last executing test programs: 1m18.587867232s ago: executing program 3 (id=4): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) r4 = getpid() r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r4, 0x0, 0x7fff, 'syz1\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x3, 0x2, 0x2}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1}) 1m17.681598264s ago: executing program 3 (id=17): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_to_bridge\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x98}, 0x1, 0x0, 0x0, 0x8800}, 0x4000880) 1m17.681360611s ago: executing program 3 (id=18): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x10000, 0x109041) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) fstatfs(r0, &(0x7f0000000000)=""/186) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x1, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x5]}}) 1m17.680737906s ago: executing program 3 (id=19): r0 = socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x18b500f, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x1000405, 0xfffffffe, 0xfe, 0xfffffffc, 0x0, 0x80000}}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async, rerun: 64) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaa95812c26051d0a9c0000001c2ceefd8000000000000000000000000000bbfe8000000000000000000000000000aa0000000e0000000080000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) (rerun: 64) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={0x1, @bcast, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1000, 0x4, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) syz_extract_tcp_res(&(0x7f00000000c0), 0x401, 0x2) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000000080)={0x4, 0x8}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000000000611160000000000018000000000000000000000000000000950000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 1m17.621503161s ago: executing program 3 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x9, 0x6, 0x18, @empty, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x700, 0x91, 0x401}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x8c01, 0x55007}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x40000) 1m16.461272382s ago: executing program 3 (id=23): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x1, 0x0, 0x80000000, 0x1, {{0x1b, 0x4, 0x3, 0x3, 0x6c, 0x64, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@generic={0x88, 0x6, "a320f2c9"}, @noop, @generic={0x44, 0xd, "989dee9872dfa1301f662c"}, @lsrr={0x83, 0x7, 0xd7, [@private=0xa010100]}, @lsrr={0x83, 0xf, 0x27, [@multicast1, @empty, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0x6a, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6869}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x5}, {@multicast1, 0x7}, {@local, 0x5}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0x0, r0}) clock_gettime(0x1, &(0x7f0000004f40)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r4], 0x2c}}, 0x20008000) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = timerfd_create(0x8, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x40000032, r7, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r9, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r9, 0x0, r7, 0x0, 0x7ffff000, 0x1) timerfd_gettime(r6, &(0x7f0000000000)) sendto$inet6(r5, 0x0, 0x0, 0x20004011, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000040)=0xde) 1m16.456624983s ago: executing program 32 (id=23): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x1, 0x0, 0x80000000, 0x1, {{0x1b, 0x4, 0x3, 0x3, 0x6c, 0x64, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@generic={0x88, 0x6, "a320f2c9"}, @noop, @generic={0x44, 0xd, "989dee9872dfa1301f662c"}, @lsrr={0x83, 0x7, 0xd7, [@private=0xa010100]}, @lsrr={0x83, 0xf, 0x27, [@multicast1, @empty, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0x6a, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6869}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x5}, {@multicast1, 0x7}, {@local, 0x5}]}]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}, 0x0, r0}) clock_gettime(0x1, &(0x7f0000004f40)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r4], 0x2c}}, 0x20008000) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = timerfd_create(0x8, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x1, 0x40000032, r7, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r9, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r9, 0x0, r7, 0x0, 0x7ffff000, 0x1) timerfd_gettime(r6, &(0x7f0000000000)) sendto$inet6(r5, 0x0, 0x0, 0x20004011, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000040)=0xde) 1m12.060764286s ago: executing program 2 (id=95): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r6, 0x25, 0x4}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vxcan1\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x1, 0x19, {{0x19, 0x4, 0x3, 0x15, 0x64, 0x66, 0x0, 0xb, 0x2f, 0x0, @private=0xa010101, @multicast1, {[@end, @lsrr={0x83, 0x27, 0x63, [@broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @multicast2, @multicast2, @multicast1, @multicast1, @broadcast]}, @lsrr={0x83, 0x7, 0xa9, [@broadcast]}, @end, @lsrr={0x83, 0xf, 0xf2, [@dev={0xac, 0x14, 0x14, 0x11}, @broadcast, @multicast1]}, @lsrr={0x83, 0x7, 0xd5, [@broadcast]}, @generic={0x83, 0x9, "1fa58f20656bd7"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x1, 0xfffffff6, 0x53, @mcast1, @loopback, 0x20, 0x7, 0x6, 0x4}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r5, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0], 0x0, 0xd1, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={r5, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001340)={0x5a0, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}]}}, {{0x8, 0x1, r13}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x8, 0x10, 0x1}, {0x10, 0x40, 0xb}, {0x8000, 0x7f, 0x1, 0x8}]}}}]}}, {{0x8, 0x1, r14}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}]}}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000007c0)="f30f1efeb9800000c00f3235008000000f3066baf80cb8ccf9f4858ec866bafc0ced3665420f0010b980090000b8056aac27ba2ae7b7480f303647f40fb1970f008c40000020e035200000000f22e02665650fc75cbb06cf44a40013eb00000066ba2000ec0200000000410f60ee", 0x6e}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000680)={{0x100000, 0x80a0000, 0x8, 0x8, 0x3, 0xd2, 0x40, 0x7, 0x0, 0x2e, 0x19, 0x9}, {0x10000, 0x2, 0x3, 0x0, 0x40, 0x7, 0x7f, 0x6, 0x5, 0x0, 0x3, 0x9}, {0x1000, 0xdddd0000, 0xf, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0xa7, 0x8, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x3, 0x2, 0x1, 0xf8, 0x8, 0x9, 0xe, 0xf1}, {0xeeef0000, 0x2000, 0xc, 0x3, 0x15, 0x2, 0x2b, 0x7f, 0x1, 0x83, 0xf7, 0x3}, {0x1000, 0x80a0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0x9f, 0x80, 0xff, 0x1, 0x7}, {0x8080000, 0x1000, 0x4, 0x5, 0xff, 0x5, 0x4, 0x3, 0x2, 0x81, 0x6, 0x70}, {0x100000, 0xeeef0000, 0xe, 0x5, 0xf, 0x40, 0x1, 0x34, 0x2, 0x4, 0xf0, 0x9}, {0x4, 0x33}, {0x2, 0x9}, 0x80000031, 0x0, 0x6000, 0x202025, 0x6, 0x0, 0x3000, [0x6800000000000000, 0x9, 0x5e, 0x3]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r18 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000004002, 0x0) dup(r18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$snapshot(r1, &(0x7f0000000040)="2ab8a85f940cf7fdbbb07fcf1d1a6a8d37bd381b", 0x14) 1m11.850876822s ago: executing program 2 (id=102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01040000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000030000000180a0101000b000000000000010000000900020073797a30000000f30800010073797a30"], 0xb8}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x30, r4, 0x401, 0x70bd27, 0x25dfdafe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004040}, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x54, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xc}}]}, 0x54}}, 0x0) 1m11.830951926s ago: executing program 2 (id=105): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa}, {0x0, 0x800000000000000, 0x0, 0x0, 0x9, 0x8000000000000001, 0x3}, {}, 0x0, 0x6e6bb7, 0x0, 0x1}}, 0xb8}}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x3}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f00000000c0)=0x2, 0x4) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x4090, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa}, {0x0, 0x800000000000000, 0x0, 0x0, 0x9, 0x8000000000000001, 0x3}, {}, 0x0, 0x6e6bb7, 0x0, 0x1}}, 0xb8}}, 0xc000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x3}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f00000000c0)=0x2, 0x4) (async) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x4090, 0x0) (async) 1m11.829452519s ago: executing program 2 (id=106): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) io_setup(0xeb0, &(0x7f0000000140)=0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) io_submit(r1, 0x1, &(0x7f0000001780)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "07bbfe1b9c5ad2888187a9223e00", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002200), 0x800004, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2ac0b2, &(0x7f0000000340)={[{@usrquota}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) r6 = open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x480000, 0xc) renameat2(r5, &(0x7f00000000c0)='./file1\x00', r6, &(0x7f00000001c0)='./file1\x00', 0x5) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1m11.621257148s ago: executing program 2 (id=110): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1m11.329565898s ago: executing program 2 (id=114): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000007c0)=0x9, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x0, r0}) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x40000) 1m11.297987512s ago: executing program 33 (id=114): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000007c0)=0x9, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x0, r0}) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x40000) 45.300902875s ago: executing program 5 (id=620): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r1, 0x0, 0x7fff, 'syz1\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000030000006103aacc1565666e00000000fdffffff8520cf1f8b6000000300000018440000f807ffff00000000000000009500000000000000a057160da847e2899b6cb803a5b5d6dc8004a5f1811362930f2626028e4aad23708e1ea5fc8eb7d8131f0e45f2ee028c1de435aa07ec03034e0f1bb0d352e6d2ad9ab534ed1d935b1a4167f1e3928daf2ff8"], &(0x7f0000000280)='GPL\x00', 0x3, 0xf3, &(0x7f00000003c0)=""/243, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x3, 0x2, 0x2}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1}) 45.240934645s ago: executing program 5 (id=621): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0xf31, 0x1000000, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0x2}, {0x0, 0xf}}}, 0x24}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x2000}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioperm(0x0, 0x2, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x6, 0x0) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000bbbbbbbbbbbbffffffffffff88a84d008100660008004519001c00e4000008119078e0000001ac1e0101c0beef69fefbccb8"], 0x36) 45.171060087s ago: executing program 5 (id=622): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0xe8, 0xffffffffffffffd1, 0x6, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r6, 0x4, 0x4}}, {0x3, 0x537, 0x3a, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xc7\xefym\xf0<:\xb3\xa1L\x8c6\xb4\xb9\xdbWa\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, @empty, @empty, 0x40, 0x20, 0x2, 0x2}}) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4], 0x100, 0x42, 0x8}) 45.050821928s ago: executing program 5 (id=623): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x6125}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file4\x00', 0x2644a0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file1/file4/file5\x00', 0x0, 0x4, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000480)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480efec5266bafc0cfc0c0c0066efc7442402d8650000c7442406000000000f21f41c7824f3420fc77526ec2e64f30f5a8e6c000000", 0x81}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x80000000004, 0x8000000000000001, 0x80000001, 0x3, 0x200, 0x1000004, 0xc, 0x9, 0x100000000037, 0x7f, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000400)="66b96d0a000066b80600000066ba000000000f3065660f298df6ffbaf80c66b8caaa1b8b66efbafc0cb80e00ef640fc75f832e869bfeff0fc7ad008067670f01c99a00007500ba420066edea0078f600", 0x50}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000000c0)=@x86={0x10, 0x3, 0x6, 0x0, 0x2, 0x8, 0x8, 0xff, 0x6, 0x3, 0x7, 0xf7, 0x0, 0x3, 0x5, 0x2, 0x2, 0x2, 0x2, '\x00', 0x0, 0x10000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) landlock_restrict_self(r2, 0x0) 44.924472558s ago: executing program 5 (id=624): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) sendfile(r0, r0, 0x0, 0x2) syz_usb_connect$uac1(0x6, 0x7, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x1}]}}, 0x0, 0x26}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x9c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x6c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x10, 0x1, 0x4}}, @TCA_GRED_PARMS={0x38, 0x1, {0x3, 0xfffffffc, 0x1, 0xa, 0x4ec33dce, 0x8001, 0x6, 0x4, 0x3, 0xffffffff, 0x9, 0x1f, 0x2, 0x5c, 0x6, 0x9f3b}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x8}, @TCA_GRED_LIMIT={0x8, 0x5, 