) [ 76.713483][ T9491] FAULT_INJECTION: forcing a failure. [ 76.713483][ T9491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.717568][ T9491] CPU: 0 UID: 0 PID: 9491 Comm: syz.4.689 Not tainted syzkaller #0 PREEMPT(full) [ 76.717582][ T9491] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.717589][ T9491] Call Trace: [ 76.717594][ T9491] [ 76.717598][ T9491] dump_stack_lvl+0x16c/0x1f0 [ 76.717615][ T9491] should_fail_ex+0x512/0x640 [ 76.717632][ T9491] _copy_from_iter+0x29f/0x1720 [ 76.717650][ T9491] ? __alloc_skb+0x200/0x380 [ 76.717664][ T9491] ? __pfx__copy_from_iter+0x10/0x10 [ 76.717681][ T9491] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 76.717700][ T9491] netlink_sendmsg+0x829/0xdd0 [ 76.717717][ T9491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.717737][ T9491] ____sys_sendmsg+0xa98/0xc70 [ 76.717754][ T9491] ? copy_msghdr_from_user+0x10a/0x160 [ 76.717768][ T9491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.717791][ T9491] ___sys_sendmsg+0x134/0x1d0 [ 76.717805][ T9491] ? __pfx____sys_sendmsg+0x10/0x10 [ 76.717834][ T9491] __sys_sendmsg+0x16d/0x220 [ 76.717848][ T9491] ? __pfx___sys_sendmsg+0x10/0x10 [ 76.717866][ T9491] ? fput+0x9b/0xd0 [ 76.717883][ T9491] do_syscall_64+0xcd/0x4e0 [ 76.717899][ T9491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.717910][ T9491] RIP: 0033:0x7fd665d8ec29 [ 76.717919][ T9491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.717929][ T9491] RSP: 002b:00007fd666cea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.717940][ T9491] RAX: ffffffffffffffda RBX: 00007fd665fd5fa0 RCX: 00007fd665d8ec29 [ 76.717947][ T9491] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 76.717953][ T9491] RBP: 00007fd666cea090 R08: 0000000000000000 R09: 0000000000000000 [ 76.717959][ T9491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.717966][ T9491] R13: 00007fd665fd6038 R14: 00007fd665fd5fa0 R15: 00007ffcf2f26168 [ 76.717979][ T9491] [ 76.795174][ T9484] openvswitch: netlink: Message has 24 unknown bytes. [ 76.805073][ T9484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.818265][ T40] kauditd_printk_skb: 1572 callbacks suppressed [ 76.818275][ T40] audit: type=1400 audit(1758277948.541:23450): avc: denied { ioctl } for pid=9479 comm="syz.0.687" path="socket:[20889]" dev="sockfs" ino=20889 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 76.909413][ T9497] vlan0: entered promiscuous mode [ 77.061711][ T9525] netlink: 'syz.3.700': attribute type 64 has an invalid length. [ 77.064118][ T9525] __nla_validate_parse: 23 callbacks suppressed [ 77.064126][ T9525] netlink: 152 bytes leftover after parsing attributes in process `syz.3.700'. [ 77.151995][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 77.212773][ T9537] kvm: pic: non byte write [ 77.224984][ T9548] netlink: 224 bytes leftover after parsing attributes in process `syz.2.704'. [ 77.228094][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.704'. [ 77.277331][ T5973] Bluetooth: hci2: command tx timeout [ 77.436475][ T5973] Bluetooth: hci0: ACL packet for unknown connection handle 232 [ 77.609651][ T40] audit: type=1400 audit(1758277949.331:23451): avc: denied { getopt } for pid=9603 comm="syz.2.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 77.690797][ T40] audit: type=1400 audit(1758277949.411:23452): avc: denied { create } for pid=9614 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.698821][ T40] audit: type=1400 audit(1758277949.411:23453): avc: denied { getopt } for pid=9614 comm="syz.0.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.744219][ T9620] netlink: 20 bytes leftover after parsing attributes in process `syz.0.729'. [ 77.748851][ T9620] ip_vti0: entered promiscuous mode [ 77.751051][ T9620] ip_vti0: entered allmulticast mode [ 77.785794][ T9622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.730'. [ 77.826206][ T5973] Bluetooth: Frame is too long (len 19, expected len 4) [ 77.846310][ T40] audit: type=1400 audit(1758277949.561:23454): avc: denied { read } for pid=9630 comm="syz.0.734" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 77.854664][ T40] audit: type=1400 audit(1758277949.561:23455): avc: denied { open } for pid=9630 comm="syz.0.734" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 77.980644][ T40] audit: type=1400 audit(1758277949.701:23456): avc: denied { write } for pid=9646 comm="syz.0.740" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 77.990692][ T40] audit: type=1400 audit(1758277949.701:23457): avc: denied { append } for pid=9646 comm="syz.0.740" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 78.106901][ T40] audit: type=1400 audit(1758277949.821:23458): avc: denied { watch watch_reads } for pid=9662 comm="syz.4.745" path="pipe:[13245]" dev="pipefs" ino=13245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 78.170389][ T40] audit: type=1400 audit(1758277949.891:23459): avc: denied { setopt } for pid=9662 comm="syz.4.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.224742][ T9678] nbd: couldn't find device at index -1605786504 [ 78.237457][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'. [ 78.313962][ T9699] FAULT_INJECTION: forcing a failure. [ 78.313962][ T9699] name failslab, interval 1, probability 0, space 0, times 0 [ 78.318908][ T9699] CPU: 0 UID: 0 PID: 9699 Comm: syz.4.755 Not tainted syzkaller #0 PREEMPT(full) [ 78.318930][ T9699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.318939][ T9699] Call Trace: [ 78.318945][ T9699] [ 78.318951][ T9699] dump_stack_lvl+0x16c/0x1f0 [ 78.318995][ T9699] should_fail_ex+0x512/0x640 [ 78.319020][ T9699] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 78.319048][ T9699] should_failslab+0xc2/0x120 [ 78.319068][ T9699] __kmalloc_cache_noprof+0x6a/0x3e0 [ 78.319092][ T9699] ? rtnl_newlink+0x11b/0x2000 [ 78.319117][ T9699] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.319136][ T9699] rtnl_newlink+0x11b/0x2000 [ 78.319164][ T9699] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.319183][ T9699] ? find_held_lock+0x2b/0x80 [ 78.319204][ T9699] ? avc_has_perm_noaudit+0x117/0x3b0 [ 78.319226][ T9699] ? avc_has_perm_noaudit+0x149/0x3b0 [ 78.319249][ T9699] ? __lock_acquire+0x62e/0x1ce0 [ 78.319286][ T9699] ? find_held_lock+0x2b/0x80 [ 78.319304][ T9699] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.319324][ T9699] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.319344][ T9699] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 78.319365][ T9699] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.319387][ T9699] rtnetlink_rcv_msg+0x95e/0xe90 [ 78.319410][ T9699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.319442][ T9699] ? ref_tracker_free+0x37c/0x830 [ 78.319467][ T9699] netlink_rcv_skb+0x155/0x420 [ 78.319489][ T9699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.319513][ T9699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 78.319543][ T9699] ? netlink_deliver_tap+0x1ae/0xd30 [ 78.319567][ T9699] netlink_unicast+0x5aa/0x870 [ 78.319592][ T9699] ? __pfx_netlink_unicast+0x10/0x10 [ 78.319614][ T9699] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 78.319642][ T9699] netlink_sendmsg+0x8d1/0xdd0 [ 78.319668][ T9699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.319697][ T9699] ____sys_sendmsg+0xa98/0xc70 [ 78.319723][ T9699] ? copy_msghdr_from_user+0x10a/0x160 [ 78.319742][ T9699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.319777][ T9699] ___sys_sendmsg+0x134/0x1d0 [ 78.319798][ T9699] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.319846][ T9699] __sys_sendmsg+0x16d/0x220 [ 78.319866][ T9699] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.319901][ T9699] do_syscall_64+0xcd/0x4e0 [ 78.319931][ T9699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.319948][ T9699] RIP: 0033:0x7fd665d8ec29 [ 78.319961][ T9699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.319976][ T9699] RSP: 002b:00007fd666cea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.319993][ T9699] RAX: ffffffffffffffda RBX: 00007fd665fd5fa0 RCX: 00007fd665d8ec29 [ 78.320003][ T9699] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 78.320013][ T9699] RBP: 00007fd666cea090 R08: 0000000000000000 R09: 0000000000000000 [ 78.320023][ T9699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.320032][ T9699] R13: 00007fd665fd6038 R14: 00007fd665fd5fa0 R15: 00007ffcf2f26168 [ 78.320053][ T9699] [ 78.451786][ T5974] Bluetooth: Frame is too long (len 19, expected len 4) [ 78.454853][ T5974] Bluetooth: hci1: SCO packet for unknown connection handle 1 [ 78.459745][ T9711] Context (ID=0x4da) not attached to queue pair (handle=0x4db:0x0) [ 78.477037][ T9720] overlayfs: failed to clone upperpath [ 78.481985][ T9720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'. [ 78.498073][ T9725] vlan0: entered promiscuous mode [ 78.594641][ T9747] overlayfs: failed to clone upperpath [ 78.599555][ T9747] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 78.626105][ T9752] FAULT_INJECTION: forcing a failure. [ 78.626105][ T9752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.628374][ T5974] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 78.634028][ T9752] CPU: 2 UID: 0 PID: 9752 Comm: syz.3.771 Not tainted syzkaller #0 PREEMPT(full) [ 78.634045][ T9752] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.634052][ T9752] Call Trace: [ 78.634056][ T9752] [ 78.634061][ T9752] dump_stack_lvl+0x16c/0x1f0 [ 78.634080][ T9752] should_fail_ex+0x512/0x640 [ 78.634097][ T9752] _copy_from_iter+0x29f/0x1720 [ 78.634115][ T9752] ? __pfx_avc_has_perm+0x10/0x10 [ 78.634130][ T9752] ? __pfx__copy_from_iter+0x10/0x10 [ 78.634149][ T9752] ? sock_has_perm+0x259/0x2f0 [ 78.634152][ T5974] Bluetooth: Wrong link type (-22) [ 78.634163][ T9752] ? __pfx_sock_has_perm+0x10/0x10 [ 78.634179][ T9752] hci_sock_sendmsg+0x46d/0x25f0 [ 78.634196][ T9752] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 78.634213][ T9752] sock_write_iter+0x4fc/0x5b0 [ 78.634232][ T9752] ? __pfx_sock_write_iter+0x10/0x10 [ 78.634254][ T9752] ? bpf_lsm_file_permission+0x9/0x10 [ 78.634270][ T9752] ? security_file_permission+0x71/0x210 [ 78.634289][ T9752] ? rw_verify_area+0xcf/0x6c0 [ 78.634314][ T9752] vfs_write+0x7d3/0x11d0 [ 78.634332][ T9752] ? __pfx_sock_write_iter+0x10/0x10 [ 78.634361][ T9752] ? __pfx_vfs_write+0x10/0x10 [ 78.634377][ T9752] ? find_held_lock+0x2b/0x80 [ 78.634414][ T9752] ksys_write+0x1f8/0x250 [ 78.634431][ T9752] ? __pfx_ksys_write+0x10/0x10 [ 78.634456][ T9752] do_syscall_64+0xcd/0x4e0 [ 78.634481][ T9752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.634504][ T9752] RIP: 0033:0x7fae0278ec29 [ 78.634519][ T9752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.634535][ T9752] RSP: 002b:00007fae03704038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 78.634552][ T9752] RAX: ffffffffffffffda RBX: 00007fae029d5fa0 RCX: 00007fae0278ec29 [ 78.634563][ T9752] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 78.634574][ T9752] RBP: 00007fae03704090 R08: 0000000000000000 R09: 0000000000000000 [ 78.634584][ T9752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.634594][ T9752] R13: 00007fae029d6038 R14: 00007fae029d5fa0 R15: 00007fffb7c86358 [ 78.634618][ T9752] [ 78.659481][ T9755] netlink: 224 bytes leftover after parsing attributes in process `syz.4.765'. [ 78.663761][ T5974] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 78.664929][ T9755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.765'. [ 78.666308][ T5974] Bluetooth: Wrong link type (-22) [ 78.850901][ T9787] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.984671][ T9810] FAULT_INJECTION: forcing a failure. [ 78.984671][ T9810] name failslab, interval 1, probability 0, space 0, times 0 [ 78.989944][ T9810] CPU: 0 UID: 0 PID: 9810 Comm: syz.3.791 Not tainted syzkaller #0 PREEMPT(full) [ 78.989959][ T9810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 78.989966][ T9810] Call Trace: [ 78.989969][ T9810] [ 78.989974][ T9810] dump_stack_lvl+0x16c/0x1f0 [ 78.989992][ T9810] should_fail_ex+0x512/0x640 [ 78.990007][ T9810] ? __kmalloc_noprof+0xbf/0x510 [ 78.990020][ T9810] ? team_add_slave+0x7db/0x2180 [ 78.990030][ T9810] should_failslab+0xc2/0x120 [ 78.990043][ T9810] __kmalloc_noprof+0xd2/0x510 [ 78.990053][ T9810] ? __pfx_netdev_has_upper_dev+0x10/0x10 [ 78.990073][ T9810] team_add_slave+0x7db/0x2180 [ 78.990086][ T9810] ? __pfx_team_add_slave+0x10/0x10 [ 78.990096][ T9810] ? __pfx___dev_change_flags+0x10/0x10 [ 78.990109][ T9810] ? find_held_lock+0x2b/0x80 [ 78.990123][ T9810] ? validate_linkmsg+0x57c/0xb60 [ 78.990139][ T9810] ? __pfx_team_add_slave+0x10/0x10 [ 78.990149][ T9810] do_set_master+0x40f/0x730 [ 78.990162][ T9810] ? netif_change_flags+0x30/0x160 [ 78.990176][ T9810] do_setlink.constprop.0+0xbd8/0x4380 [ 78.990196][ T9810] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 78.990214][ T9810] ? __lock_acquire+0xb97/0x1ce0 [ 78.990236][ T9810] ? __mutex_trylock_common+0xe9/0x250 [ 78.990254][ T9810] ? __pfx___mutex_trylock_common+0x10/0x10 [ 78.990272][ T9810] ? __pfx___might_resched+0x10/0x10 [ 78.990287][ T9810] ? rcu_is_watching+0x12/0xc0 [ 78.990301][ T9810] ? trace_contention_end+0xdd/0x130 [ 78.990311][ T9810] ? __mutex_lock+0x1c5/0x1060 [ 78.990330][ T9810] ? __pfx___mutex_lock+0x10/0x10 [ 78.990345][ T9810] ? cap_capable+0xb3/0x250 [ 78.990361][ T9810] ? full_name_hash+0xbc/0x110 [ 78.990377][ T9810] ? netdev_name_node_lookup+0x127/0x180 [ 78.990390][ T9810] rtnl_newlink+0x1446/0x2000 [ 78.990408][ T9810] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.990422][ T9810] ? find_held_lock+0x2b/0x80 [ 78.990435][ T9810] ? avc_has_perm_noaudit+0x117/0x3b0 [ 78.990450][ T9810] ? avc_has_perm_noaudit+0x149/0x3b0 [ 78.990465][ T9810] ? __lock_acquire+0x62e/0x1ce0 [ 78.990489][ T9810] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.990503][ T9810] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.990517][ T9810] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 78.990531][ T9810] ? __pfx_rtnl_newlink+0x10/0x10 [ 78.990546][ T9810] rtnetlink_rcv_msg+0x95e/0xe90 [ 78.990562][ T9810] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.990580][ T9810] ? ref_tracker_free+0x37c/0x830 [ 78.990597][ T9810] netlink_rcv_skb+0x155/0x420 [ 78.990612][ T9810] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 78.990628][ T9810] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 78.990648][ T9810] ? netlink_deliver_tap+0x1ae/0xd30 [ 78.990664][ T9810] netlink_unicast+0x5aa/0x870 [ 78.990680][ T9810] ? __pfx_netlink_unicast+0x10/0x10 [ 78.990695][ T9810] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 78.990714][ T9810] netlink_sendmsg+0x8d1/0xdd0 [ 78.990735][ T9810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.990755][ T9810] ____sys_sendmsg+0xa98/0xc70 [ 78.990773][ T9810] ? copy_msghdr_from_user+0x10a/0x160 [ 78.990786][ T9810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.990810][ T9810] ___sys_sendmsg+0x134/0x1d0 [ 78.990824][ T9810] ? __pfx____sys_sendmsg+0x10/0x10 [ 78.990855][ T9810] __sys_sendmsg+0x16d/0x220 [ 78.990869][ T9810] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.990891][ T9810] do_syscall_64+0xcd/0x4e0 [ 78.990907][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.990919][ T9810] RIP: 0033:0x7fae0278ec29 [ 78.990927][ T9810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.990938][ T9810] RSP: 002b:00007fae03704038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.990960][ T9810] RAX: ffffffffffffffda RBX: 00007fae029d5fa0 RCX: 00007fae0278ec29 [ 78.990968][ T9810] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 78.990974][ T9810] RBP: 00007fae03704090 R08: 0000000000000000 R09: 0000000000000000 [ 78.990980][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.990987][ T9810] R13: 00007fae029d6038 R14: 00007fae029d5fa0 R15: 00007fffb7c86358 [ 78.991001][ T9810] [ 79.378827][ T9835] kvm: pic: non byte write [ 79.638201][ T9892] fuse: Bad value for 'group_id' [ 79.639748][ T9892] fuse: Bad value for 'group_id' [ 79.766460][ T9914] overlayfs: failed to clone upperpath [ 79.793478][ T5974] Bluetooth: hci3: connection err: -111 [ 79.886076][ T9924] fuse: Unknown parameter 'f' [ 79.961122][ T9948] ipvlan2: entered promiscuous mode [ 79.963452][ T9948] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 80.008109][ T5974] Bluetooth: hci0: command 0x1407 tx timeout [ 80.009953][ T5973] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 80.062319][ T9963] validate_nla: 2 callbacks suppressed [ 80.062335][ T9963] netlink: 'syz.2.838': attribute type 13 has an invalid length. [ 80.077003][ T90] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.079409][ T9963] netlink: 'syz.2.838': attribute type 13 has an invalid length. [ 80.080763][ T90] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.086698][ T90] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.090577][ T90] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.136061][ T9967] kvm: pic: non byte write [ 80.201788][ T9983] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 80.544588][T10035] FAULT_INJECTION: forcing a failure. [ 80.544588][T10035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.558988][T10035] CPU: 0 UID: 0 PID: 10035 Comm: syz.3.854 Not tainted syzkaller #0 PREEMPT(full) [ 80.559005][T10035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 80.559012][T10035] Call Trace: [ 80.559016][T10035] [ 80.559021][T10035] dump_stack_lvl+0x16c/0x1f0 [ 80.559051][T10035] should_fail_ex+0x512/0x640 [ 80.559087][T10035] _copy_to_user+0x32/0xd0 [ 80.559105][T10035] simple_read_from_buffer+0xcb/0x170 [ 80.559119][T10035] proc_fail_nth_read+0x197/0x240 [ 80.559133][T10035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.559147][T10035] ? rw_verify_area+0xcf/0x6c0 [ 80.559164][T10035] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 80.559176][T10035] vfs_read+0x1e1/0xcf0 [ 80.559189][T10035] ? __pfx___mutex_lock+0x10/0x10 [ 80.559209][T10035] ? __pfx_vfs_read+0x10/0x10 [ 80.559224][T10035] ? __fget_files+0x20e/0x3c0 [ 80.559240][T10035] ksys_read+0x12a/0x250 [ 80.559251][T10035] ? __pfx_ksys_read+0x10/0x10 [ 80.559262][T10035] ? fput+0x9b/0xd0 [ 80.559279][T10035] do_syscall_64+0xcd/0x4e0 [ 80.559295][T10035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.559306][T10035] RIP: 0033:0x7fae0278d63c [ 80.559315][T10035] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 80.559325][T10035] RSP: 002b:00007fae03704030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.559336][T10035] RAX: ffffffffffffffda RBX: 00007fae029d5fa0 RCX: 00007fae0278d63c [ 80.559343][T10035] RDX: 000000000000000f RSI: 00007fae037040a0 RDI: 0000000000000004 [ 80.559349][T10035] RBP: 00007fae03704090 R08: 0000000000000000 R09: 0000000000000000 [ 80.559356][T10035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.559362][T10035] R13: 00007fae029d6038 R14: 00007fae029d5fa0 R15: 00007fffb7c86358 [ 80.559376][T10035] [ 80.660000][ T5974] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 80.724592][T10072] binder: 10070:10072 unknown command 0 [ 80.731363][T10072] binder: 10070:10072 ioctl c0306201 200000000080 returned -22 [ 81.019211][T10101] kvm: pic: non byte write [ 81.122565][ T5974] Bluetooth: Frame is too long (len 19, expected len 4) [ 81.247314][T10129] program syz.0.883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.251602][T10129] trusted_key: syz.0.883 sent an empty control message without MSG_MORE. [ 81.257729][T10129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10129 comm=syz.0.883 [ 81.503775][T10159] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 81.503802][T10157] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 81.607483][ T61] cfg80211: failed to load regulatory.db [ 81.680514][ T5974] Bluetooth: hci1: SCO packet for unknown connection handle 1 [ 81.846165][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 81.846181][ T40] audit: type=1400 audit(1758277953.561:23494): avc: denied { accept } for pid=10207 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 81.857977][ T40] audit: type=1400 audit(1758277953.571:23495): avc: denied { create } for pid=10207 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 81.864987][ T40] audit: type=1400 audit(1758277953.571:23496): avc: denied { ioctl } for pid=10207 comm="syz.0.913" path="socket:[23117]" dev="sockfs" ino=23117 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 81.894336][ T5974] Bluetooth: hci0: ACL packet for unknown connection handle 3272 [ 81.908229][ T40] audit: type=1400 audit(1758277953.631:23497): avc: denied { setopt } for pid=10215 comm="syz.0.