0x6}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_MAX_P={0x8}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$sg(0x0, 0x81, 0x109400) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x29, 0x301, 0x70bd26, 0x25dfdbfb, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x0) r4 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x5) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x2, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) fadvise64(r0, 0x18, 0x0, 0x4) 44.626438717s ago: executing program 5 (id=629): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$sndctrl(0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r1, 0x0, 0x7fff, 'syz1\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000030000006103aacc1565666e00000000fdffffff8520cf1f8b6000000300000018440000f807ffff00000000000000009500000000000000a057160da847e2899b6cb803a5b5d6dc8004a5f1811362930f2626028e4aad23708e1ea5fc8eb7d8131f0e45f2ee028c1de435aa07ec03034e0f1bb0d352e6d2ad9ab534ed1d935b1a4167f1e3928daf2ff8"], &(0x7f0000000280)='GPL\x00', 0x3, 0xf3, &(0x7f00000003c0)=""/243, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x3, 0x2, 0x2}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1}) 44.602082833s ago: executing program 34 (id=629): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$sndctrl(0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r1, 0x0, 0x7fff, 'syz1\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000030000006103aacc1565666e00000000fdffffff8520cf1f8b6000000300000018440000f807ffff00000000000000009500000000000000a057160da847e2899b6cb803a5b5d6dc8004a5f1811362930f2626028e4aad23708e1ea5fc8eb7d8131f0e45f2ee028c1de435aa07ec03034e0f1bb0d352e6d2ad9ab534ed1d935b1a4167f1e3928daf2ff8"], &(0x7f0000000280)='GPL\x00', 0x3, 0xf3, &(0x7f00000003c0)=""/243, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x3, 0x2, 0x2}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1}) 2.363426271s ago: executing program 1 (id=1498): mkdir(&(0x7f0000000000)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000200)={0x16, 0x17, 0x2, {0xd, './file0/file0'}}, 0x16) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') 2.362733473s ago: executing program 1 (id=1499): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtaction={0x32f4, 0x30, 0x2, 0x870bd2d, 0x0, {0x9}, [{0x11c, 0x1, [@m_bpf={0x118, 0x13, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x7, 0x5, 0xffff, 0x6}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x5, 0x40, 0x0, 0x4}, {0x7, 0x8, 0x3, 0x3}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}]}, {0xb2, 0x6, "6da172b3148c992ebf97c798d89cb9f74c905fb3a0905d9ecdf5fd27ccd5bd75bab95f4a03878dcf97cdfe3c51369f678a8cd35a12172f543f039f948d5294565966375b38baa6767565ec4f972dbfada15317aed9efcd89f7f256e235bdba1c8355c4ff03a780c43f71db01d3c86c7bde62577b42091e5c9dfabfb95be62dc99648e29c61604b8c96882a5b4cd3b7da09ded39e1614d0ea34d7e7bf34480158f6aeba46bcc377d355cb036c04ce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x2fb0, 0x1, [@m_sample={0x198, 0x1c, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffff8, 0x100, 0x1, 0x0, 0x2ae}}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xd}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x10000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7f, 0x4, 0xb5, 0x3}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0x102, 0x6, "9b9e3a1404eb21ed15c332ff5d54d14df43e6a4c38324387711419b0ec45180173a397dfa9edfec6d1e4fc41fc2e30ac59b9a9eb8b32cd407c70b89a29152b7f613d102e651caec583ace089a00aa41f3a791f02102a18489d2c95df315b1f13b68fa7f33024e5e289ebe443736fb2b6cc42c7a5c0880cdbbe1371517520b98fe5a8eb62879c478c3282ee4a5082d7788895ba7cb77455144d939d6b35f5560029635cebc91f9ea390ef0fa3c35d31a82586f558b29f555832e6ac44728b28ace8e4873301060fa3a31fe6e04c7763efa0173a7e5fe0cfb57fc0af2290ac742ba32390c0e383c08335e231c05346f23b25daabc1f2a0d917c981c5764909"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x7}}}}, @m_csum={0x160, 0xc, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x401, 0x4, 0x8, 0x187b6efd}, 0x7f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfffffffe, 0xffffffffffffffff, 0x7fff, 0x12}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7, 0xfffffffffffffffc, 0x5, 0x8000}, 0x29}}]}, {0xde, 0x6, "8d29c24b6bc8237184b5df7b25bf1847225765e6d62f3635bf05464693d19bc9707d5e51eddc08db551972873b7eed9b39889942e9e408cf75b142f738e2a4a2f8f73c55fd21ea942da8ed90eb8833db96d3d1d817cad1d9a01c20c9e17bede5e02dbe9f1f242a27445ee33ca75bd901792985a6b43210c7e1cc728578281e637b8648ebcdd34007620c2fac4c0fbdfca10067b8058ebbd5521dd2251beb1edc29654e663ff2150a82384e86b5f8c65cdc9d3d4feca364aead2503117a9e0f5393c49e8444f9a1ea5fb442542f59bf8c9c05beb4885a33ce8bd5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0xe8, 0x11, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x5, 0x2, 0x7, 0x1}, 0x5}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7a, 0x81, 0x1, 0x10, 0x80000001}, 0x9}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x81, 0xffffffffffffffff, 0x6, 0x9}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x10, 0x20000000, 0x1, 0x101}, 0x69}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x5, 0x8, 0x400}, 0x68}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x20000000, 0x3ff, 0x3}, 0x13}}]}, {0x12, 0x6, "5f12b3669bec73af12318254baae"}, {0xc}, {0xc, 0x8, {0x0, 0x5}}}}, @m_police={0x19e4, 0x7, 0x0, 0x0, {{0xb}, {0x19b4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x28000000, 0x5, 0x10, 0x3, 0x14, {0xfe, 0x1, 0x5, 0x9, 0x7, 0xb42f}, {0xd, 0x2, 0x6, 0x4, 0x927e, 0x1}, 0x5, 0x1, 0x2}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xcfb8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x218, 0x7, 0x3, 0x2, 0xffff, {0x2, 0x2, 0x2d4, 0x81b, 0x401}, {0x6, 0x1, 0x4, 0x6, 0x3, 0x1ff}, 0x1, 0x4, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0xed}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7ff, 0xffffffa5, 0xa1d, 0x7cf, 0x47a, 0x6, 0x401, 0x0, 0xc477, 0x4, 0x8, 0x8, 0x0, 0x1, 0x7ff, 0x58b, 0x41, 0x7, 0x26, 0x3, 0x2, 0x2, 0xfffffffd, 0x7, 0x0, 0x401, 0x401, 0x5, 0x5, 0x40, 0xa, 0x4, 0xe, 0x7, 0x3, 0x7ff, 0xfffffc01, 0xe, 0x5, 0x0, 0x399f, 0x382, 0x89, 0x9, 0x2, 0xfffffff8, 0x7, 0x800, 0xfffffffb, 0xfffffff3, 0x80000001, 0x8001, 0x3bcce8ec, 0x7f, 0x200, 0x3, 0xd7a, 0xd3c, 0x6, 0x500000, 0x6, 0xd9, 0x67c9838a, 0x6, 0xbc, 0x78a, 0x6, 0x1, 0x1, 0x2b77, 0x4, 0xf, 0x1, 0x8, 0x6, 0x3, 0x7, 0x9, 0x4, 0x7, 0x8, 0x3, 0x4, 0x6, 0x7, 0x68, 0x7fffffff, 0x7ff, 0x7, 0x8, 0x1, 0x8, 0x1, 0xffff, 0x7fff, 0xffff6e7e, 0x3, 0xffffff7f, 0x7fff, 0x80000000, 0x7ff, 0x18, 0x3, 0x1, 0x5, 0x1, 0xb, 0x4, 0x3, 0x1, 0x9e, 0x1ff, 0x8001, 0x4000009, 0x9, 0x7fffffff, 0x624, 0x0, 0x0, 0x81, 0x2, 0x0, 0x5, 0x1, 0x8, 0x2, 0x3, 0x7, 0xffff, 0x1, 0x9, 0x0, 0x27c5, 0x3, 0x8, 0x3, 0x4, 0x3, 0x6, 0x1, 0x7fff, 0xffff, 0xfffffffe, 0x98, 0x9, 0x3e9, 0x1b, 0xa5, 0x1, 0x6, 0x4, 0x81, 0x8, 0x9, 0x0, 0x3, 0x1, 0x7f, 0x1, 0x28a, 0x101, 0x0, 0x1, 0x5, 0x8, 0x3, 0x6, 0x3, 0x1c0000, 0x6, 0x11, 0x80000001, 0x6, 0x2, 0x7, 0x8, 0x5, 0x9, 0x7, 0x3, 0x4, 0xd, 0x7fffffff, 0x4, 0x3, 0x8, 0x0, 0x5, 0x8fc, 0x9, 0x9, 0x3, 0x6, 0x9, 0xfffffff1, 0xc000000, 0x7, 0x4, 0x2, 0x2, 0x4, 0x1, 0xfffff1a3, 0x53, 0x0, 0xa22, 0x10000, 0xfffff801, 0x8, 0x9, 0x55d, 0x10000, 0x8, 0x5, 0x2, 0x8, 0x90e6, 0x1ff, 0x1, 0x75, 0x7, 0x3, 0x7, 0x1ff, 0x0, 0x6, 0x20000000, 0x5, 0x70, 0xbd0, 0xff, 0x0, 0x80000001, 0x3, 0xf04, 0x5, 0x7, 0x4, 0x94d0caad, 0x4, 0xe64, 0x5, 0xca53, 0x100, 0x1, 0xe91, 0x800, 0x47, 0x6, 0x7, 0x9, 0x80, 0x2, 0x5, 0x9]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x2, 0x6, 0x9, 0x2, 0x5, 0x9, 0xb2c, 0x6, 0x3ff, 0x9, 0x1ff, 0x2, 0x7, 0x4, 0x9, 0x3f5, 0x6, 0xd, 0x6, 0x2, 0x6, 0x4, 0x4, 0x0, 0x101, 0x5, 0x2, 0x19200000, 0x81, 0x7, 0xfff, 0x10001, 0xbb2, 0x7, 0x9, 0x2, 0x2, 0x3, 0xb5, 0x7, 0x3, 0xd, 0x3, 0x2, 0x3ff, 0xd, 0x6, 0xffffff2d, 0x2, 0x6, 0x9, 0x401, 0x2, 0x3, 0xffffffff, 0x35a, 0x800, 0x0, 0x0, 0x401, 0x1000, 0x2, 0x4, 0x8, 0x10001, 0xff, 0x1, 0x5, 0x800, 0x700, 0x8, 0xfff, 0x2, 0x6, 0xe4, 0x2, 0x100, 0x3, 0x5, 0x699, 0x6, 0x4, 0x3, 0x0, 0xff, 0xffffffff, 0x5, 0x0, 0x8, 0x0, 0x4d, 0x0, 0x3, 0x6, 0xc, 0x5, 0x7, 0x3, 0xd, 0xf694, 0x4, 0x9, 0x1, 0x8, 0x1, 0x0, 0x7f, 0x0, 0x2, 0xffff, 0x7, 0x9, 0xbcd8, 0x5, 0x6, 0x2, 0x9, 0x77, 0x1, 0x6, 0xfffffff7, 0xfffffffd, 0x5, 0x6b5c, 0x80000000, 0xb, 0xfffff000, 0xd, 0x80000000, 0x0, 0x5, 0x7, 0x8, 0xff, 0xfffffff8, 0x41, 0x7, 0xb023, 0x5, 0x8, 0x5, 0x4cc, 0xffff, 0x28fe, 0x623, 0xfff, 0x5202, 0x100, 0x100, 0x200, 0x3, 0x10000, 0x6, 0x80000000, 0x3, 0x8, 0x8, 0x6, 0x100, 0x3, 0x5, 0x7, 0x7fffffff, 0x48, 0x5, 0x6, 0x7fffffff, 0x3, 0x2, 0xf, 0x7, 0x5eab, 0x3, 0xffffffff, 0x7, 0x8, 0x8b5, 0x1000, 0x8, 0xfffffffe, 0x4, 0x6, 0x200, 0x5, 0x5, 0x2, 0x45, 0x496c7995, 0x8, 0x8, 0x362, 0xffffffff, 0x1, 0xe, 0x6, 0x1, 0x3ff, 0x2, 0x800, 0x53, 0xffff0001, 0x200, 0x28dc5cd9, 0x7e, 0x9, 0xca41, 0x6, 0x101, 0x7d, 0x3, 0x7fff, 0x7f, 0x45, 0xf4, 0xfffffff9, 0x7, 0x80000000, 0x3, 0xa, 0xad, 0x2000, 0xfffffff9, 0xb6c, 0x1, 0x40, 0x4, 0x2, 0x0, 0x0, 0x9, 0x6, 0x4, 0x6, 0x4, 0x4, 0x9, 0x6, 0xfffffffc, 0x3, 0x6, 0x10, 0x0, 0x4, 0x4, 0xffffffff, 0xffff, 0xffff, 0x6, 0x6, 0x4, 0x3, 0x10, 0xc9, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1, 0x8, 0xfa9, 0x9b, 0x800, 0x1, 0x4, 0x1ff, 0x5, 0x8, 0x400, 0x6a5, 0x101, 0x1, 0x80000000, 0x5, 0x10000, 0x3ff, 0x6, 0x7, 0x4f7, 0x8001, 0x4, 0xffff, 0x0, 0x4, 0xc, 0xffffffff, 0x9, 0xfffffffc, 0x9, 0x81, 0x8, 0x9, 0x5, 0x401, 0x10000, 0xa5, 0x1, 0x5, 0x4, 0x6, 0x7ff, 0x2, 0x383, 0x6f3, 0x10, 0x0, 0xd, 0x7, 0x1a7, 0x8, 0x0, 0x10000, 0x8, 0x580, 0x4, 0x1, 0x4, 0x3ff, 0x0, 0x2, 0x8, 0x9, 0x4, 0x2, 0x7c, 0x400, 0x8, 0x100, 0x0, 0xb, 0x18, 0x9, 0x0, 0xfffff34e, 0x5, 0x8000, 0x7fffffff, 0x945a, 0x5426, 0x4, 0x3, 0x2, 0x6, 0x9, 0xf, 0x40, 0xa173, 0x23ba, 0x3, 0x8, 0x24, 0xa, 0x3, 0x10001, 0x7, 0x3, 0x8, 0x3, 0xb, 0x10000, 0xe7, 0x0, 0x7, 0x2, 0x1, 0x2, 0x7, 0x100, 0x0, 0x3, 0x3, 0x6, 0xdd, 0x0, 0x5, 0xf27, 0xff6, 0x4, 0x4, 0x1626, 0x8, 0xb889, 0xc, 0x313, 0x6, 0x40, 0x8, 0x4, 0x7, 0x8, 0x4, 0x7, 0x100, 0x80000001, 0x2, 0x8, 0x1, 0x9, 0xffffffdd, 0x80000000, 0xfffffff8, 0x4d5, 0xff, 0x6, 0x9, 0x7, 0x6, 0x401, 0x1, 0x7f, 0x4, 0x23, 0x7, 0xe, 0x77, 0x800, 0x3, 0x3, 0xb, 0x5, 0x5, 0xff, 0x9a4, 0x8, 0x3, 0x80000001, 0x3, 0x3, 0x5, 0x5a, 0x4, 0x757, 0x1, 0x8, 0x7f, 0xf34, 0x0, 0x8, 0x6, 0xfffffffb, 0xc33, 0x3, 0x1, 0xa4c, 0x2, 0x3, 0xd, 0x3, 0xe, 0x0, 0xfffffff8, 0x1046, 0x5, 0x40, 0xde01, 0x7, 0xa, 0x7, 0x3, 0xfffffffb, 0x0, 0x0, 0x400, 0x6, 0x6, 0x98, 0x7, 0xffffffff, 0x3, 0x40, 0x81, 0x3b0, 0x5, 0x5, 0x1142db5d, 0xff, 0xfffffffa, 0x8, 0xfc1, 0x0, 0xfffffff9, 0x331, 0x4, 0x1000, 0x0, 0xe, 0x2, 0x0, 0x14, 0xef, 0xe, 0x4000000, 0x20000000, 0x3b87, 0x2, 0x2, 0x5, 0x9, 0x8001, 0x3, 0x400, 0x8, 0x7, 0x4, 0x8, 0x100, 0xfff, 0x7, 0x33, 0x9, 0x1ff, 0x1, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0x4, 0x5cab, 0x0, 0x4, 0x2, 0x703f, 0x1, 0x7fff, 0xf35, 0x0, 0xdc, 0x4978, 0x4, 0x7, 0x17, 0x2, 0x8, 0x4, 0x7ff, 0x0, 0x10000, 0x101, 0x3ff, 0x100, 0x2, 0x942, 0x8, 0x3, 0x9, 0x1, 0x10000, 0x40, 0x8, 0xc8, 0x8, 0x668000, 0x13f, 0x8, 0x4, 0xfc7, 0xffff, 0x4000000, 0xf, 0x1, 0x1, 0x5, 0x101, 0x10000, 0x100, 0x8001, 0x3, 0x1, 0x3ff, 0x3, 0x80, 0x4, 0x6, 0x3ff, 0x101, 0x4, 0x8, 0xc6, 0x6, 0x1, 0xf, 0x2, 0x8, 0x100, 0x100, 0x3ff, 0x7, 0xc, 0x5, 0xff, 0x401, 0x8, 0x1ff, 0x2, 0x3204, 0x1, 0x7, 0x10001, 0xafc, 0x1, 0x0, 0x2, 0xa, 0xb, 0x1250, 0x313b9945, 0x8, 0x10001, 0x2, 0x7, 0xfffffffd, 0xffffb14b, 0x1, 0x2, 0x800, 0x82c3, 0xb, 0xfffffffa, 0x0, 0xa8, 0x7, 0x7fff, 0x6, 0x1b, 0x4, 0x3fffc0, 0xd, 0x9, 0x81, 0x8, 0x2, 0x8, 0x0, 0x0, 0x8, 0x5, 0x0, 0x4, 0x0, 0xa, 0x80000001, 0xcb6, 0x6, 0xe, 0x4, 0x5, 0x9, 0x1, 0x803, 0x7, 0x3, 0x80, 0x8, 0x80000001, 0xbf67, 0xc, 0xd61, 0xfffffc01, 0xf276, 0x7cb, 0x4, 0x7, 0x8, 0x0, 0x7fff, 0x7f, 0x1ff, 0xf, 0x1, 0x71, 0x5, 0x2, 0x3, 0xfffffffc, 0x1, 0x28, 0x401, 0x4, 0x4, 0x2, 0x1, 0x1, 0x100, 0xc0000000, 0xf2, 0x6, 0x9, 0xe298, 0x9, 0x10001, 0x5eba76ba, 0xfffff801, 0x9, 0x82ac, 0x400, 0x3, 0xca8, 0xd, 0x3247485d, 0x0, 0x7, 0x0, 0x0, 0x755, 0x7, 0x7, 0xd6, 0x8, 0x101, 0x3ff, 0x4, 0x1, 0x0, 0x5, 0x7fc0000, 0x6, 0xffffff80, 0x1000, 0x3, 0x3af, 0x4, 0xeeb, 0x6, 0x7fffffff, 0x5, 0x2000, 0xf, 0x6, 0xc991, 0xff, 0x0, 0x7f, 0x8, 0xf2, 0x1, 0x7, 0x7c5b, 0x2, 0x5, 0x9, 0x8, 0x80, 0x7, 0x45e090fd, 0x2, 0x9000000, 0x6, 0x8, 0xfff, 0x3, 0x80000001, 0xb, 0x4, 0x5, 0x7fffffff, 0x8000, 0x3, 0x5, 0x0, 0x800, 0x8, 0xf2f0, 0x3, 0x8, 0x0, 0xfffff4f9, 0x5, 0x4, 0x5, 0x59d8c4dd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x79, 0x7f, 0x9, 0x2, 0x7, 0x10b, 0x7, 0x40, 0x4, 0x2, 0x52, 0x200, 0xfffffff7, 0x6, 0x80000000, 0x4, 0x9, 0x4, 0xe91, 0x2, 0x3, 0x2, 0xbc39, 0x1, 0x9, 0x1, 0x4, 0xd, 0x8, 0x3ff, 0xd, 0x4, 0x29a, 0x1, 0xa0e, 0x22681101, 0x10, 0x5a8a, 0x5, 0x6, 0xb, 0x100, 0x2a28, 0x8001, 0x5, 0xffffff80, 0x7, 0x10, 0x3, 0x7c49, 0xffffff24, 0x80000001, 0x20, 0x9, 0x7, 0x80000000, 0x81, 0x3, 0x1, 0xffff, 0x72f7, 0x8, 0x4, 0x10001, 0x4, 0x1, 0x2fe6, 0x5, 0x8, 0x7, 0x2f, 0xfff, 0x3, 0x0, 0xd5f6, 0x0, 0x1, 0x7, 0x6, 0x0, 0x9, 0x6, 0x80000000, 0x3, 0x80000001, 0x7f, 0x1, 0x5, 0x6, 0xffff, 0x1, 0x9, 0xb8000000, 0x0, 0xfffffff6, 0x6, 0x2, 0x9d, 0x6ff9, 0x4, 0x7, 0x3ff, 0x7, 0x9, 0x2, 0x6, 0x1, 0x1, 0x5, 0x80000001, 0x10001, 0x40, 0x1, 0x3, 0xc, 0x2, 0x7fffffff, 0x7, 0x8, 0x8d, 0x9c4a, 0x6, 0x4, 0x1, 0x0, 0x4772, 0x3ff, 0x14, 0x9, 0x5, 0x86a2, 0xffffffff, 0x6973da49, 0x2, 0x8, 0x3, 0xc593, 0x3a, 0x1, 0x13, 0x7fff, 0x5, 0x6, 0x1, 0x6, 0x9d4, 0x9, 0x400, 0x2, 0x6d, 0x0, 0x0, 0x4, 0xc1b1, 0x5, 0x3, 0x10000, 0x7, 0x8, 0xffff7fff, 0x2a, 0x2, 0xff, 0x1000, 0x4, 0x9, 0x5, 0x8, 0x1, 0xfffffffe, 0xfffffffd, 0x4, 0xf8000000, 0x4, 0xfffffa47, 0x8, 0x9, 0x4, 0x1, 