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.072768][ T40] audit: type=1400 audit(1758277953.791:23498): avc: denied { setattr } for pid=10245 comm="syz.3.919" name="RAW" dev="sockfs" ino=23148 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.078245][ T5973] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 82.083891][ T5973] Bluetooth: hci0: command 0x1407 tx timeout [ 82.100113][T10250] __nla_validate_parse: 14 callbacks suppressed [ 82.100124][T10250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 82.343280][T10299] fuse: Unknown parameter 'grou00000000000000000000' [ 82.354131][T10302] tmpfs: Bad value for 'mpol' [ 82.660869][T10348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10348 comm=syz.2.946 [ 82.682649][T10358] fuse: Unknown parameter 'grou00000000000000000000' [ 82.817388][ T40] audit: type=1400 audit(1758277954.541:23499): avc: denied { unmount } for pid=7634 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.070305][T10426] FAULT_INJECTION: forcing a failure. [ 83.070305][T10426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.074634][T10426] CPU: 0 UID: 0 PID: 10426 Comm: syz.0.964 Not tainted syzkaller #0 PREEMPT(full) [ 83.074649][T10426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 83.074656][T10426] Call Trace: [ 83.074660][T10426] [ 83.074669][T10426] dump_stack_lvl+0x16c/0x1f0 [ 83.074702][T10426] should_fail_ex+0x512/0x640 [ 83.074723][T10426] _copy_to_user+0x32/0xd0 [ 83.074741][T10426] simple_read_from_buffer+0xcb/0x170 [ 83.074754][T10426] proc_fail_nth_read+0x197/0x240 [ 83.074767][T10426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.074781][T10426] ? rw_verify_area+0xcf/0x6c0 [ 83.074799][T10426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.074811][T10426] vfs_read+0x1e1/0xcf0 [ 83.074824][T10426] ? __pfx___mutex_lock+0x10/0x10 [ 83.074845][T10426] ? __pfx_vfs_read+0x10/0x10 [ 83.074859][T10426] ? __fget_files+0x20e/0x3c0 [ 83.074876][T10426] ksys_read+0x12a/0x250 [ 83.074887][T10426] ? __pfx_ksys_read+0x10/0x10 [ 83.074902][T10426] do_syscall_64+0xcd/0x4e0 [ 83.074918][T10426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.074929][T10426] RIP: 0033:0x7f0c3338d63c [ 83.074938][T10426] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 83.074949][T10426] RSP: 002b:00007f0c34226030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.074960][T10426] RAX: ffffffffffffffda RBX: 00007f0c335d5fa0 RCX: 00007f0c3338d63c [ 83.074967][T10426] RDX: 000000000000000f RSI: 00007f0c342260a0 RDI: 0000000000000003 [ 83.074973][T10426] RBP: 00007f0c34226090 R08: 0000000000000000 R09: 0000000000000000 [ 83.074979][T10426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.074985][T10426] R13: 00007f0c335d6038 R14: 00007f0c335d5fa0 R15: 00007ffe58dd2c78 [ 83.074999][T10426] [ 83.197439][ T40] audit: type=1400 audit(1758277954.901:23500): avc: denied { map } for pid=10432 comm="syz.4.966" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.219801][ T40] audit: type=1400 audit(1758277954.901:23501): avc: denied { execute } for pid=10432 comm="syz.4.966" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.331435][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.970'. [ 83.334248][T10450] netlink: 48 bytes leftover after parsing attributes in process `syz.3.970'. [ 83.339322][T10455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.971'. [ 83.386385][T10464] netlink: 224 bytes leftover after parsing attributes in process `syz.2.974'. [ 83.390261][T10464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.974'. [ 83.424755][T10470] 9pnet_fd: Insufficient options for proto=fd [ 83.424770][T10471] 9pnet_fd: Insufficient options for proto=fd [ 83.487737][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.979'. [ 83.511891][ T40] audit: type=1400 audit(1758277955.231:23502): avc: denied { append } for pid=10482 comm="syz.4.980" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 83.529236][ T40] audit: type=1400 audit(1758277955.251:23503): avc: denied { write } for pid=10482 comm="syz.4.980" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.634379][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.986'. [ 83.638099][T10505] netlink: 52 bytes leftover after parsing attributes in process `syz.2.988'. [ 83.733580][T10504] kvm: pic: non byte write [ 83.734917][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.986'. [ 83.825660][T10512] IPVS: You probably need to specify IP address on multicast interface. [ 83.830055][T10512] IPVS: Error connecting to the multicast addr [ 84.064121][T10575] capability: warning: `syz.4.998' uses deprecated v2 capabilities in a way that may be insecure [ 84.069680][ T5973] Bluetooth: hci2: SCO packet for unknown connection handle 1 [ 84.123695][T10584] : entered promiscuous mode [ 84.135644][T10589] fuse: Unknown parameter 'group_id00000000000000000000' [ 84.328279][T10614] fuse: Unknown parameter 'group_id00000000000000000000' [ 84.332268][T10617] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 84.334630][T10617] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 84.339777][T10617] vhci_hcd vhci_hcd.0: Device attached [ 84.342663][T10618] vhci_hcd: connection closed [ 84.344306][ T1144] vhci_hcd: stop threads [ 84.354373][ T1144] vhci_hcd: release socket [ 84.356422][ T1144] vhci_hcd: disconnect device [ 84.469277][T10630] kvm: pic: non byte write [ 84.478679][ T5974] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 84.480929][ T5973] Bluetooth: hci0: command 0x1407 tx timeout [ 84.483648][ T5974] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 84.540762][T10644] fuse: Unknown parameter 'group_id00000000000000000000' [ 84.779751][T10685] fuse: Bad value for 'user_id' [ 84.781732][T10685] fuse: Bad value for 'user_id' [ 84.890797][T10691] batadv_slave_1: entered promiscuous mode [ 84.914486][T10709] : entered promiscuous mode [ 84.920341][ T5974] Bluetooth: Unexpected start frame (len 19) [ 84.985923][T10723] fuse: Bad value for 'user_id' [ 84.988133][T10723] fuse: Bad value for 'user_id' [ 85.022668][ T5974] Bluetooth: hci2: Malformed LE Event: 0x0d [ 85.067530][T10678] batadv_slave_1: left promiscuous mode [ 85.086244][T10733] batman_adv: batadv0: Adding interface: gretap1 [ 85.088458][T10733] batman_adv: batadv0: Interface activated: gretap1 [ 85.259681][T10753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=10753 comm=syz.2.1054 [ 85.856041][T10809] netlink: 'syz.2.1067': attribute type 10 has an invalid length. [ 86.053085][T10828] tipc: Started in network mode [ 86.054663][T10828] tipc: Node identity fffffe01, cluster identity 64 [ 86.056900][T10828] tipc: Node number set to 4294966785 [ 86.059062][T10830] fuse: Bad value for 'fd' [ 86.204048][T10850] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 86.250292][T10859] gfs2: gfs2 mount does not exist [ 86.355899][T10872] fuse: Bad value for 'fd' [ 86.446072][T10874] kvm: pic: non byte write [ 86.557590][ T5974] Bluetooth: hci0: command 0x1407 tx timeout [ 86.727542][ T54] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.900027][ T54] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 86.905098][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 86.910648][ T54] usb 5-1: Product: syz [ 86.912733][ T54] usb 5-1: Manufacturer: syz [ 86.915220][ T54] usb 5-1: SerialNumber: syz [ 86.922037][ T54] usb 5-1: config 0 descriptor?? [ 86.927542][ T54] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 86.930734][ T54] dvb-usb: bulk message failed: -22 (2/0) [ 86.938085][ T54] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.941487][ T54] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 86.944516][ T54] usb 5-1: media controller created [ 86.947885][T10915] Malformed UNC in devname [ 86.947885][T10915] [ 86.950480][T10915] CIFS: VFS: Malformed UNC in devname [ 86.959252][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.976342][T10906] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5123 sclass=netlink_xfrm_socket pid=10906 comm=syz.3.1096 [ 87.133119][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 87.133134][ T40] audit: type=1400 audit(2000000002.239:23519): avc: denied { execute } for pid=10885 comm="syz.0.1091" dev="hugetlbfs" ino=26027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 87.145027][ T40] audit: type=1400 audit(2000000002.239:23520): avc: denied { execute_no_trans } for pid=10885 comm="syz.0.1091" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=26027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 87.146421][T10886] dvb-usb: bulk message failed: -22 (34/0) [ 87.168761][ T54] cxusb: set interface failed [ 87.170874][ T54] dvb-usb: bulk message failed: -22 (1/0) [ 87.199468][ T54] DVB: Unable to find symbol mt352_attach() [ 87.201590][ T54] dvb-usb: bulk message failed: -22 (5/0) [ 87.203642][ T54] zl10353_read_register: readreg error (reg=127, ret==-121) [ 87.205998][ T54] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 87.277433][ T54] rc_core: IR keymap rc-dvico-mce not found [ 87.280075][ T54] Registered IR keymap rc-empty [ 87.283885][ T54] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 87.295079][ T54] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input8 [ 87.301453][ T54] dvb-usb: schedule remote query interval to 100 msecs. [ 87.303653][ T54] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 87.323329][ T54] usb 5-1: USB disconnect, device number 3 [ 87.371785][ T54] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 87.443171][T10984] batadv_slave_1: entered promiscuous mode [ 87.740432][T10967] batadv_slave_1: left promiscuous mode [ 87.895018][T11004] __nla_validate_parse: 24 callbacks suppressed [ 87.895030][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 87.950161][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1115'. [ 87.990663][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 87.997830][T11015] nbd: couldn't find device at index -1605786504 [ 88.020851][T11019] fuse: Invalid rootmode [ 88.078630][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'. [ 88.086402][T11022] netlink: 'syz.4.1119': attribute type 10 has an invalid length. [ 88.126900][T11024] kvm: pic: non byte write [ 88.231229][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 88.326989][T11052] FAULT_INJECTION: forcing a failure. [ 88.326989][T11052] name failslab, interval 1, probability 0, space 0, times 0 [ 88.336110][T11052] CPU: 3 UID: 0 PID: 11052 Comm: syz.0.1126 Not tainted syzkaller #0 PREEMPT(full) [ 88.336126][T11052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.336133][T11052] Call Trace: [ 88.336137][T11052] [ 88.336141][T11052] dump_stack_lvl+0x16c/0x1f0 [ 88.336175][T11052] should_fail_ex+0x512/0x640 [ 88.336196][T11052] ? fs_reclaim_acquire+0xae/0x150 [ 88.336213][T11052] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 88.336230][T11052] should_failslab+0xc2/0x120 [ 88.336243][T11052] __kmalloc_noprof+0xd2/0x510 [ 88.336258][T11052] tomoyo_realpath_from_path+0xc2/0x6e0 [ 88.336277][T11052] ? tomoyo_profile+0x47/0x60 [ 88.336289][T11052] tomoyo_path_number_perm+0x245/0x580 [ 88.336302][T11052] ? tomoyo_path_number_perm+0x237/0x580 [ 88.336318][T11052] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 88.336338][T11052] ? find_held_lock+0x2b/0x80 [ 88.336364][T11052] ? find_held_lock+0x2b/0x80 [ 88.336377][T11052] ? hook_file_ioctl_common+0x145/0x410 [ 88.336392][T11052] ? __fget_files+0x20e/0x3c0 [ 88.336407][T11052] security_file_ioctl+0x9b/0x240 [ 88.336425][T11052] __x64_sys_ioctl+0xb7/0x210 [ 88.336443][T11052] do_syscall_64+0xcd/0x4e0 [ 88.336464][T11052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.336476][T11052] RIP: 0033:0x7f0c3338ec29 [ 88.336485][T11052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.336496][T11052] RSP: 002b:00007f0c34226038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.336507][T11052] RAX: ffffffffffffffda RBX: 00007f0c335d5fa0 RCX: 00007f0c3338ec29 [ 88.336514][T11052] RDX: 0000200000000000 RSI: 000000008020640d RDI: 0000000000000003 [ 88.336521][T11052] RBP: 00007f0c34226090 R08: 0000000000000000 R09: 0000000000000000 [ 88.336527][T11052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.336534][T11052] R13: 00007f0c335d6038 R14: 00007f0c335d5fa0 R15: 00007ffe58dd2c78 [ 88.336548][T11052] [ 88.336552][T11052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 88.369792][T11057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 88.449949][T11070] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1131' resets device [ 88.595592][T11095] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1136'. [ 88.600507][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1136'. [ 88.662238][T11104] tmpfs: Bad value for 'mpol' [ 88.714359][T11113] fuse: Invalid rootmode [ 88.750530][T11120] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.1143' resets device [ 88.861326][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 88.866423][T11140] netlink: 'syz.0.1147': attribute type 10 has an invalid length. [ 88.892622][ T40] audit: type=1400 audit(2000000003.999:23521): avc: denied { map } for pid=11148 comm="syz.3.1149" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 88.951269][T11155] fuse: Bad value for 'rootmode' [ 89.072722][T11161] binder: 11159:11161 ioctl c0306201 200000000640 returned -22 [ 89.075500][T11161] binder: 11159:11161 ioctl 227b 2000000002c0 returned -22 [ 89.078299][T11161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1153'. [ 89.600173][T11193] fuse: Bad value for 'rootmode' [ 89.900252][T11210] Falling back ldisc for ttyS3. [ 89.971278][ T40] audit: type=1400 audit(2000000005.079:23522): avc: denied { create } for pid=11221 comm="syz.0.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 89.981572][T11222] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 89.985296][T11222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11222 comm=syz.0.1167 [ 90.053821][ T40] audit: type=1400 audit(2000000005.159:23523): avc: denied { cmd } for pid=11225 comm="syz.0.1169" path="socket:[26324]" dev="sockfs" ino=26324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 90.087314][ T5974] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 90.089721][ T5973] Bluetooth: hci0: command 0x1407 tx timeout [ 90.092011][ T5974] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 90.178986][T11245] netlink: 'syz.3.1174': attribute type 2 has an invalid length. [ 90.192385][T11249] netlink: 'syz.0.1176': attribute type 4 has an invalid length. [ 90.342229][T11274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.470917][T11295] netlink: 'syz.2.1194': attribute type 21 has an invalid length. [ 90.473590][T11295] netlink: 'syz.2.1194': attribute type 6 has an invalid length. [ 90.592720][ T40] audit: type=1400 audit(2000000005.699:23524): avc: denied { map } for pid=11324 comm="syz.2.1202" path="socket:[27437]" dev="sockfs" ino=27437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.597876][T11325] lo speed is unknown, defaulting to 1000 [ 90.603033][T11325] lo speed is unknown, defaulting to 1000 [ 90.609676][T11325] lo speed is unknown, defaulting to 1000 [ 90.615101][T11325] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.625762][T11325] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 90.648925][T11325] lo speed is unknown, defaulting to 1000 [ 90.651594][T11325] lo speed is unknown, defaulting to 1000 [ 90.654475][T11325] lo speed is unknown, defaulting to 1000 [ 90.656950][T11325] lo speed is unknown, defaulting to 1000 [ 90.747364][ T6056] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 90.827458][ T54] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.900191][ T6056] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.904460][ T6056] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.910435][ T6056] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 90.913752][ T6056] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.987328][ T54] usb 5-1: Using ep0 maxpacket: 8 [ 90.990412][ T54] usb 5-1: config 0 interface 0 has no altsetting 0 [ 90.992581][ T54] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 90.995414][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.999622][ T54] usb 5-1: config 0 descriptor?? [ 91.123575][ T6056] usb 8-1: usb_control_msg returned -32 [ 91.125976][ T6056] usbtmc 8-1:16.0: can't read capabilities [ 91.411186][ T54] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 91.610478][T11316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.613445][T11316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.616397][ T5974] Bluetooth: hci3: SCO packet for unknown connection handle 1 [ 91.617124][ T6008] usb 5-1: USB disconnect, device number 4 [ 91.784963][T11392] fuse: Unknown parameter 'use00000000000000000000' [ 92.086382][T11413] fuse: Unknown parameter 'user_i00000000000000000000' [ 92.167518][ T5974] Bluetooth: hci0: command 0x1407 tx timeout [ 92.204032][T11424] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 92.212252][ T40] audit: type=1400 audit(2000000007.319:23525): avc: denied { accept } for pid=11423 comm="syz.2.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 92.307577][T11435] overlayfs: failed to clone upperpath [ 92.342480][T11438] netlink: 'syz.2.1229': attribute type 18 has an invalid length. [ 92.462507][ T40] audit: type=1400 audit(2000000007.569:23526): avc: denied { ioctl } for pid=11446 comm="syz.2.1233" path="socket:[28181]" dev="sockfs" ino=28181 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.768796][T11470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.983236][ T40] audit: type=1326 audit(2000000008.089:23527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.0.1246" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c3338ec29 code=0x0 [ 93.507050][ T6037] usb 8-1: USB disconnect, device number 3 [ 93.836955][T11524] __nla_validate_parse: 10 callbacks suppressed [ 93.836970][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1253'. [ 94.552095][T11545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=11545 comm=syz.3.1259 [ 94.635220][T11562] fuse: Bad value for 'fd' [ 94.669099][T11566] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1265'. [ 94.693976][T11573] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1267'. [ 94.696837][T11573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1267'. [ 94.917332][ T6037] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 95.070083][ T6037] usb 8-1: config 9 has an invalid interface number: 1 but max is 0 [ 95.073400][ T6037] usb 8-1: config 9 has no interface number 0 [ 95.075949][ T6037] usb 8-1: config 9 interface 1 has no altsetting 0 [ 95.084492][ T6037] usb 8-1: string descriptor 0 read error: -22 [ 95.087427][ T6037] usb 8-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 95.091301][ T6037] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.106479][ T6037] cx231xx 8-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 95.111284][ T6037] cx231xx 8-1:9.1: Not found matching IAD interface [ 95.191276][T11591] FAULT_INJECTION: forcing a failure. [ 95.191276][T11591] name