0x1, 0x9, 0x22e, 0xfffffffb, 0x105, 0x2, 0x9ab, 0x1, 0xd4, 0x6, 0x80000000, 0x1, 0xf679, 0x1000, 0x2, 0xffff, 0x66, 0x9, 0x80, 0x80000001, 0x0, 0xffffffff, 0x9b2, 0x6, 0x6, 0xffffffff, 0x1, 0x5, 0x6, 0x800, 0x6, 0x2, 0x0, 0x0, 0x9, 0x6, 0xffffffff, 0x6, 0xd682, 0xfffffffe, 0x80000000, 0x3, 0x80000000, 0xb83, 0x10, 0x80000001, 0x100, 0x3, 0x8000, 0x40, 0x10000, 0x5, 0x9, 0x7fff, 0x5, 0xfffffffc, 0x8, 0x7, 0xae, 0xf62, 0x100, 0x20000000, 0x3, 0x3, 0x9, 0xfffffffa, 0x64fa, 0xff, 0x200, 0x6d, 0xf880, 0x6, 0x2, 0x0, 0xbf8, 0x8, 0x994f]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x40, 0x4, 0x9, {0x80, 0x2, 0x8, 0x327, 0x6, 0x5}, {0x7, 0x571ca317988e8a9, 0xb, 0xf50, 0x5e, 0x7}, 0x2, 0x6, 0x7f}}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xec17}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x77af}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x50}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xbad}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff8}], [], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x1c0, 0x7b2, 0x400, 0x101, 0x2, 0x5, 0x6, 0x3, 0x6, 0x0, 0x6, 0x8, 0x1000, 0xe, 0x4, 0x0, 0x100, 0x1, 0xf, 0x9, 0x6, 0x9, 0x10000, 0x0, 0xfff, 0x811, 0x5, 0x9, 0xa, 0x2, 0xa33, 0x5, 0x2, 0x1, 0x7fff, 0x5, 0xc1b, 0x1000, 0xe01, 0x0, 0xd06f, 0x4, 0x7, 0x1, 0x4, 0x2, 0x4, 0xfffff2a6, 0xfffffffb, 0x7, 0x0, 0x1205c261, 0x2e2, 0xfffffffc, 0x7, 0xf, 0x6, 0x9, 0xd01, 0xbb, 0x7, 0x10000, 0x5, 0x3, 0x1, 0x8, 0xc, 0x7fff, 0x0, 0x6, 0x87d9, 0x8, 0x40, 0x6, 0xe40, 0x5c53ff78, 0x6, 0x7, 0x7f, 0xfff80000, 0x3, 0x0, 0x3, 0x100, 0x40, 0x4, 0x10, 0x1000, 0x7f, 0x1000, 0x7fffffff, 0x4, 0x7f8d, 0x7, 0xfffffff7, 0x4, 0x5, 0x2, 0x3f25, 0xffff7fff, 0x4, 0x7, 0x4, 0x5, 0x9, 0x3, 0x5, 0x0, 0x7, 0xffffffff, 0x3, 0x200, 0xb, 0x6, 0x1, 0x98, 0x8, 0x5, 0x918, 0x9, 0x39a, 0x3, 0xc51b, 0x40, 0x7, 0x400, 0xffff8de3, 0x3, 0x200, 0x5, 0x6, 0xfffffff7, 0xe, 0x0, 0x1, 0x3, 0x10, 0xbc8, 0x5, 0x2, 0x800, 0x9, 0x2, 0x7, 0x8, 0x0, 0xef, 0x5, 0x7fffffff, 0xd, 0x5, 0x400, 0x6, 0x100, 0x1ff, 0x7, 0x0, 0x9, 0x81, 0x6, 0x3, 0x6, 0x2, 0xfffff253, 0x800, 0x8, 0x0, 0x8, 0x8, 0x8, 0x1, 0xfffffffe, 0x5, 0x8001, 0x9, 0x7, 0x1000, 0x4e, 0xedf9, 0x800, 0x6d34, 0x5, 0x80000001, 0xe, 0x0, 0x7, 0x3, 0xffffffff, 0x6, 0x3, 0x800, 0x14b, 0x9, 0x2, 0x5, 0x200, 0x8000, 0x2f, 0x2, 0x8, 0x7, 0x9, 0xe, 0x3, 0x800, 0x514c, 0x8, 0x1, 0x9, 0x6, 0x7319, 0xf9d5, 0x94, 0xc, 0x81, 0x6034efec, 0x3, 0x9, 0x3f3, 0x1, 0x14e, 0x400, 0x800, 0xfff, 0xc7d, 0xfffffffa, 0x6, 0x7, 0x7, 0x9, 0xfffffff0, 0x0, 0x0, 0x4, 0x5, 0xed, 0x200, 0x0, 0x1, 0x10001, 0x6, 0x45, 0x6, 0x5, 0x0, 0x6, 0x4, 0x1, 0x8, 0x401, 0x5, 0x5, 0x8, 0x4, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x2, 0x427, 0x8, 0x6d99, {0xe, 0x1, 0xffc8, 0x1, 0x0, 0x2}, {0x0, 0x2, 0x9, 0x5, 0x70, 0x49a}, 0x6, 0x1, 0x903c}}]]}, {0x7, 0x6, "104728"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x134, 0x13, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0xd}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @empty}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}]}, {0xd9, 0x6, "d521904628f81383be5f3df9a5a949b732ef62bda6c7236b8ebd1f1da8bd897bd10fe78d92f7d287ea76c557f9f58a3e90c29d0c9a5da133ffa7b353d7344abc1c34259296c02e1df78d673d2a78008e4b7eb5f7c805dac8d1b08e0b87b3ab131ef0be49ef9abf807a97bce741ed660c9da6eb84551055b6fffd6f76696dbc65e715883bc3124172841d6d8f9c9d7b2c1f29484d723b3c5d882ecc88edde7fca8a32a8cedb995f49d401d7431bcf8d370b0c03241e13f9861cb178c60f65bdbd4381d51bd20dbed10645ec76d862e323d643dccc38"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x10b4, 0xe, 0x0, 0x0, {{0x9}, {0x88, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x9f2, 0xffffffffffffffff, 0x3ff, 0x4f7}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1e1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc33}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x5, 0x3, 0x7, 0xff}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2ab}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x7fff, 0x4, 0x1ff, 0xf7b}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x214, 0x1, [@m_mpls={0x9c, 0x17, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x560f3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xffff, 0x8, 0xffffffffffffffff, 0x7fffffff, 0x7}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x3c}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8917}, @TCA_MPLS_TTL={0x5}]}, {0x29, 0x6, "b19c9a4ab817386b1419dcbb99577062a076cec26fb62ade4dc44e4168fab461c5014e8ab6"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xe0, 0x13, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0xe0d, 0x4, 0x9, 0xa}, {0x7ff, 0x3, 0x10, 0x8df}, {0x4, 0xc1, 0x4, 0x4}, {0x3, 0x9, 0x6, 0x40}, {0x6, 0x71, 0xf5, 0x100}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0xff, 0x4, 0xc0, 0x2}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4b, 0x6, "2639bd558e0cea056eca1c043506767db76ace36834267fba2a46f23910acd2e7a385a3d92c545d60bf160ff3f57c41a112bd2f669beddf54a19f1c26291d2df6a28e61bca3c77"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}, @m_mpls={0x94, 0x12, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x9, 0x7, 0x6, 0x4}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3f535}]}, {0x43, 0x6, "c5b907cade872cbfb2d1dccc1294ae5b64d548c3048df0d7f2d8a311b6b9514e9aac399089588a8ec6ba85c629384e313c3d3fb0ad20d263264ed2336acb54"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x32f4}}, 0x400c4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.23919238s ago: executing program 1 (id=1502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1842, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="100000178f0046ea7619668f0c8633f67314220c402c7aa0582ff9a2eb741a08f75bd4ccf3d653c75168a8888061e32ada03000041a0e4e409e592370f3231283b54aebf5253166bbc5fdfa6d51594fb830d1dfc3d8d465ebdf7947f760fd6849b155ec82ff3fdbb6e13b7d0ab889c7403ddcb8df1a7c764515c1de99221d9253b7e83ab903dee5223563cfda4e604fdafc4098d1b03f8"], 0x10}], 0x1}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x0, 0x56595559, 0x2, @stepwise={0x8, 0x8, 0x7ff, 0x4, 0xaeae, 0x84a}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x709000, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0xfd, "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"}, &(0x7f0000000280)=0x105) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x5, 0x6, 0x0, 0x1000, &(0x7f000000e000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = syz_clone(0x2202080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$peeksig(0x4209, r11, &(0x7f0000000480)={0x7, 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$KVM_RUN(r10, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="00040000", @ANYRES16=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB="14002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000740)={0x0, 0x1ff, 0x2}) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 2.131443339s ago: executing program 1 (id=1504): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 2.070416505s ago: executing program 1 (id=1510): socket$can_raw(0x1d, 0x3, 0x1) (async) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x7, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x224c00, 0x0) (async) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x224c00, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$unix(0x1, 0x1, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f0000000000)=0x15) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r13, @ANYRES16=r7, @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.959412048s ago: executing program 1 (id=1514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x6}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x456}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x84) recvmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000240)=""/201, 0xc9}], 0x3}, 0x100}], 0x1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x98, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x48, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x6, 0xd0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c081b3aeeb"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x8000, 0x0, 0xa5, 0x40}, {0x6, 0x24, 0x1a, 0x4, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x6, 0xd}, @network_terminal={0x7, 0x24, 0xa, 0xe7, 0x3, 0x7d, 0xd}, @acm={0x4, 0x24, 0x2, 0x2}, @dmm={0x7, 0x24, 0x14, 0xee, 0xad}, @dmm={0x7, 0x24, 0x14, 0x0, 0x1ff}, @acm={0x4, 0x24, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x5c, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x7, 0x40}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x300, 0x5, 0x10, 0x6, 0xff, 0xf}, 0x1b, &(0x7f00000004c0)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0xa4, 0x6, 0x80, 0xffff, 0xa0}, @wireless={0xb, 0x10, 0x1, 0x4, 0x50, 0x0, 0xfa, 0x9, 0x8}]}, 0x9, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x816}}, {0x52, &(0x7f00000005c0)=@string={0x52, 0x3, "295c76fae5bd9fd4295f9ae2bf6bdd894acbd8b5bc9bc0acf69ad3a5dbff39b863bc0cb2afc3279d6e288a236e236c5292c66dd68babf596cbff278751824f383704290f20e88589aceb63e0a9b1f619"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x444}}, {0xf0, &(0x7f0000000740)=@string={0xf0, 0x3, "cab04c59a6d12d5f943a3d38ed2ac4d63c66b27a63385c88883330d477699625791571ed4e42440d18a6a8f82a0cc39784bd09615d5cce8b9db1377f9ef25f2d7e857910c1fc3397c62b3b36aff2c018975dc28b5f63d940f213644a514e8c9ebedcf2d6149a4d57bfa1f8fb00d7577898d0b1577c3a7bb087e78e4149d246297274b4c8290e65213afd76522699af315b4bb1a5f129ac066f27ae5ab17c7915f0aa1025e51b089f29ac1ca00a03f4802fbb9aeda6e49ca9f5bef517ad50ae24be11737c1a0771d38415b5b82847c86243ddf5b1df1f5e04ae251fe5bab622bb790417e628d5ad593812c4cfd456"}}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) r3 = add_key$keyring(&(0x7f0000000a80), &(0x7f0000000ac0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, &(0x7f00000009c0)="c6a0937df85b5b705b6730840b8c52964034070bff8e54552120104ceb9dccd324a6fab269c6ce0b53205d11759c7830433a30c4a3e4b036b3802f6d11a1c479198bea4fcd8e3d77d299dacb357e5f70c2e29bbfa2965632aa8bb1c65977f4cad530b7f5e03555e5ebb44bcc97bc2d5815609ea2462278c0561e6eb6ead03c47826be5a79e0cab326c1226566025291d9f7cecd63f63e9990ea6e68e275341f0caaf3ea156338d009df992a8e8e01d2a253d710cbf6f", 0xb6, r3) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000b00)={0x1f, 0x0, @fixed}, &(0x7f0000000b40)=0xe, 0x100000) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r1, 0x2, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000894}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7fff, 0xf}}}}, [@NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40800) r7 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000ec0), 0x10000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r7, 0x8c) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000f40)="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", 0x1000) r10 = socket$tipc(0x1e, 0x2, 0x0) r11 = add_key$fscrypt_provisioning(&(0x7f0000001f40), &(0x7f0000001f80)={'syz', 0x1}, &(0x7f0000001fc0)={0x2, 0x0, @auto=[0x25]}, 0x9, 0xfffffffffffffffe) r12 = add_key$keyring(&(0x7f0000002000), &(0x7f0000002040)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$link(0x8, r11, r12) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000002080)={0x0, "a538eee9e8e33522fa2cc1f59e2c5f6f"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000003080)={r13, 0xf097, 0x8}) r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000034c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000035c0)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003580)={&(0x7f0000003500)={0x44, r14, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20048041) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000003700)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003640)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xac}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) writev(r10, &(0x7f0000003880)=[{&(0x7f0000003740)="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", 0xfe}, {&(0x7f0000003840)}], 0x2) 909.700036ms ago: executing program 6 (id=1546): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) flistxattr(r0, &(0x7f0000000080)=""/64, 0x40) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000280)=@ethtool_regs={0x4, 0x9}}) 909.4084ms ago: executing program 6 (id=1547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = gettid() r5 = epoll_create(0x400) r6 = eventfd(0xfffffffe) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r6, &(0x7f00000000c0)={r5, r6, 0x5}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x4000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) r9 = getpgid(0x0) r10 = syz_pidfd_open(r9, 0x0) r11 = pidfd_getfd(r10, r10, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r11, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000040)=0x8, 0x4) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r12, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002bbd7000fddbdf2507000000080002000300000014000600fc0200000012000000000000000000010800020007000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xaa10}}, './file0\x00'}) 759.89902ms ago: executing program 6 (id=1554): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 659.96434ms ago: executing program 4 (id=1556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f00000001c0)=0x5, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5021}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x709000, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100ffff0000000000000004000000020000000000000c02000000000000000200000d000000000000000000000000fffffffffffff00000005f00"], 0x0, 0x44, 0x0, 0x40000}, 0x28) r3 = add_key$fscrypt_provisioning(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000000000061c2732ee656a0292436f7050000003862630000000000006e6f70e715a1ec2e636d25dd4141b0476184c5f23c0f8ece7724cd257f44bfef10d4ce1ca7ca530be0b5424901fcd6c697d111dd3920da761e7ad7ee4bb44f5cbe4e917bb995cb7798aa61c4"], 0x18, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) close(r2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f0000000180)={0x0, 0x0, 0x9, 0x800, 0x8000, 0x4, 0x6, 0x80000001, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 600.647806ms ago: executing program 4 (id=1557): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @local}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "8000", 0x10, 0x0, 0xff, @rand_addr=' \x01\x00', @remote, {[@dstopts={0x6, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x3ff}, @generic={0x88}]}]}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, r3, 0x1, 0xffffffff, 0xffffffff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x620b, 0x0, 0x44080}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xd0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0xff80, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0xd0}}, 0x40000) 550.830624ms ago: executing program 4 (id=1558): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000280)={0xfeff, 0x8, 0x8, 0xfffe, 0x15, "0100000000000080"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0400000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a190124df7b14032a01c0466d6a7fe8e1b26d30969cc82bf848e7e9753e6c4a389aeeccbd7002ed144bc119434df5722ebb6252980d591a25ca52db9b76221946fb8544a1028e83c2b5127403df754f9c4f881aff028a88218f5e2fc9fa285fe578e92d7f1d4d50d72b452e3935fa874b8383a2d887efc608dcbbdbfeeb40f934c6d42b6eae12ec172fbe2039e8275d2cd150a4890062688722079672f0de4dc7644c8c279"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0xa) 550.307624ms ago: executing program 4 (id=1559): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000001c0), 0x80c20, &(0x7f0000000480)=ANY=[@ANYBLOB="71756f74612c75737271756f74615f696e6f64655f686172646c696d69743d2c7375626a5f757365723d008d0e795e75ac27617e15d2c90f007e2cc003a07fe7f187da60d9de1b0cd90c983b31250cf118b641e1a46da4b6a0ce2e6c74a14bd272bc11aaff14fe3f8a38a102004bdb1b6e4bad653d4836e10694a09c1ad2c2a1224bf112fe72c8382836f23b63b67b7062b32150cdc4a51e7ad0bd11d688e4428db9d6052134b8427a4256296cb736d3e79504e3a0a1fde72c7375626a5f747970653d746d706673002c0000"]) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 549.042232ms ago: executing program 4 (id=1560): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x6802, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x61) 490.809617ms ago: executing program 4 (id=1561): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000009680), 0x100, 0x0) setreuid(0xee01, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) r1 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x8002) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'rose0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000070583aae72b65244f10039022abd7000fbdbdffa07000000", @ANYRES32=r3], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x8, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180), 0x4) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001d00000229bd7000fddbdf251c000000", @ANYRESOCT=r0, @ANYRES16=r2], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$SG_SET_COMMAND_Q(r5, 0x2271, &(0x7f0000000040)=0x1) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) connect$unix(r5, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x1fff}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) getsockname$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="00040000000000", @ANYRES32=r8, @ANYBLOB="0000000014110000180012800b000100697036746e6c00000800028004001300"], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001000010400000000fedbdf2500000000", @ANYRES32=r8, @ANYBLOB="0001000073edb0c774c794aeebf8d533f49aa1ac000000140012800b000100697036746e6c000004000280b9e73fc97d3d5be64228dd0e6ce7b2e717b7893274edd979fdcee10a2ac7b095836d85e793ccc2bbb276e4bfd3cffde74935969b47258976b342d8acf73cadbc0c4e225156c7d6915a7670709e47552bdcca29d9cb83ae44ce00e0f179ef2023c96b3b0de1ba09764daf582933a77ecd13f007c4f119755954d131eebd6fec07b3ee309efad9310550716c08bb21bcdf91a09a99627ca6"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000002c0)=""/119) 389.719094ms ago: executing program 0 (id=1563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000003e000701fcfffffffd9bdf25037c0000"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x24}, 0x1, 0x0, 0x0, 0x85}, 0x20008080) 330.248171ms ago: executing program 0 (id=1564): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000002100), 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) (async, rerun: 64) close_range(r2, 0xffffffffffffffff, 0x0) (rerun: 64) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) (async) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0, 0x58}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd28, 0x25dfdbff, {0x60, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x3000c89c) (async, rerun: 32) syz_emit_ethernet(0xb9, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@llc={0x4, {@llc={0x0, 0xdc, '\x00\x00', "ba6854894e6ff1e24a78347ba9b5b72729e88bddfed530bae8be77ffaec52c07028b9091fd915014391b2459f333b51807eb24242eef7ab2abfb2e193a7407df0722b96a8429abb3cd7db36daae3767226ca1fc23373e3ea761cd882c3725e1c43eaa0c66d85b0357ec7cb2a70898e21c26843a8ea028d4a74cde2a40cfc75418a54f062476a0bb184fb9480a83997878b50cf1b9c28f03d14c05903ae20f3fd61fcf44e4494ae"}}}}}, &(0x7f0000000480)={0xffffffff, 0x3, [0xbe4, 0x4d4, 0xd87, 0xdb7]}) (async, rerun: 32) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f0000000040)=0x40fff, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x3}}}]}, 0x38}}, 0x0) (async) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r13, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x2}, 0x4) r14 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd25, 0xfffffffb, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0x12}, {0xe, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) pipe2$9p(&(0x7f00000003c0), 0x4800) 240.695224ms ago: executing program 0 (id=1565): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc}, 0x94) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480), 0x40202, 0x0) write$FUSE_WRITE(r0, &(0x7f0000002500)={0x18, 0x0, 0x0, {0x4}}, 0x18) io_uring_enter(r0, 0x40f, 0x8eaf, 0x2, &(0x7f0000000040)={[0x1]}, 0x8) 240.454443ms ago: executing program 0 (id=1566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x400) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x709000, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1, 0x73a}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 240.184661ms ago: executing program 6 (id=1567): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000008c0)={0x0, 0x5, 0x7fffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4}, 0x40) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file1\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x9, 0x9, 0xd, 0x9000, r0, 0x1, '\x00', r4, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x0, @value=r0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00'}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000940)={{}, "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"}) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r7) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 140.889733ms ago: executing program 0 (id=1568): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) (async) sendfile(r3, r1, 0x0, 0x10000a007) (async) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0x3, 0x0, 0x8, 0x1, 0x1, 0xffffffffffffffff, 0x8, 0x2}}) 140.708084ms ago: executing program 6 (id=1569): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xf5, 0x2, [0x2a63, 0x6]}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3, 0x6}, &(0x7f0000000240)=0x8) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x98) recvfrom$inet_nvme(r2, &(0x7f0000000000)=""/30, 0x1e, 0x2000, 0x0, 0x0) 70.831748ms ago: executing program 0 (id=1570): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x1e0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0xf, r2, &(0x7f00000000c0)="9b7557", 0x3, 0x1800}]) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x12, 0x11, 0x67, {@ipv4={'\x00', '\xff\xff', @local}}}}], 0x28}}], 0x1, 0x0) sendmsg$inet6(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x800}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000100)="5a2bcf333342b73ae3c19c77211b3dd5682db28112e205f4e524fb45b1eab21fe2d8c65f931fe3e51d824be1917805abd23fb547e5afcc8c2fb2bfe288dcdc4bcd49296645b26b1e032878ce40b065d1a8ff1c727d828a1e2c8358f3552ecf637499ee3ecb0944e61844a90b0403964a29a4b9b3072a5453f28e00f9f774b456de7b26fae9e78748e910c9dc3e4ed8244e65f7ffc9ed5458e7f14230caf21efab844d93208cc7d3972b32429eb58bf8a8555f7970eb2471946f3386ef98f2aa7451541f49c241304c4f8dd3f42", 0xcd}, {&(0x7f0000000200)="b7ba699bdc8e2aafec241afbe12c850cc82ece2979561f9bf2e186", 0x1b}, {&(0x7f0000000240)="af25fc3afeec69d03f8ed25da22efa2274397aeeae654479f0ca585130a7d30108c2794bd40cdcf631343816d6f9e795c59835fa7c749fc8a0f473eb4b", 0x3d}, {&(0x7f00000002c0)="be67b93dc3f993d15f191f0726aa4ab90312f081c9976814f4655c824bd44494614b6e2670c1b4e40b6233c6f13513c5059b5c4a09b57d9379", 0x39}, {&(0x7f0000000300)="9414c65fbe5fc3657eff875b3566dfd8483e9bb3dafc31e9d492022961842723535f9eed4c5f020e7c1e25b8f08c4db4148e0848d1b7509a59d38993b40be47eeb3acadceae1904ac3a529efb5", 0x4d}], 0x5}, 0x40) 0s ago: executing program 6 (id=1571): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0x9, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x65, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f00000000c0)=@x86={0x10, 0x3, 0x6, 0x0, 0x2, 0xf, 0x8, 0xff, 0x6, 0x3, 0x7, 0xf7, 0x0, 0x3, 0x5, 0x2, 0x7, 0x2, 0x2, '\x00', 0x0, 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "1e9c5a6a4ba066adec69bd68e7846b25", 0x7}}}, 0x1a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0xfffffffc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x8, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x3000c88c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480)='rpc_pipefs\x00', 0x1020, &(0x7f0000000400)='\xcf\xab\xaa\xfc\x8a.V\x84\xa2G^T\x17\x84\x96\x85\xb5\r\xb8\xd0\xaa!\x97s\x83\xf2\xf1\x92\xccG\x1e\x13.\x00\x00\x00\x00\x00\x00\x00\x00\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0xc0089364, &(0x7f00000001c0)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) listen(r0, 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000040a030000000000000000000a00000509e1deef407624b800010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x40000) (async) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000040a030000000000000000000a00000509e1deef407624b800010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x40000) accept(r0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x401, 0x8, 0x0, 0x67, 0x40000000, 0x0, 0x0, 0xffffffff, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000180)={r8, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000080)=0xfffffffffffffed9) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000180)={r8, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000080)=0xfffffffffffffed9) add_key(&(0x7f0000000300)='.request_key_auth\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="174b8f00063ff62b45508c96e1a53375971496ec870a1a7a9bcff0c9c78dec54b8b64a726450ee5c80018ec23188279d4063a648c58a571a664fe7b7cc00dcab9f56ffc72c923c649937c5eb2e01823ea9b30cf1901974b77f79d19bcd9a9f0e2b278118cc72ed979c3fc1f5ba99baa0a65cd98d73b044232aeebc60", 0x7c, r5) sendto$inet6(r7, &(0x7f0000000100)='H', 0x1, 0x2000c851, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async) sendto$inet6(r7, &(0x7f0000000100)='H', 0x1, 0x2000c851, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) kernel console output (not intermixed with test programs): ext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.955945][ T40] audit: type=1400 audit(1755598837.127:1788): avc: denied { map } for pid=8204 comm="syz.0.631" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 79.966845][ T40] audit: type=1400 audit(1755598837.147:1789): avc: denied { execute } for pid=8206 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 79.974017][ T40] audit: type=1400 audit(1755598837.157:1790): avc: denied { execute_no_trans } for pid=8206 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 79.980316][ T8209] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 79.981743][ T40] audit: type=1400 audit(1755598837.157:1791): avc: denied { execmem } for pid=8206 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 79.996093][ T87] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.027543][ T8203] /dev/sr0: Can't open blockdev [ 80.043515][ T5331] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.045950][ T5331] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.048501][ T5331] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.051456][ T87] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.051744][ T5331] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.057448][ T5331] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.110418][ T87] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.116695][ T8214] chnl_net:caif_netlink_parms(): no params data found [ 80.117555][ T8209] /dev/sr0: Can't open blockdev [ 