failslab, interval 1, probability 0, space 0, times 0 [ 95.195353][T11591] CPU: 3 UID: 0 PID: 11591 Comm: syz.4.1270 Not tainted syzkaller #0 PREEMPT(full) [ 95.195368][T11591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 95.195374][T11591] Call Trace: [ 95.195378][T11591] [ 95.195383][T11591] dump_stack_lvl+0x16c/0x1f0 [ 95.195401][T11591] should_fail_ex+0x512/0x640 [ 95.195415][T11591] ? fs_reclaim_acquire+0xae/0x150 [ 95.195431][T11591] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 95.195448][T11591] should_failslab+0xc2/0x120 [ 95.195462][T11591] __kmalloc_noprof+0xd2/0x510 [ 95.195476][T11591] tomoyo_realpath_from_path+0xc2/0x6e0 [ 95.195494][T11591] ? tomoyo_profile+0x47/0x60 [ 95.195506][T11591] tomoyo_path_number_perm+0x245/0x580 [ 95.195520][T11591] ? tomoyo_path_number_perm+0x237/0x580 [ 95.195535][T11591] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 95.195550][T11591] ? find_held_lock+0x2b/0x80 [ 95.195576][T11591] ? find_held_lock+0x2b/0x80 [ 95.195589][T11591] ? hook_file_ioctl_common+0x145/0x410 [ 95.195604][T11591] ? __fget_files+0x20e/0x3c0 [ 95.195623][T11591] security_file_ioctl+0x9b/0x240 [ 95.195640][T11591] __x64_sys_ioctl+0xb7/0x210 [ 95.195658][T11591] do_syscall_64+0xcd/0x4e0 [ 95.195674][T11591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.195685][T11591] RIP: 0033:0x7fd665d8ec29 [ 95.195694][T11591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.195705][T11591] RSP: 002b:00007fd666cea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 95.195716][T11591] RAX: ffffffffffffffda RBX: 00007fd665fd5fa0 RCX: 00007fd665d8ec29 [ 95.195723][T11591] RDX: 0000200000000200 RSI: 00000000c008ae88 RDI: 0000000000000005 [ 95.195730][T11591] RBP: 00007fd666cea090 R08: 0000000000000000 R09: 0000000000000000 [ 95.195736][T11591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.195742][T11591] R13: 00007fd665fd6038 R14: 00007fd665fd5fa0 R15: 00007ffcf2f26168 [ 95.195755][T11591] [ 95.195760][T11591] ERROR: Out of memory at tomoyo_realpath_from_path. [ 95.357039][T11608] fuse: Bad value for 'fd' [ 95.405322][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 95.417901][ T61] usb 8-1: USB disconnect, device number 4 [ 95.750801][ T40] audit: type=1800 audit(2000000010.859:23528): pid=11645 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1282" name="bus" dev="tmpfs" ino=2520 res=0 errno=0 [ 95.861221][T11648] fuse: Bad value for 'fd' [ 96.064727][T11534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1256'. [ 96.145168][T11677] fuse: Unknown parameter '0x0000000000000004' [ 96.269835][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1296'. [ 96.307984][T11693] fuse: Bad value for 'fd' [ 96.334774][T11704] fuse: Unknown parameter '0x0000000000000004' [ 96.502700][T11731] fuse: Bad value for 'fd' [ 96.533204][T11735] fuse: Unknown parameter '0x0000000000000004' [ 96.557346][ T61] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 96.614734][T11742] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1314'. [ 96.619218][ T40] audit: type=1400 audit(2000000011.729:23529): avc: denied { bind } for pid=11739 comm="syz.2.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 96.707300][ T61] usb 9-1: Using ep0 maxpacket: 16 [ 96.710592][ T61] usb 9-1: config 0 has no interfaces? [ 96.714048][ T61] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.716985][ T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.720272][ T61] usb 9-1: Product: syz [ 96.721760][ T61] usb 9-1: Manufacturer: syz [ 96.723367][ T61] usb 9-1: SerialNumber: syz [ 96.726336][ T61] usb 9-1: config 0 descriptor?? [ 97.013347][T11761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1316'. [ 97.060285][ T6056] usb 9-1: USB disconnect, device number 2 [ 97.096098][T11761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1545 sclass=netlink_tcpdiag_socket pid=11761 comm=syz.3.1316 [ 97.394643][T11816] fuse: Bad value for 'fd' [ 97.424512][T11820] fuse: Unknown parameter '0x0000000000000004' [ 97.459291][ T5974] Bluetooth: hci3: SCO packet for unknown connection handle 1 [ 97.497866][T11830] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1325'. [ 97.613824][T11853] fuse: Unknown parameter '0x0000000000000004' [ 97.737592][ T1460] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.830570][T11885] fuse: Unknown parameter '0x0000000000000004' [ 97.858752][ T5974] Bluetooth: hci1: SCO packet for unknown connection handle 1 [ 97.899500][ T1460] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 97.904591][ T1460] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 97.907926][ T1460] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 97.911060][ T1460] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 97.914469][ T1460] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 97.921927][ T1460] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 97.924727][ T1460] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 97.927335][ T1460] usb 5-1: Product: syz [ 97.928697][ T1460] usb 5-1: Manufacturer: syz [ 97.933942][ T1460] cdc_wdm 5-1:1.0: skipping garbage [ 97.935615][ T1460] cdc_wdm 5-1:1.0: skipping garbage [ 97.938750][ T1460] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 97.940669][ T1460] cdc_wdm 5-1:1.0: Unknown control protocol [ 98.335343][T11389] usb 5-1: USB disconnect, device number 5 [ 98.541352][T11830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11830 comm=syz.0.1325 [ 98.557283][ T40] audit: type=1400 audit(2000000013.659:23530): avc: denied { connect } for pid=11910 comm="syz.4.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 98.631060][ T40] audit: type=1400 audit(2000000013.739:23531): avc: denied { ioctl } for pid=11927 comm="syz.3.1351" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 98.641573][ T40] audit: type=1400 audit(2000000013.739:23532): avc: denied { ioctl } for pid=11927 comm="syz.3.1351" path="socket:[29596]" dev="sockfs" ino=29596 ioctlcmd=0x7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 98.783053][ T40] audit: type=1400 audit(2000000013.889:23533): avc: denied { read } for pid=11946 comm="syz.4.1357" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 98.792281][ T40] audit: type=1400 audit(2000000013.889:23534): avc: denied { ioctl } for pid=11946 comm="syz.4.1357" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 98.799060][T11948] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 98.802793][ T40] audit: type=1400 audit(2000000013.889:23535): avc: denied { append } for pid=11946 comm="syz.4.1357" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 111.745221][ T40] audit: type=1400 audit(2000000026.849:23536): avc: denied { read write } for pid=12075 comm="syz.0.1366" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 111.764876][ T40] audit: type=1400 audit(2000000026.849:23537): avc: denied { open } for pid=12075 comm="syz.0.1366" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 111.774814][ T40] audit: type=1400 audit(2000000026.859:23538): avc: denied { ioctl } for pid=12075 comm="syz.0.1366" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 111.799083][ T5974] Bluetooth: hci0: SCO packet for unknown connection handle 3664 [ 111.834822][T12091] __nla_validate_parse: 2 callbacks suppressed [ 111.834833][T12091] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1372'. [ 111.846463][T12091] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.035625][ T40] audit: type=1400 audit(2000000027.139:23539): avc: denied { mounton } for pid=12132 comm="syz.3.1386" path="/proc/604/task" dev="proc" ino=31032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 112.104969][ T5974] Bluetooth: hci3: link tx timeout [ 112.106770][ T5974] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 112.231226][T12181] wg2: entered allmulticast mode [ 112.238234][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1402'. [ 112.376959][T12210] lo speed is unknown, defaulting to 1000 [ 112.488760][T12249] netlink: 'syz.2.1415': attribute type 21 has an invalid length. [ 112.491363][T12249] netlink: 'syz.2.1415': attribute type 6 has an invalid length. [ 112.493989][T12249] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1415'. [ 112.555386][T12190] block nbd0: shutting down sockets [ 112.604749][T12269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1421'. [ 112.721591][ T40] audit: type=1804 audit(2000000027.829:23540): pid=12292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1427" name="/newroot/186/file0" dev="tmpfs" ino=991 res=1 errno=0 [ 112.730145][ T40] audit: type=1800 audit(2000000027.829:23541): pid=12292 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1427" name="file0" dev="tmpfs" ino=991 res=0 errno=0 [ 112.834765][ T40] audit: type=1400 audit(2000000027.939:23542): avc: denied { name_bind } for pid=12311 comm="syz.4.1434" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 112.845659][T12313] TCP: TCP_TX_DELAY enabled [ 112.916650][T12322] ref_ctr_offset mismatch. inode: 0x783 offset: 0x0 ref_ctr_offset(old): 0x30 ref_ctr_offset(new): 0x0 [ 112.925570][ T5973] Bluetooth: hci1: link tx timeout [ 112.927975][ T5973] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 112.932448][ T5973] Bluetooth: hci1: link tx timeout [ 112.935006][ T5973] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 112.937386][ T40] audit: type=1400 audit(2000000028.039:23543): avc: denied { execmem } for pid=12328 comm="syz.4.1440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 112.963034][T12331] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1441'. [ 112.963231][T12329] block nbd4: Attempted send on invalid socket [ 112.965848][T12331] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1441'. [ 112.971311][T12329] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 112.974223][T12329] EXT4-fs (nbd4): unable to read superblock [ 113.019292][T12340] netlink: 'syz.2.1444': attribute type 2 has an invalid length. [ 113.086134][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1448'. [ 113.089468][T12356] wg2: left allmulticast mode [ 113.127722][T12362] block nbd0: Unsupported socket: shutdown callout must be supported. [ 113.292869][T12390] CIFS mount error: No usable UNC path provided in device string! [ 113.292869][T12390] [ 113.295883][T12390] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 113.391497][T12411] netlink: 'syz.3.1467': attribute type 21 has an invalid length. [ 113.394597][T12411] netlink: 'syz.3.1467': attribute type 6 has an invalid length. [ 113.398225][T12411] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1467'. [ 113.582690][T12422] fuse: Bad value for 'group_id' [ 113.584697][T12422] fuse: Bad value for 'group_id' [ 113.627910][T12436] team0: Port device vlan0 added [ 113.768932][T12466] fuse: Bad value for 'group_id' [ 113.770480][T12466] fuse: Bad value for 'group_id' [ 113.782793][T12467] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.1483'. [ 113.786053][T12467] openvswitch: netlink: Message has 5 unknown bytes. [ 113.830143][ T40] audit: type=1400 audit(2000000028.939:23544): avc: denied { accept } for pid=12465 comm="syz.2.1483" path="socket:[33383]" dev="sockfs" ino=33383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.836991][ T40] audit: type=1400 audit(2000000028.939:23545): avc: denied { write } for pid=12465 comm="syz.2.