80.165701][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.168734][ T8214] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.171781][ T8214] bridge_slave_0: entered allmulticast mode [ 80.174903][ T8214] bridge_slave_0: entered promiscuous mode [ 80.178914][ T8214] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.181768][ T8214] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.184829][ T8214] bridge_slave_1: entered allmulticast mode [ 80.188517][ T8214] bridge_slave_1: entered promiscuous mode [ 80.217091][ T8214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.221086][ T8214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.253661][ T8214] team0: Port device team_slave_0 added [ 80.256516][ T8214] team0: Port device team_slave_1 added [ 80.265705][ T87] bridge_slave_1: left allmulticast mode [ 80.267856][ T87] bridge_slave_1: left promiscuous mode [ 80.269755][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.272949][ T87] bridge_slave_0: left allmulticast mode [ 80.274915][ T87] bridge_slave_0: left promiscuous mode [ 80.276949][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.296489][ T87] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 80.299643][ T87] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 80.365835][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.370031][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.373509][ T87] bond0 (unregistering): Released all slaves [ 80.381245][ T87] bond1 (unregistering): Released all slaves [ 80.386495][ T87] bond2 (unregistering): (slave bond3): Releasing backup interface [ 80.391202][ T87] bond2 (unregistering): Released all slaves [ 80.398584][ T87] bond3 (unregistering): Released all slaves [ 80.413801][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.416152][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.424701][ T8214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.429185][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.431482][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.439639][ T8214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.462962][ T8214] hsr_slave_0: entered promiscuous mode [ 80.465023][ T8214] hsr_slave_1: entered promiscuous mode [ 80.476307][ T87] tipc: Disabling bearer [ 80.479729][ T87] tipc: Left network mode [ 80.533523][ T8214] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 80.537236][ T8214] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 80.540909][ T8214] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 80.544260][ T8214] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 80.555040][ T8214] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.557370][ T8214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.559727][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.562091][ T8214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.580990][ T8214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.586587][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.589804][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.596559][ T8214] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.607515][ T1255] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.610045][ T1255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.615327][ T1255] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.617650][ T1255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.654855][ T87] hsr_slave_0: left promiscuous mode [ 80.657885][ T87] hsr_slave_1: left promiscuous mode [ 80.662071][ T87] veth1_macvtap: left promiscuous mode [ 80.664372][ T87] veth0_macvtap: left promiscuous mode [ 80.667184][ T87] veth1_vlan: left promiscuous mode [ 80.669570][ T87] veth0_vlan: left promiscuous mode [ 80.743722][ T87] team0 (unregistering): Port device team_slave_1 removed [ 80.751601][ T87] team0 (unregistering): Port device team_slave_0 removed [ 80.818906][ T8214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.908924][ T8214] veth0_vlan: entered promiscuous mode [ 80.912634][ T8214] veth1_vlan: entered promiscuous mode [ 80.922883][ T8214] veth0_macvtap: entered promiscuous mode [ 80.925955][ T8214] veth1_macvtap: entered promiscuous mode [ 80.933127][ T8214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.938701][ T8214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.943071][ T1255] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.945976][ T1255] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.951191][ T1255] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.954757][ T1255] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.969751][ T8228] overlayfs: statfs failed on './file0' [ 80.976648][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.981656][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.992982][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.997333][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.072548][ T87] IPVS: stop unused estimator thread 0... [ 81.079680][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 81.082703][ T8294] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 81.085103][ T8294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.163040][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 81.165944][ T5976] Bluetooth: Wrong link type (-22) [ 81.168552][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 81.170777][ T5976] Bluetooth: Wrong link type (-22) [ 81.172537][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 81.174625][ T5976] Bluetooth: Wrong link type (-22) [ 81.176385][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 81.179322][ T5976] Bluetooth: Wrong link type (-22) [ 81.306868][ T9] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 81.486945][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 81.494207][ T9] usb 11-1: config 1 has an invalid interface number: 4 but max is 2 [ 81.496966][ T9] usb 11-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 81.499774][ T9] usb 11-1: config 1 has no interface number 3 [ 81.501715][ T9] usb 11-1: config 1 interface 4 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 81.505899][ T9] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 163, changing to 7 [ 81.509429][ T9] usb 11-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 81.512861][ T9] usb 11-1: config 1 interface 4 has no altsetting 0 [ 81.518200][ T9] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.521140][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.523709][ T9] usb 11-1: Product: 㐉 [ 81.525107][ T9] usb 11-1: Manufacturer: 鳀月鴡⎍ꑋ傓䮎퐇몡紇썀⩷㥉窦ឞ㚹愄Ǜ賮븂䒊惍㣦ա֌ஸ뮮鴘돗豳茶蟇狄砂靿준샑㸻逝ǝꨬǖ坽␘䊚툛繅筗쮶섔拇엌鳙蘄﵉ㄍ眆鰚㐌퇥묣ꎣﻢ휼됷ၣꂝ濿꾝卒∦箫ࠩ㥓慎뿾ݪ旋㦊刴场₆❬䇖廘틓垏ퟓࡲ⣇囎趵뻕濋㷸滊巔褮㟊绾ؓ༼꾟验抈걟坘毾貃⦬ [ 81.536096][ T9] usb 11-1: SerialNumber: 䘆懱〞퀠ቕ㠰ﳡፕ爄䥾髴溎漛ⴲ锏랅䩰雪玜孖陋ø蕫蘜鄅ᴪ檮╿焏・昡謆桍㋶贮៨푝 [ 81.558094][ T61] cfg80211: failed to load regulatory.db [ 81.572411][ T8306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.647'. [ 81.575528][ T8306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.647'. [ 81.581712][ T8308] netlink: 40 bytes leftover after parsing attributes in process `syz.1.648'. [ 81.584455][ T8308] nbd: must specify at least one socket [ 81.639649][ T8314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8314 comm=syz.1.650 [ 81.653538][ T54] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 81.655893][ T54] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 81.658487][ T54] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 81.660940][ T54] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 81.663183][ T54] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 81.665497][ T54] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 81.668296][ T54] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 81.670573][ T54] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 81.672982][ T54] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 81.675338][ T54] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 81.678867][ T54] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 81.683161][ T8325] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 81.686056][ T8326] netlink: 884 bytes leftover after parsing attributes in process `syz.1.653'. [ 81.702014][ T8327] fido_id[8327]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.746104][ T8292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=8292 comm=syz.6.641 [ 81.755612][ T9] usb 11-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 81.763267][ T9] usb 11-1: USB disconnect, device number 2 [ 81.773809][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.961416][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 81.967659][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 81.971883][ T8336] CIFS mount error: No usable UNC path provided in device string! [ 81.971883][ T8336] [ 81.975012][ T8336] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 82.001662][ T8338] rtc_cmos 00:05: Alarms can be up to one day in the future [ 82.008891][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 82.117004][ T5976] Bluetooth: hci0: command tx timeout [ 82.518907][ T8352] trusted_key: encrypted_key: master key parameter 'usesyz' is invalid [ 82.525289][ T8352] trusted_key: encrypted_key: master key parameter 'usesyz' is invalid [ 82.631028][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 82.633329][ T5976] Bluetooth: Wrong link type (-22) [ 82.634981][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 82.637111][ T5976] Bluetooth: Wrong link type (-22) [ 82.638751][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 82.640792][ T5976] Bluetooth: Wrong link type (-22) [ 82.642447][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 82.644534][ T5976] Bluetooth: Wrong link type (-22) [ 83.432737][ T8366] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 84.186963][ T5976] Bluetooth: hci0: command tx timeout [ 84.655065][ T40] kauditd_printk_skb: 202 callbacks suppressed [ 84.655076][ T40] audit: type=1400 audit(1755598841.837:1994): avc: denied { read } for pid=8396 comm="syz.0.674" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 84.666722][ T40] audit: type=1400 audit(1755598841.837:1995): avc: denied { open } for pid=8396 comm="syz.0.674" path="/dev/fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 84.674203][ T40] audit: type=1400 audit(1755598841.837:1996): avc: denied { write } for pid=8396 comm="syz.0.674" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.682472][ T40] audit: type=1400 audit(1755598841.837:1997): avc: denied { open } for pid=8396 comm="syz.0.674" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.685858][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 84.690554][ T40] audit: type=1400 audit(1755598841.837:1998): avc: denied { read write } for pid=8396 comm="syz.0.674" name="video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.693132][ T5976] Bluetooth: Wrong link type (-22) [ 84.693160][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 84.693167][ T5976] Bluetooth: Wrong link type (-22) [ 84.693180][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 84.701207][ T40] audit: type=1400 audit(1755598841.847:1999): avc: denied { open } for pid=8396 comm="syz.0.674" path="/dev/video3" dev="devtmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.702604][ T5976] Bluetooth: Wrong link type (-22) [ 84.702632][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 84.702638][ T5976] Bluetooth: Wrong link type (-22) [ 84.705430][ T40] audit: type=1400 audit(1755598841.847:2000): avc: denied { ioctl } for pid=8396 comm="syz.0.674" path="/dev/video3" dev="devtmpfs" ino=959 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 84.733838][ T40] audit: type=1400 audit(1755598841.847:2001): avc: denied { ioctl } for pid=8396 comm="syz.0.674" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.733862][ T40] audit: type=1400 audit(1755598841.877:2002): avc: denied { ioctl } for pid=8396 comm="syz.0.674" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 84.754302][ T40] audit: type=1400 audit(1755598841.937:2003): avc: denied { create } for pid=8403 comm="syz.1.