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 113.894275][T12496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1490'. [ 113.940514][T12502] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 114.006113][T12510] fuse: Bad value for 'group_id' [ 114.012844][T12510] fuse: Bad value for 'group_id' [ 114.067330][ T5973] Bluetooth: hci2: link tx timeout [ 114.069517][ T5973] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.073006][T12518] fuse: Bad value for 'fd' [ 114.081925][T12518] pimreg3: entered allmulticast mode [ 114.157290][ T63] Bluetooth: hci3: command 0x0406 tx timeout [ 114.611373][T12596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=12596 comm=syz.2.1519 [ 114.641150][T12602] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 114.940939][T12622] netlink: 'syz.3.1528': attribute type 21 has an invalid length. [ 114.944197][T12622] netlink: 'syz.3.1528': attribute type 6 has an invalid length. [ 114.967734][ T63] Bluetooth: hci1: command 0x0406 tx timeout [ 115.021673][T12624] bond2: entered promiscuous mode [ 115.023448][T12624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.026386][T12624] netlink: 'syz.3.1529': attribute type 1 has an invalid length. [ 115.029092][T12624] NCSI netlink: No device for ifindex 196628 [ 115.342439][T12722] program syz.0.1542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.380003][T12724] overlay: Unknown parameter 'smackfsroot' [ 115.450226][T12735] netlink: 'syz.2.1546': attribute type 10 has an invalid length. [ 115.455355][T12735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.461061][T12735] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 115.468814][T12735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12735 comm=syz.2.1546 [ 115.473873][T12735] netlink: 'syz.2.1546': attribute type 10 has an invalid length. [ 115.478563][T12735] batadv0: entered promiscuous mode [ 115.480596][T12735] batadv0: entered allmulticast mode [ 115.484083][T12735] bond0: (slave batadv0): Releasing backup interface [ 115.493972][T12735] bridge0: port 1(batadv0) entered blocking state [ 115.496644][T12735] bridge0: port 1(batadv0) entered disabled state [ 115.537444][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 115.547688][ T6535] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 115.550630][ T6535] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 115.691846][ T10] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 115.695378][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 115.701378][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 115.707140][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 115.710991][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 115.714340][ T10] usb 9-1: Product: syz [ 115.716105][ T10] usb 9-1: Manufacturer: syz [ 115.720215][ T10] usb 9-1: SerialNumber: syz [ 115.723220][ T10] usb 9-1: config 0 descriptor?? [ 115.726303][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 115.729734][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 115.734451][ T10] usb 9-1: selecting invalid altsetting 0 [ 115.745278][T12759] fuse: Unknown parameter 'grou00000000000000000000' [ 116.077334][ T63] Bluetooth: hci2: command 0x0406 tx timeout [ 116.100795][T12717] ceph: No mds server is up or the cluster is laggy [ 116.100891][T12705] ceph: No mds server is up or the cluster is laggy [ 116.347122][T12793] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 116.347615][T12792] overlayfs: failed to clone upperpath [ 116.351857][T12793] overlayfs: missing 'lowerdir' [ 116.352214][T12699] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 116.455116][ T5973] Bluetooth: hci1: SCO packet for unknown connection handle 1 [ 116.477744][ T5974] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 116.480948][T12809] fuse: Unknown parameter 'grou00000000000000000000' [ 116.481708][ T5973] Bluetooth: hci0: command 0x1407 tx timeout [ 116.702498][T12833] binder: 12831:12833 ioctl c018620c 200000000000 returned -22 [ 116.877085][T12860] __nla_validate_parse: 12 callbacks suppressed [ 116.877096][T12860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 116.912902][T12866] FAULT_INJECTION: forcing a failure. [ 116.912902][T12866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.917166][T12866] CPU: 1 UID: 0 PID: 12866 Comm: syz.0.1579 Not tainted syzkaller #0 PREEMPT(full) [ 116.917181][T12866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.917205][T12866] Call Trace: [ 116.917210][T12866] [ 116.917215][T12866] dump_stack_lvl+0x16c/0x1f0 [ 116.917234][T12866] should_fail_ex+0x512/0x640 [ 116.917253][T12866] _copy_from_user+0x2e/0xd0 [ 116.917270][T12866] kstrtouint_from_user+0xd6/0x1d0 [ 116.917283][T12866] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 116.917295][T12866] ? __lock_acquire+0xb97/0x1ce0 [ 116.917320][T12866] proc_fail_nth_write+0x83/0x220 [ 116.917334][T12866] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 116.917351][T12866] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 116.917364][T12866] vfs_write+0x2a0/0x11d0 [ 116.917378][T12866] ? __pfx___mutex_lock+0x10/0x10 [ 116.917394][T12866] ? __pfx_vfs_write+0x10/0x10 [ 116.917409][T12866] ? __fget_files+0x20e/0x3c0 [ 116.917426][T12866] ksys_write+0x12a/0x250 [ 116.917437][T12866] ? __pfx_ksys_write+0x10/0x10 [ 116.917453][T12866] do_syscall_64+0xcd/0x4e0 [ 116.917469][T12866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.917480][T12866] RIP: 0033:0x7f0c3338d6df [ 116.917490][T12866] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 116.917500][T12866] RSP: 002b:00007f0c34226030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 116.917511][T12866] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0c3338d6df [ 116.917518][T12866] RDX: 0000000000000001 RSI: 00007f0c342260a0 RDI: 0000000000000005 [ 116.917525][T12866] RBP: 00007f0c34226090 R08: 0000000000000000 R09: 0000000000000000 [ 116.917531][T12866] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 116.917537][T12866] R13: 00007f0c335d6038 R14: 00007f0c335d5fa0 R15: 00007ffe58dd2c78 [ 116.917551][T12866] [ 116.929199][T12864] VFS: Mount too revealing [ 116.932549][ T61] usb 9-1: USB disconnect, device number 3 [ 117.038378][ T5974] Bluetooth: hci1: command 0x0406 tx timeout [ 117.084309][T12892] fuse: Unknown parameter 'group_i00000000000000000000' [ 117.308201][ T5974] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.311888][ T5974] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.315449][ T5974] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.321647][ T5974] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.327658][ T5974] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.364382][T12905] lo speed is unknown, defaulting to 1000 [ 117.483801][T13020] usb usb8: usbfs: process 13020 (syz.4.1591) did not claim interface 0 before use [ 117.488213][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 117.488226][ T40] audit: type=1400 audit(2000000032.589:23560): avc: denied { create } for pid=13018 comm="syz.4.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.488595][T12905] chnl_net:caif_netlink_parms(): no params data found [ 117.490800][ T40] audit: type=1400 audit(2000000032.599:23561): avc: denied { bind } for pid=13018 comm="syz.4.