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.754710][ T8404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.677'. [ 84.863935][ T8424] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 84.863942][ T8422] IPVS: stopping master sync thread 8424 ... [ 85.009052][ T8439] netlink: 'syz.1.688': attribute type 10 has an invalid length. [ 85.012453][ T8439] team0: Device ipvlan1 failed to register rx_handler [ 85.044920][ T8441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.689'. [ 85.379776][ T8472] Bluetooth: MGMT ver 1.23 [ 85.582139][ T8489] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.662609][ T8497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.704558][ T8503] netlink: 36 bytes leftover after parsing attributes in process `syz.6.706'. [ 85.787234][ T8511] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 85.828639][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 85.830810][ T5976] Bluetooth: Wrong link type (-22) [ 85.832596][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 85.834770][ T5976] Bluetooth: Wrong link type (-22) [ 85.836581][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 85.839337][ T5976] Bluetooth: Wrong link type (-22) [ 85.841213][ T5976] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 85.843308][ T5976] Bluetooth: Wrong link type (-22) [ 86.267046][ T5976] Bluetooth: hci0: command tx timeout [ 86.301327][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 86.306445][ T8534] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 86.387396][ T8542] usb usb8: usbfs: process 8542 (syz.0.718) did not claim interface 0 before use [ 86.600845][ T8549] binder: Bad value for 'max' [ 86.610591][ T8551] bridge2: entered promiscuous mode [ 86.650143][ T8558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.652704][ T8559] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.677097][ T6003] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 86.758525][ T8565] netlink: 'syz.6.726': attribute type 21 has an invalid length. [ 86.806961][ T6003] usb 9-1: device descriptor read/64, error -71 [ 86.902407][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.6.731'. [ 87.056881][ T6003] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 87.207587][ T6003] usb 9-1: device descriptor read/64, error -71 [ 87.317340][ T6003] usb usb9-port1: attempt power cycle [ 87.650620][ T8611] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 87.654395][ T8611] comedi comedi3: adq12b: I/O port conflict (0xa,16) [ 87.666798][ T6003] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 87.698150][ T6003] usb 9-1: device descriptor read/8, error -71 [ 87.765666][ T8621] netlink: 20 bytes leftover after parsing attributes in process `syz.6.741'. [ 87.804313][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 87.946847][ T6003] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 87.967217][ T6003] usb 9-1: device descriptor read/8, error -71 [ 88.061782][ T8666] netlink: 'syz.0.752': attribute type 2 has an invalid length. [ 88.065129][ T8666] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 88.067788][ T8666] netlink: 'syz.0.752': attribute type 1 has an invalid length. [ 88.077129][ T6003] usb usb9-port1: unable to enumerate USB device [ 88.347051][ T5331] Bluetooth: hci0: command 0x0419 tx timeout [ 88.621120][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.6.755'. [ 88.624755][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.6.755'. [ 88.628717][ T8680] netlink: 'syz.6.755': attribute type 7 has an invalid length. [ 88.718330][ T5331] Bluetooth: hci2: unknown advertising packet type: 0x6f [ 88.718353][ T5331] Bluetooth: hci2: Malformed LE Event: 0x02 [ 88.768284][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 89.043718][ T8716] netlink: 'syz.6.766': attribute type 11 has an invalid length. [ 89.086199][ T8721] netlink: 'syz.6.768': attribute type 2 has an invalid length. [ 89.150837][ T8722] kvm: pic: non byte write [ 89.175007][ T8728] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.274406][ T8731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=8731 comm=syz.0.771 [ 89.300057][ T8735] netlink: 'syz.0.772': attribute type 10 has an invalid length. [ 89.357450][ T8740] sp0: Synchronizing with TNC [ 89.437289][ T8749] program syz.4.778 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.440394][ T8749] netlink: 'syz.4.778': attribute type 1 has an invalid length. [ 89.765364][ T40] kauditd_printk_skb: 326 callbacks suppressed [ 89.765381][ T40] audit: type=1400 audit(1755598846.937:2330): avc: denied { execmem } for pid=8784 comm="syz.4.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 89.776853][ T40] audit: type=1400 audit(1755598846.947:2331): avc: denied { read } for pid=8786 comm="syz.0.790" name="event2" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 89.786511][ T40] audit: type=1400 audit(1755598846.947:2332): avc: denied { ioctl } for pid=8786 comm="syz.0.790" path="/dev/input/event2" dev="devtmpfs" ino=947 ioctlcmd=0x4525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 89.858371][ T8793] __nla_validate_parse: 4 callbacks suppressed [ 89.858384][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.794'. [ 89.897207][ T40] audit: type=1400 audit(1755598847.057:2333): avc: denied { mount } for pid=8794 comm="syz.1.795" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 89.904290][ T40] audit: type=1400 audit(1755598847.057:2334): avc: denied { ioctl } for pid=8794 comm="syz.1.795" path="/dev/comedi4" dev="devtmpfs" ino=1306 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.912155][ T40] audit: type=1400 audit(1755598847.077:2335): avc: denied { allowed } for pid=8796 comm="syz.0.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.918928][ T40] audit: type=1400 audit(1755598847.077:2336): avc: denied { sqpoll } for pid=8796 comm="syz.0.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 89.924922][ T40] audit: type=1400 audit(1755598847.077:2337): avc: denied { map } for pid=8796 comm="syz.0.796" path="pipe:[7276]" dev="pipefs" ino=7276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 89.932504][ T40] audit: type=1400 audit(1755598847.077:2338): avc: denied { prog_load } for pid=8796 comm="syz.0.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.946658][ T40] audit: type=1400 audit(1755598847.087:2339): avc: denied { prog_run } for pid=8796 comm="syz.0.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.963440][ T8801] overlayfs: failed to resolve './file0/file0': -2 [ 90.407842][ T8811] SELinux: truncated policydb string identifier [ 90.409968][ T8811] SELinux: failed to load policy [ 90.426873][ T63] Bluetooth: hci0: command 0x0419 tx timeout [ 90.687033][ T6003] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 90.746829][ T63] Bluetooth: hci2: command 0x0401 tx timeout [ 90.836799][ T6003] usb 11-1: Using ep0 maxpacket: 8 [ 90.840006][ T6003] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.843299][ T6003] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 90.846160][ T6003] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 90.849783][ T6003] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 90.853382][ T6003] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 90.856336][ T6003] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.861401][ T6003] hub 11-1:1.0: bad descriptor, ignoring hub [ 90.863344][ T6003] hub 11-1:1.0: probe with driver hub failed with error -5 [ 90.865770][ T6003] cdc_wdm 11-1:1.0: skipping garbage [ 90.867509][ T6003] cdc_wdm 11-1:1.0: skipping garbage [ 90.869864][ T6003] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 90.872069][ T6003] cdc_wdm 11-1:1.0: Unknown control protocol [ 91.176864][ T6134] usb 11-1: USB disconnect, device number 3 [ 91.502986][ T8859] sctp: [Deprecated]: syz.4.806 (pid 8859) Use of int in max_burst socket option. [ 91.502986][ T8859] Use struct sctp_assoc_value instead [ 91.541309][ T8863] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1005 sclass=netlink_tcpdiag_socket pid=8863 comm=syz.1.807 [ 91.575530][ T8865] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 91.583107][ T8867] netlink: 24 bytes leftover after parsing attributes in process `syz.6.809'. [ 91.604339][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.809'. [ 91.611539][ T8869] usb usb8: usbfs: process 8869 (syz.1.810) did not claim interface 0 before use [ 91.706950][ T5331] Bluetooth: hci3: command 0x0406 tx timeout [ 91.733995][ T8889] netlink: 36 bytes leftover after parsing attributes in process `syz.1.817'. [ 91.740966][ T8892] QAT: Invalid ioctl -2147183769 [ 91.792337][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'. [ 91.793971][ T8906] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8906 comm=syz.1.822 [ 91.795141][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'. [ 91.806117][ T8907] netlink: 'syz.0.823': attribute type 12 has an invalid length. [ 91.815670][ T8912] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 91.820691][ T8912] SELinux: failed to load policy [ 91.902535][ T8929] binder: 8925:8929 unknown command 4294967295 [ 91.904545][ T8929] binder: 8925:8929 ioctl c0306201 200000000200 returned -22 [ 91.976692][ T8935] netlink: 'syz.1.831': attribute type 21 has an invalid length. [ 91.992047][ T8935] netlink: 37 bytes leftover after parsing attributes in process `syz.1.831'. [ 91.994876][ T8935] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.997211][ T8935] IPv6: NLM_F_CREATE should be set when creating new route [ 91.999566][ T8935] IPv6: NLM_F_CREATE should be set when creating new route [ 92.042116][ T8953] nbd: couldn't find device at index -1605786504 [ 92.081033][ T8960] netlink: 76 bytes leftover after parsing attributes in process `syz.1.839'. [ 92.081408][ T8966] netlink: 'syz.4.837': attribute type 4 has an invalid length. [ 92.087563][ T8968] netlink: 72 bytes leftover after parsing attributes in process `syz.6.840'. [ 92.099070][ T8966] netlink: 'syz.4.837': attribute type 4 has an invalid length. [ 92.101598][ T8967] netlink: 'syz.4.837': attribute type 4 has an invalid length. [ 92.106625][ T8971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.841'. [ 92.110688][ T8971] Can't find ip_set type [ 92.112177][ T8972] Can't find ip_set type [ 92.152685][ T8987] input: syz1 as /devices/virtual/input/input13 [ 92.320377][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.323091][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.325922][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.329386][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.332618][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.335888][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.339726][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.343025][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.346081][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.349514][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.352144][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.354717][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.358261][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.366659][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.371502][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.374889][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.377882][ T8999] snd_dummy snd_dummy.0: control 0:0:-4:syz0:0 is already present [ 92.462759][ T9027] ip6gretap1: entered promiscuous mode [ 92.464588][ T9027] ip6gretap1: entered allmulticast mode [ 92.580828][ T9034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9034 comm=syz.0.852 [ 92.600643][ T9036] syz.0.853: attempt to access beyond end of device [ 92.600643][ T9036] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 92.604796][ T9036] syz.0.853: attempt to access beyond end of device [ 92.604796][ T9036] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 92.741732][ T9046] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 92.816067][ T9053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.819898][ T9053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.823148][ T9053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.825537][ T9053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.934542][ T9060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.037772][ T9078] usb 2-1: USB disconnect, device number 2 [ 93.282722][ T5976] Bluetooth: hci2: Dropping invalid advertising data [ 93.284929][ T5976] Bluetooth: hci2: unknown advertising packet type: 0x9b [ 93.284941][ T5976] Bluetooth: hci2: unknown advertising packet type: 0xd3 [ 93.287496][ T5976] Bluetooth: hci2: Malformed LE Event: 0x02 [ 93.870767][ T9083] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.872757][ T9083] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.875786][ T9083] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.877746][ T9083] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.880095][ T9083] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.881957][ T9083] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.984914][ T9097] kvm: kvm [9096]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 94.002098][ T9097] kvm: kvm [9096]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 94.021561][ T9097] kvm: kvm [9096]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 94.044633][ T9097] kvm: kvm [9096]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 94.048115][ T9097] kvm: kvm [9096]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 94.065702][ T9097] kvm_intel: kvm [9096]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 94.093592][ T9119] rtc_cmos 00:05: Alarms can be up to one day in the future [ 94.116858][ T34] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 94.266960][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 94.270929][ T34] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 94.273596][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.276622][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.279808][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.282856][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.287604][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.290430][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.401715][ T9134] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 94.406843][ T6003] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 94.432026][ T9136] netlink: 'syz.0.883': attribute type 3 has an invalid length. [ 94.496622][ T34] usb 6-1: usb_control_msg returned -32 [ 94.497778][ T9090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.498527][ T34] usbtmc 6-1:16.0: can't read capabilities [ 94.501428][ T9090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.523705][ T9139] tmpfs: Unknown parameter 'hugeithin_size' [ 94.561272][ T9141] tipc: Enabled bearer , priority 0 [ 94.563620][ T9142] tipc: Enabling of bearer rejected, already enabled [ 94.567858][ T6003] usb 9-1: Using ep0 maxpacket: 16 [ 94.570908][ T9140] tipc: Resetting bearer [ 94.573907][ T6003] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.577601][ T6003] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.581038][ T6003] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.584561][ T6003] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.588723][ T6003] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 94.591629][ T6003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.595443][ T6003] usb 9-1: config 0 descriptor?? [ 94.598041][ T9129] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 94.602491][ T6003] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input15 [ 94.665027][ T9140] tipc: Disabling bearer [ 94.747177][ T9146] loop6: detected capacity change from 0 to 63 [ 94.750682][ T9146] buffer_io_error: 7 callbacks suppressed [ 94.750692][ T9146] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.755068][ T9146] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.758147][ T5975] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.760860][ T9146] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.763510][ T5975] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.766225][ T9146] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.768888][ T5975] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.771605][ T9146] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.774289][ T5975] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.777281][ T9146] Buffer I/O error on dev loop6, logical block 0, async page read [ 94.801501][ T40] kauditd_printk_skb: 406 callbacks suppressed [ 94.801512][ T40] audit: type=1400 audit(1755598851.987:2746): avc: denied { execmem } for pid=9145 comm="syz.0.