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.525686][T13065] validate_nla: 1 callbacks suppressed [ 117.525702][T13065] netlink: 'syz.4.1592': attribute type 21 has an invalid length. [ 117.537124][T13065] netlink: 'syz.4.1592': attribute type 6 has an invalid length. [ 117.540292][T13065] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1592'. [ 117.580388][T13109] fuse: Unknown parameter 'group_i00000000000000000000' [ 117.618843][T12905] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.621016][T12905] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.623271][T12905] bridge_slave_0: entered allmulticast mode [ 117.625828][T12905] bridge_slave_0: entered promiscuous mode [ 117.630364][T12905] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.633102][T12905] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.637576][T12905] bridge_slave_1: entered allmulticast mode [ 117.641880][T12905] bridge_slave_1: entered promiscuous mode [ 117.673410][T13251] warning: `syz.4.1595' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.679497][ T40] audit: type=1400 audit(2000000032.789:23562): avc: denied { ioctl } for pid=13250 comm="syz.4.1595" path="socket:[30571]" dev="sockfs" ino=30571 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 117.702140][T12905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.717176][ T6534] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.735228][T12905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.740753][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.745241][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.795851][ T6534] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.806852][T12905] team0: Port device team_slave_0 added [ 117.808076][T13251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.811635][T12905] team0: Port device team_slave_1 added [ 117.863079][T12905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.865260][T12905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.874811][T12905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.892234][ T6534] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.900419][T12905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.903249][T12905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.913129][T12905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.978420][T12905] hsr_slave_0: entered promiscuous mode [ 117.981601][T12905] hsr_slave_1: entered promiscuous mode [ 117.984526][T12905] debugfs: 'hsr0' already exists in 'hsr' [ 117.986880][T12905] Cannot create hsr debugfs directory [ 117.997292][ T6534] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.172513][ T6534] bridge0: port 1(batadv0) entered disabled state [ 118.427173][T13954] kvm: pic: non byte write [ 118.584937][ T6534] bond0 (unregistering): Released all slaves [ 118.606534][ T40] audit: type=1400 audit(2000000033.709:23563): avc: denied { relabelfrom } for pid=13933 comm="syz.3.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 118.614358][ T40] audit: type=1400 audit(2000000033.709:23564): avc: denied { relabelto } for pid=13933 comm="syz.3.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 118.666837][ T6534] tipc: Left network mode [ 118.837596][ T1460] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 118.941616][ T6534] hsr_slave_0: left promiscuous mode [ 118.944365][ T6534] hsr_slave_1: left promiscuous mode [ 119.004727][ T1460] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 4093, setting to 64 [ 119.008683][ T1460] usb 9-1: config 0 interface 0 has no altsetting 0 [ 119.012429][ T1460] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 119.016015][ T1460] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 119.023435][ T1460] usb 9-1: Product: syz [ 119.024751][ T1460] usb 9-1: Manufacturer: syz [ 119.026113][ T1460] usb 9-1: SerialNumber: syz [ 119.030617][ T1460] usb 9-1: config 0 descriptor?? [ 119.037077][ T1460] usb 9-1: selecting invalid altsetting 0 [ 119.044691][T14022] netlink: 'syz.3.1604': attribute type 2 has an invalid length. [ 119.050363][T14022] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1604'. [ 119.054074][T14022] nbd: must specify a device to reconfigure [ 119.184702][ T40] audit: type=1400 audit(2000000034.289:23565): avc: denied { connect } for pid=14043 comm="syz.0.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 119.272842][ T40] audit: type=1400 audit(2000000034.379:23566): avc: denied { ioctl } for pid=14053 comm="syz.0.1610" path="socket:[34853]" dev="sockfs" ino=34853 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 119.324180][ T5974] Bluetooth: hci3: SCO packet for unknown connection handle 1 [ 119.357407][ T5974] Bluetooth: hci4: command tx timeout [ 119.849703][ T6537] wlan1: Trigger new scan to find an IBSS to join [ 120.053783][ T34] lo speed is unknown, defaulting to 1000 [ 120.056344][ T34] syz2: Port: 1 Link DOWN [ 120.061604][T14051] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1609'. [ 120.063970][ T840] usb 9-1: USB disconnect, device number 4 [ 120.065348][T14051] erspan0: entered promiscuous mode [ 120.164322][T12905] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.170077][T12905] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.174812][T12905] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.178764][T12905] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.238258][T12905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.262799][T12905] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.269191][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.272119][ T6540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.279444][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.281771][ T6535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.394833][T12905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.416607][T12905] veth0_vlan: entered promiscuous mode [ 120.424021][T12905] veth1_vlan: entered promiscuous mode [ 120.441934][T12905] veth0_macvtap: entered promiscuous mode [ 120.446500][T12905] veth1_macvtap: entered promiscuous mode [ 120.460274][T12905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.469061][T12905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.476948][ T6536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.480615][ T6536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.484126][ T6536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.488422][ T6534] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.529473][ T6534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.532793][ T6534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.554501][ T6534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.557012][ T6534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.574485][ T40] audit: type=1400 audit(2000000035.679:23567): avc: denied { mounton } for pid=12905 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 120.721518][T14150] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1617'. [ 120.724385][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1617'. [ 120.728722][T14150] tipc: Started in network mode [ 120.730276][T14150] tipc: Node identity fffffe01, cluster identity 64 [ 120.732352][T14150] tipc: Node number set to 4294966785 [ 120.740980][T14151] ------------[ cut here ]------------ [ 120.743342][T14151] WARNING: CPU: 1 PID: 14151 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 120.748031][T14151] Modules linked in: [ 120.749809][T14151] CPU: 1 UID: 0 PID: 14151 Comm: syz.4.1614 Not tainted syzkaller #0 PREEMPT(full) [ 120.754798][T14151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.759861][T14151] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 120.763304][T14151] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff ae 82 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 51 b4 7e 0e 00 75 0b c6 05 48 b4 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 120.771612][T14151] RSP: 0018:ffffc9000d24f7d0 EFLAGS: 00010246 [ 120.774086][T14151] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.778136][T14151] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 120.781284][T14151] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 120.784477][T14151] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 120.788216][T14151] R13: 1ffff92001a49f0f R14: ffffffff9ae82aa4 R15: 0000000000000016 [ 120.792441][T14151] FS: 00007fd666cc96c0(0000) GS:ffff8880d67b2000(0000) knlGS:0000000000000000 [ 120.796062][T14151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.799223][T14151] CR2: 000000110c3c7e5a CR3: 0000000026f1e000 CR4: 0000000000352ef0 [ 120.802287][T14151] Call Trace: [ 120.803668][T14151] [ 120.804919][T14151] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 120.807464][T14151] ? is_bpf_text_address+0x94/0x1a0 [ 120.809455][T14151] ? kernel_text_address+0x8d/0x100 [ 120.811472][T14151] ? __kernel_text_address+0xd/0x40 [ 120.813970][T14151] ? unwind_get_return_address+0x59/0xa0 [ 120.816223][T14151] ? arch_stack_walk+0xa6/0x100 [ 120.818013][T14151] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 120.819994][T14151] ? stack_depot_save_flags+0x29/0x9c0 [ 120.821644][T14151] ? __lock_acquire+0xb97/0x1ce0 [ 120.823156][T14151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.824979][T14151] ? policy_nodemask+0xea/0x4e0 [ 120.826487][T14151] alloc_pages_mpol+0x1fb/0x550 [ 120.828495][T14151] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 120.830244][T14151] ? drm_syncobj_array_find+0x35/0x3c0 [ 120.831975][T14151] ___kmalloc_large_node+0xed/0x160 [ 120.833829][T14151] ? drm_syncobj_array_find+0x35/0x3c0 [ 120.835595][T14151] __kmalloc_large_node_noprof+0x1c/0x70 [ 120.837457][T14151] ? avc_has_extended_perms+0x47c/0x1090 [ 120.839246][T14151] __kmalloc_noprof.cold+0xc/0x61 [ 120.840871][T14151] drm_syncobj_array_find+0x35/0x3c0 [ 120.842580][T14151] ? kasan_quarantine_put+0x10a/0x240 [ 120.844313][T14151] drm_syncobj_timeline_signal_ioctl+0x226/0x870 [ 120.846883][T14151] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 120.849174][T14151] ? drm_dev_exit+0x41/0x60 [ 120.850627][T14151] drm_ioctl_kernel+0x1f1/0x3e0 [ 120.852153][T14151] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 120.854276][T14151] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 120.855982][T14151] drm_ioctl+0x5c9/0xc30 [ 120.857460][T14151] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 120.859622][T14151] ? __pfx_drm_ioctl+0x10/0x10 [ 120.861175][T14151] ? selinux_file_ioctl+0x180/0x270 [ 120.862823][T14151] ? selinux_file_ioctl+0xb4/0x270 [ 120.864451][T14151] ? __pfx_drm_ioctl+0x10/0x10 [ 120.865982][T14151] __x64_sys_ioctl+0x18e/0x210 [ 120.867559][T14151] do_syscall_64+0xcd/0x4e0 [ 120.869025][T14151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.870887][T14151] RIP: 0033:0x7fd665d8ec29 [ 120.872315][T14151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.878260][T14151] RSP: 002b:00007fd666cc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.880883][T14151] RAX: ffffffffffffffda RBX: 00007fd665fd6090 RCX: 00007fd665d8ec29 [ 120.883375][T14151] RDX: 0000200000000100 RSI: 00000000c01864cd RDI: 0000000000000006 [ 