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 94.803890][ T34] usb 9-1: USB disconnect, device number 13 [ 94.804004][ C0] pxrc 9-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 94.811288][ T40] audit: type=1400 audit(1755598851.997:2747): avc: denied { create } for pid=9145 comm="syz.0.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.820845][ T40] audit: type=1400 audit(1755598851.997:2748): avc: denied { allowed } for pid=9128 comm="syz.4.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.827373][ T40] audit: type=1400 audit(1755598851.997:2749): avc: denied { prog_load } for pid=9148 comm="syz.6.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.833629][ T40] audit: type=1400 audit(1755598851.997:2750): avc: denied { bpf } for pid=9148 comm="syz.6.888" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.841590][ T40] audit: type=1400 audit(1755598851.997:2751): avc: denied { create } for pid=9128 comm="syz.4.880" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.850870][ T40] audit: type=1400 audit(1755598851.997:2752): avc: denied { perfmon } for pid=9148 comm="syz.6.888" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 94.859699][ T40] audit: type=1400 audit(1755598851.997:2753): avc: denied { map } for pid=9128 comm="syz.4.880" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 94.868950][ T40] audit: type=1400 audit(1755598851.997:2755): avc: denied { prog_run } for pid=9148 comm="syz.6.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 94.874811][ T40] audit: type=1400 audit(1755598851.997:2754): avc: denied { read write } for pid=9128 comm="syz.4.880" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.106854][ T10] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 95.210503][ T9154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.213862][ T9154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.227627][ T5976] Bluetooth: hci2: command 0x0401 tx timeout [ 95.270143][ T10] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.273603][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.276043][ T10] usb 11-1: Product: syz [ 95.277874][ T10] usb 11-1: Manufacturer: syz [ 95.279674][ T10] usb 11-1: SerialNumber: syz [ 95.284141][ T10] usb 11-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 95.297090][ T6134] usb 11-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 95.498777][ T34] usb 11-1: USB disconnect, device number 4 [ 95.644712][ T9163] dlm: Unknown command passed to DLM device : 255 [ 95.644712][ T9163] [ 95.648481][ T9163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65516 sclass=netlink_route_socket pid=9163 comm=syz.0.893 [ 95.946899][ T5976] Bluetooth: hci0: command 0x0419 tx timeout [ 95.956954][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 96.024643][ T5976] Bluetooth: hci0: Dropping invalid advertising data [ 96.026833][ T5976] Bluetooth: hci0: unknown advertising packet type: 0x9b [ 96.026844][ T5976] Bluetooth: hci0: unknown advertising packet type: 0xd3 [ 96.029019][ T5976] Bluetooth: hci0: Malformed LE Event: 0x02 [ 96.137582][ T9173] Trying to write to read-only block-device nullb0 [ 96.327817][ T9186] __nla_validate_parse: 5 callbacks suppressed [ 96.327829][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.902'. [ 96.356907][ T6134] ath9k_htc 11-1:1.0: ath9k_htc: Target is unresponsive [ 96.359919][ T6134] ath9k_htc: Failed to initialize the device [ 96.362088][ T34] usb 11-1: ath9k_htc: USB layer deinitialized [ 96.362644][ T9186] netlink: 40 bytes leftover after parsing attributes in process `syz.6.902'. [ 96.381080][ T6003] usb 6-1: USB disconnect, device number 6 [ 96.541709][ T9205] netlink: 108 bytes leftover after parsing attributes in process `syz.4.908'. [ 96.545588][ T9205] netlink: 108 bytes leftover after parsing attributes in process `syz.4.908'. [ 96.552378][ T9205] netlink: 84 bytes leftover after parsing attributes in process `syz.4.908'. [ 96.579824][ T5976] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 96.659904][ T9221] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 96.747125][ T34] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 96.906864][ T34] usb 11-1: Using ep0 maxpacket: 16 [ 96.911065][ T34] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 96.914009][ T34] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 96.916655][ T34] usb 11-1: Product: syz [ 96.918353][ T6630] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 96.920833][ T34] usb 11-1: Manufacturer: syz [ 96.922485][ T34] usb 11-1: SerialNumber: syz [ 96.925318][ T34] usb 11-1: config 0 descriptor?? [ 97.078979][ T6630] usb 9-1: config 0 has no interfaces? [ 97.080901][ T6630] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 97.083918][ T6630] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.087565][ T6630] usb 9-1: config 0 descriptor?? [ 97.131035][ T6134] usb 11-1: USB disconnect, device number 5 [ 97.306913][ T5976] Bluetooth: hci2: command 0x0401 tx timeout [ 97.520337][ T9236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.917'. [ 97.645597][ T5976] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 97.739187][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.924'. [ 97.742048][ T9255] netlink: 48 bytes leftover after parsing attributes in process `syz.6.924'. [ 97.809719][ T10] usb 9-1: USB disconnect, device number 14 [ 97.886802][ T9266] netlink: 'syz.4.928': attribute type 1 has an invalid length. [ 97.896870][ T6134] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 97.899382][ T9266] bond2: (slave geneve2): making interface the new active one [ 97.902227][ T9266] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 97.905076][ T12] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.908209][ T12] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.911628][ T12] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.912601][ T9266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.928'. [ 97.914688][ T12] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.922900][ T9266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.010200][ T9272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.930'. [ 98.026853][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 98.026871][ T5331] Bluetooth: hci0: command 0x0419 tx timeout [ 98.046858][ T6134] usb 6-1: Using ep0 maxpacket: 16 [ 98.050138][ T6134] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.054759][ T6134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.060160][ T6134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.064692][ T6134] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.070331][ T6134] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 98.074168][ T6134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.078881][ T6134] usb 6-1: config 0 descriptor?? [ 98.081628][ T9250] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.086031][ T6134] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input16 [ 98.289945][ T29] usb 6-1: USB disconnect, device number 7 [ 98.317004][ T5365] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 98.328931][ T9274] syz.6.931 (9274) used greatest stack depth: 18360 bytes left [ 98.548498][ T9301] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 98.936258][ T5976] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 99.048316][ T9333] syz.1.948 uses old SIOCAX25GETINFO [ 99.101645][ T9337] 9pnet_fd: Insufficient options for proto=fd [ 99.130591][ T9341] bond0: entered promiscuous mode [ 99.132732][ T9341] veth0_virt_wifi: entered promiscuous mode [ 99.135908][ T9341] batadv0: entered promiscuous mode [ 99.138245][ T9341] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 99.141718][ T9341] bond0: left promiscuous mode [ 99.143356][ T9341] veth0_virt_wifi: left promiscuous mode [ 99.146297][ T9341] batadv0: left promiscuous mode [ 99.353784][ T9348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.427688][ T9364] kAFS: No cell specified [ 99.728861][ T9386] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 99.771325][ T9394] netlink: 'syz.0.967': attribute type 32 has an invalid length. [ 99.773971][ T9394] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 99.856487][ T9399] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2713647624 (5427295248 ns) > initial count (1775286902 ns). Using initial count to start timer. [ 99.884481][ T40] kauditd_printk_skb: 281 callbacks suppressed [ 99.884500][ T40] audit: type=1400 audit(1755598857.067:3037): avc: denied { map } for pid=9402 comm="syz.4.970" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.894360][ T40] audit: type=1400 audit(1755598857.067:3038): avc: denied { read write } for pid=9402 comm="syz.4.970" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 99.934415][ T40] audit: type=1400 audit(1755598857.117:3039): avc: denied { read } for pid=9404 comm="syz.0.971" name="usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 99.941882][ T40] audit: type=1400 audit(1755598857.117:3040): avc: denied { open } for pid=9404 comm="syz.0.971" path="/dev/usbmon7" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 99.949319][ T40] audit: type=1400 audit(1755598857.117:3041): avc: denied { ioctl } for pid=9404 comm="syz.0.971" path="/dev/usbmon7" dev="devtmpfs" ino=759 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.005998][ T40] audit: type=1400 audit(1755598857.187:3042): avc: denied { write } for pid=9408 comm="syz.4.972" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 100.014958][ T40] audit: type=1400 audit(1755598857.187:3043): avc: denied { execmem } for pid=9408 comm="syz.4.972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 100.038027][ T40] audit: type=1400 audit(1755598857.227:3044): avc: denied { append } for pid=9404 comm="syz.0.971" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.053627][ T40] audit: type=1400 audit(1755598857.237:3045): avc: denied { write } for pid=9415 comm="syz.0.973" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 100.061703][ T9416] veth1_macvtap: left promiscuous mode [ 100.064584][ T9416] macsec0: entered promiscuous mode [ 100.065900][ T40] audit: type=1400 audit(1755598857.257:3046): avc: denied { create } for pid=9419 comm="syz.4.