120.885768][T14151] RBP: 00007fd665e11e41 R08: 0000000000000000 R09: 0000000000000000 [ 120.888245][T14151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.890624][T14151] R13: 00007fd665fd6128 R14: 00007fd665fd6090 R15: 00007ffcf2f26168 [ 120.893151][T14151] [ 120.894155][T14151] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.896445][T14151] CPU: 1 UID: 0 PID: 14151 Comm: syz.4.1614 Not tainted syzkaller #0 PREEMPT(full) [ 120.899422][T14151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.902899][T14151] Call Trace: [ 120.904023][T14151] [ 120.905015][T14151] dump_stack_lvl+0x3d/0x1f0 [ 120.906478][T14151] vpanic+0x6e8/0x7a0 [ 120.907764][T14151] ? __pfx_vpanic+0x10/0x10 [ 120.909241][T14151] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 120.911141][T14151] panic+0xca/0xd0 [ 120.912340][T14151] ? __pfx_panic+0x10/0x10 [ 120.913753][T14151] check_panic_on_warn+0xab/0xb0 [ 120.915350][T14151] __warn+0xf6/0x3c0 [ 120.916626][T14151] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 120.918604][T14151] report_bug+0x3c3/0x580 [ 120.920005][T14151] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 120.921943][T14151] handle_bug+0x184/0x210 [ 120.923339][T14151] exc_invalid_op+0x17/0x50 [ 120.924806][T14151] asm_exc_invalid_op+0x1a/0x20 [ 120.926378][T14151] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 120.928505][T14151] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f e9 ff ae 82 09 83 fe 0a 0f 86 0a fe ff ff 80 3d 51 b4 7e 0e 00 75 0b c6 05 48 b4 7e 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 120.934549][T14151] RSP: 0018:ffffc9000d24f7d0 EFLAGS: 00010246 [ 120.936477][T14151] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 120.938991][T14151] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040cc0 [ 120.941450][T14151] RBP: 0000000000000016 R08: 0000000000000005 R09: 0000000000000009 [ 120.943913][T14151] R10: 0000000000000016 R11: 0000000000000000 R12: 0000000000040cc0 [ 120.946380][T14151] R13: 1ffff92001a49f0f R14: ffffffff9ae82aa4 R15: 0000000000000016 [ 120.948895][T14151] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 120.950823][T14151] ? is_bpf_text_address+0x94/0x1a0 [ 120.952463][T14151] ? kernel_text_address+0x8d/0x100 [ 120.954141][T14151] ? __kernel_text_address+0xd/0x40 [ 120.955790][T14151] ? unwind_get_return_address+0x59/0xa0 [ 120.957583][T14151] ? arch_stack_walk+0xa6/0x100 [ 120.959167][T14151] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 120.961179][T14151] ? stack_depot_save_flags+0x29/0x9c0 [ 120.962899][T14151] ? __lock_acquire+0xb97/0x1ce0 [ 120.964466][T14151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.966342][T14151] ? policy_nodemask+0xea/0x4e0 [ 120.967878][T14151] alloc_pages_mpol+0x1fb/0x550 [ 120.969463][T14151] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 120.971159][T14151] ? drm_syncobj_array_find+0x35/0x3c0 [ 120.972901][T14151] ___kmalloc_large_node+0xed/0x160 [ 120.974545][T14151] ? drm_syncobj_array_find+0x35/0x3c0 [ 120.976265][T14151] __kmalloc_large_node_noprof+0x1c/0x70 [ 120.978071][T14151] ? avc_has_extended_perms+0x47c/0x1090 [ 120.979862][T14151] __kmalloc_noprof.cold+0xc/0x61 [ 120.981449][T14151] drm_syncobj_array_find+0x35/0x3c0 [ 120.983109][T14151] ? kasan_quarantine_put+0x10a/0x240 [ 120.984785][T14151] drm_syncobj_timeline_signal_ioctl+0x226/0x870 [ 120.986760][T14151] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 120.988912][T14151] ? drm_dev_exit+0x41/0x60 [ 120.990372][T14151] drm_ioctl_kernel+0x1f1/0x3e0 [ 120.991929][T14151] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 120.993968][T14151] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 120.995670][T14151] drm_ioctl+0x5c9/0xc30 [ 120.997025][T14151] ? __pfx_drm_syncobj_timeline_signal_ioctl+0x10/0x10 [ 120.999138][T14151] ? __pfx_drm_ioctl+0x10/0x10 [ 121.000678][T14151] ? selinux_file_ioctl+0x180/0x270 [ 121.002315][T14151] ? selinux_file_ioctl+0xb4/0x270 [ 121.003933][T14151] ? __pfx_drm_ioctl+0x10/0x10 [ 121.005454][T14151] __x64_sys_ioctl+0x18e/0x210 [ 121.006973][T14151] do_syscall_64+0xcd/0x4e0 [ 121.008412][T14151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.010311][T14151] RIP: 0033:0x7fd665d8ec29 [ 121.011696][T14151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.017630][T14151] RSP: 002b:00007fd666cc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.020180][T14151] RAX: ffffffffffffffda RBX: 00007fd665fd6090 RCX: 00007fd665d8ec29 [ 121.022661][T14151] RDX: 0000200000000100 RSI: 00000000c01864cd RDI: 0000000000000006 [ 121.025165][T14151] RBP: 00007fd665e11e41 R08: 0000000000000000 R09: 0000000000000000 [ 121.027679][T14151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.030185][T14151] R13: 00007fd665fd6128 R14: 00007fd665fd6090 R15: 00007ffcf2f26168 [ 121.032681][T14151] [ 121.034348][T14151] Kernel Offset: disabled [ 121.035730][T14151] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:33:12 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffea00017baa80 RCX=ffffc900304d0000 RDX=1ffff92000b1ef24 RSI=ffffffff82097b34 RDI=ffffea00017baa80 RBP=0000000000000000 RSP=ffffc900058f7770 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffea00017baa80 R14=ffffc900058f7908 R15=0000000000000000 RIP=ffffffff81bb9d80 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd666cea6c0 ffffffff 00c00000 GS =0000 ffff8880d66b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000ac9000 CR3=0000000026f1e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a36afaa600 000055a36afaa600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff18cf30d0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f636f6c6c615f5f 20343231353a632e 636f6c6c615f6567 61702f6d6d207461 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65747379733d7478 65746e6f63742074 5f6d64617379733a 725f6d6461737973 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a746f6f723d7478 65746e6f63732031 3d6f6e6920226c74 6365737566223d76 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65642022736e6f69 7463656e6e6f632f 657375662f73662f 7379732f223d6874 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61702022726f7475 636578652d7a7973 223d6d6d6f632035 303932313d646970 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8564c115 RDI=ffffffff9b118160 RBP=ffffffff9b118120 RSP=ffffc9000d24f140 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b118120 R15=ffffffff8564c0b0 RIP=ffffffff8564c13f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd666cc96c0 ffffffff 00c00000 GS =0000 ffff8880d67b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3c7e5a CR3=0000000026f1e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffc000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf2f26676 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcf2f26676 00007ffcf2f2667c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd665e12e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd665e12e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd665e12e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd665e12e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd665e12f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd665e12fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000032647261632f 6972642f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000011475142400c 4a51470c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=1ffff9200092bf30 RCX=ffffffff8b8a7c6d RDX=ffff888024eb0000 RSI=000000000000003f RDI=0000000000000005 RBP=ffffc9000495fa58 RSP=ffffc9000495f960 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000002 R11=0000000000000000 R12=ffff88803933e000 R13=0000000000000002 R14=ffff88803933e218 R15=ffff88801eec7090 RIP=ffffffff81bb9711 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f37119e6880 ffffffff 00c00000 GS =0000 ffff8880d68b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558c95f5c8 CR3=0000000024e2e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000004101011 Opmask02=00000000ffffffff Opmask03=0000000000400004 Opmask04=00000000ffff7fff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005620221eedd0 00005620221eddd0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005620221eddd0 00005620221eddd0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562021f963b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005620221e8698 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732553516e7483 737325563088e559 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c964f96f244df56e 73737376117152a8 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000562543fba5b0 0000000000000021 0000000000000030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001d1 372f642e73656c75 000056202200322d 6332692f7665642d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=ffff8880248bd370 RCX=ffffffff95e2c2d8 RDX=0000000000000000 RSI=ffff8880248bd3e8 RDI=ffff8880248bc880 RBP=0000000000000000 RSP=ffffc9002541f340 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000078 R11=0000000000000001 R12=ffff8880248bd3e8 R13=ffff8880248bc880 R14=0000000000000003 R15=0000000000000001 RIP=ffffffff8197b807 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055558c944500 ffffffff 00c00000 GS =0000 ffff8880d69b2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcc3fd056c0 CR3=000000003455c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe972b8960 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe972b8ae6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe972b8ae6 00007ffe972b8aec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc3f012e6e ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc3f012e7b ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc3f012e75 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc3f012e89 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc3f012f0f ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcc3f012fed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000