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.066407][ T9416] macsec0: entered allmulticast mode [ 100.080454][ T9417] veth1_macvtap: entered promiscuous mode [ 100.089011][ T9417] veth1_macvtap: entered allmulticast mode [ 100.092274][ T9417] macsec0: left promiscuous mode [ 100.094368][ T9417] macsec0: left allmulticast mode [ 100.096348][ T9417] veth1_macvtap: left allmulticast mode [ 100.365032][ T9448] kAFS: unparsable volume name [ 100.368035][ T9448] tmpfs: Cannot disable swap on remount [ 100.371468][ T9451] kAFS: unparsable volume name [ 100.630336][ T9477] /dev/nullb0: Can't open blockdev [ 100.657276][ T473] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.659357][ T9487] Bluetooth: hci4: Frame reassembly failed (-84) [ 100.676706][ T9493] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20000 [ 100.842478][ T9520] netlink: 'syz.6.985': attribute type 9 has an invalid length. [ 100.845013][ T9519] netlink: 'syz.6.985': attribute type 9 has an invalid length. [ 100.957710][ T9543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65521 sclass=netlink_route_socket pid=9543 comm=syz.4.990 [ 100.984088][ T9545] kAFS: No cell specified [ 101.004716][ T9553] usb usb9: usbfs: process 9553 (syz.6.993) did not claim interface 0 before use [ 101.018502][ T9554] No control pipe specified [ 101.033395][ T9550] sctp: [Deprecated]: syz.0.992 (pid 9550) Use of int in max_burst socket option deprecated. [ 101.033395][ T9550] Use struct sctp_assoc_value instead [ 101.038673][ T9550] openvswitch: netlink: Flow actions attr not present in new flow. [ 101.039955][ T9558] binder: 9556:9558 unknown command 0 [ 101.042899][ T9558] binder: 9556:9558 ioctl c0306201 200000000080 returned -22 [ 101.053244][ T9558] binder: BINDER_SET_CONTEXT_MGR already set [ 101.055174][ T9558] binder: 9556:9558 ioctl 4018620d 2000000002c0 returned -16 [ 101.064291][ T9558] binder_alloc: 9556: binder_alloc_buf, no vma [ 101.119365][ T5976] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 101.858916][ T9586] __nla_validate_parse: 14 callbacks suppressed [ 101.858929][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 101.879860][ T9586] binder: BINDER_SET_CONTEXT_MGR already set [ 101.881902][ T9586] binder: 9585:9586 ioctl 4018620d 200000004a80 returned -16 [ 102.105875][ T9612] tty tty33: ldisc open failed (-12), clearing slot 32 [ 102.164956][ T9618] wireguard0: entered promiscuous mode [ 102.167885][ T9618] wireguard0: entered allmulticast mode [ 102.172101][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1009'. [ 102.175856][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1009'. [ 102.204005][ T9627] ufs: You didn't specify the type of your ufs filesystem [ 102.204005][ T9627] [ 102.204005][ T9627] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 102.204005][ T9627] [ 102.204005][ T9627] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 102.221111][ T9627] ufs: ufstype=old is supported read-only [ 102.223640][ T9627] syz.6.1012: attempt to access beyond end of device [ 102.223640][ T9627] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 102.419152][ T9640] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 102.667139][ T5976] Bluetooth: hci4: command 0x1003 tx timeout [ 102.667166][ T5331] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.718208][ T9667] tmpfs: Unknown parameter 'grpquota ' [ 102.763658][ T9679] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1028'. [ 102.766806][ T9679] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1028'. [ 102.899127][ T9689] mkiss: ax0: crc mode is auto. [ 103.019904][ T9702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9702 comm=syz.1.1035 [ 103.044360][ T9702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.046036][ T9704] netlink: 'syz.0.1036': attribute type 7 has an invalid length. [ 103.266129][ T9734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1046'. [ 103.318259][ T9739] netlink: 'syz.0.1047': attribute type 63 has an invalid length. [ 103.530434][ T9762] 9pnet: Could not find request transport: vi [ 103.625886][ T9779] nftables ruleset with unbound chain [ 103.648609][ T9779] binder: 9772:9779 ioctl c0306201 200000000180 returned -14 [ 103.679229][ T9786] bridge_slave_0: left allmulticast mode [ 103.681141][ T9786] bridge_slave_0: left promiscuous mode [ 103.683131][ T9786] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.686587][ T9786] bridge_slave_1: left allmulticast mode [ 103.689301][ T9786] bridge_slave_1: left promiscuous mode [ 103.691930][ T9786] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.697574][ T9786] bond0: (slave bond_slave_0): Releasing backup interface [ 103.703984][ T9786] bond0: (slave bond_slave_1): Releasing backup interface [ 103.704351][ T9787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1057'. [ 103.713532][ T9786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.715996][ T9786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.720390][ T9786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.722795][ T9786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.730369][ T9786] bond2: (slave geneve2): Releasing active interface [ 103.736580][ T9005] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.739880][ T9005] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.742631][ T9005] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.745296][ T9005] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.754231][ T9787] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1057'. [ 103.757316][ T9787] netlink: zone id is out of range [ 103.758970][ T9787] netlink: zone id is out of range [ 103.760633][ T9787] netlink: zone id is out of range [ 103.762289][ T9787] netlink: zone id is out of range [ 103.763979][ T9787] netlink: zone id is out of range [ 103.765572][ T9787] netlink: zone id is out of range [ 103.767274][ T9787] netlink: get zone limit has 8 unknown bytes [ 103.801479][ T9795] overlayfs: failed to resolve './file1': -2 [ 103.824098][ T9799] tipc: Enabling of bearer rejected, media not registered [ 103.844821][ T9803] bpf: Bad value for 'uid' [ 103.968257][ T9815] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1071'. [ 103.984177][ T9815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9815 comm=syz.6.1071 [ 104.399673][ T9773] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.402034][ T9773] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.404133][ T9773] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.444207][ T9834] bridge_slave_0: left allmulticast mode [ 104.444772][ T9836] netlink: 'syz.1.1077': attribute type 1 has an invalid length. [ 104.447281][ T9834] bridge_slave_0: left promiscuous mode [ 104.449903][ T9836] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1077'. [ 104.452560][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.462918][ T9834] bridge_slave_1: left allmulticast mode [ 104.465651][ T9834] bridge_slave_1: left promiscuous mode [ 104.471166][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.478737][ T9834] bond0: (slave bond_slave_0): Releasing backup interface [ 104.520102][ T9834] bond0: (slave bond_slave_1): Releasing backup interface [ 104.554300][ T9834] team0: Port device team_slave_0 removed [ 104.561790][ T9834] team0: Port device team_slave_1 removed [ 104.564264][ T9834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.566922][ T9834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.570732][ T9834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.573248][ T9834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.580492][ T9840] team0: Mode changed to "activebackup" [ 104.630105][ T9853] nbd: illegal input index 1879048192 [ 104.726890][ T6134] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 104.866846][ T6630] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.878139][ T6134] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 104.882579][ T6134] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 104.886668][ T6134] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 104.890952][ T6134] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.895979][ T6134] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.899634][ T6134] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.907153][ T6134] usb 9-1: config 0 descriptor?? [ 105.018254][ T6630] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 105.022188][ T6630] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 105.029255][ T6630] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 105.033015][ T6630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.036268][ T6630] usb 5-1: Product: syz [ 105.038574][ T6630] usb 5-1: Manufacturer: syz [ 105.040582][ T6630] usb 5-1: SerialNumber: syz [ 105.047255][ T6630] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 105.057049][ T40] kauditd_printk_skb: 436 callbacks suppressed [ 105.057065][ T40] audit: type=1400 audit(1755598862.237:3483): avc: denied { firmware_load } for pid=6630 comm="kworker/3:4" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 105.075315][ T6630] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 105.313875][ T6134] hid_parser_main: 73 callbacks suppressed [ 105.313890][ T6134] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 105.320025][ T6134] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 105.322614][ T6134] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 105.323410][ T34] usb 5-1: USB disconnect, device number 9 [ 105.325048][ T6134] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 105.329273][ T6134] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 105.331728][ T6134] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 105.334057][ T6134] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 105.336476][ T6134] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 105.338873][ T6134] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 105.341220][ T6134] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 105.345592][ T6134] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 105.405687][ T40] audit: type=1400 audit(1755598862.587:3484): avc: denied { create } for pid=9861 comm="syz.1.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.412262][ T40] audit: type=1400 audit(1755598862.587:3485): avc: denied { write } for pid=9861 comm="syz.1.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 105.418474][ T40] audit: type=1400 audit(1755598862.597:3486): avc: denied { bpf } for pid=9861 comm="syz.1.1083" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.424847][ T40] audit: type=1400 audit(1755598862.597:3487): avc: denied { perfmon } for pid=9861 comm="syz.1.1083" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.431355][ T40] audit: type=1400 audit(1755598862.607:3488): avc: denied { create } for pid=9861 comm="syz.1.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.438491][ T40] audit: type=1400 audit(1755598862.607:3489): avc: denied { write } for pid=9861 comm="syz.1.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.444872][ T40] audit: type=1400 audit(1755598862.607:3490): avc: denied { read } for pid=9861 comm="syz.1.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 105.451365][ T40] audit: type=1400 audit(1755598862.607:3491): avc: denied { name_bind } for pid=9861 comm="syz.1.1083" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 105.571447][ T29] usb 9-1: USB disconnect, device number 15 [ 105.586848][ T40] audit: type=1400 audit(1755598862.767:3492): avc: denied { create } for pid=9868 comm="syz.1.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.707098][ T5331] Bluetooth: hci2: command 0x0401 tx timeout [ 105.720432][ T9883] tipc: Started in network mode [ 105.722093][ T9883] tipc: Node identity 4, cluster identity 4711 [ 105.724048][ T9883] tipc: Node number set to 4 [ 105.754088][ T9889] netlink: 'syz.6.1093': attribute type 10 has an invalid length. [ 105.761206][ T9889] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.875384][ T9900] syzkaller1: entered promiscuous mode [ 105.877298][ T9900] syzkaller1: entered allmulticast mode [ 106.087810][ T9923] overlayfs: failed to resolve './file0': -2 [ 106.107065][ T6630] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 106.109651][ T6630] ath9k_htc: Failed to initialize the device [ 106.111869][ T34] usb 5-1: ath9k_htc: USB layer deinitialized [ 106.167860][ T9935] syz.6.1108: attempt to access beyond end of device [ 106.167860][ T9935] loop6: rw=0, sector=16, nr_sectors = 1 limit=0 [ 106.171915][ T9935] qnx6: unable to read the first superblock [ 106.173867][ T9935] syz.6.1108: attempt to access beyond end of device [ 106.173867][ T9935] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 106.178073][ T9935] qnx6: unable to read the first superblock [ 106.180038][ T9935] qnx6: unable to read the first superblock [ 106.257423][ T9929] block nbd4: shutting down sockets [ 106.261910][ T9929] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 106.265211][ T9929] netlink: 'syz.4.1106': attribute type 1 has an invalid length. [ 106.270300][ T9942] binder_alloc: 9941: binder_alloc_buf, no vma [ 106.277154][ T9929] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 106.327635][ T9945] geneve1: entered allmulticast mode [ 106.330790][ T9947] netlink: 'syz.4.1111': attribute type 8 has an invalid length. [ 106.375272][ T9956] syz.6.1114: attempt to access beyond end of device [ 106.375272][ T9956] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 106.379456][ T9956] syz.6.1114: attempt to access beyond end of device [ 106.379456][ T9956] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 106.383635][ T9956] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 106.386594][ T9956] syz.6.1114: attempt to access beyond end of device [ 106.386594][ T9956] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 106.391088][ T9956] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 106.395130][ T9956] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 106.398938][ T9956] UDF-fs: Scanning with blocksize 512 failed [ 106.401510][ T9956] syz.6.1114: attempt to access beyond end of device [ 106.401510][ T9956] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 106.405557][ T9956] syz.6.1114: attempt to access beyond end of device [ 106.405557][ T9956] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 106.409701][ T9956] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 106.412724][ T9956] syz.6.1114: attempt to access beyond end of device [ 106.412724][ T9956] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 106.416881][ T9956] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 106.419805][ T9956] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 106.422180][ T9956] UDF-fs: Scanning with blocksize 1024 failed [ 106.424246][ T9956] syz.6.1114: attempt to access beyond end of device [ 106.424246][ T9956] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 106.426936][ T5331] Bluetooth: hci0: command 0x0419 tx timeout [ 106.427064][ T5976] Bluetooth: hci3: command 0x0406 tx timeout [ 106.428773][ T9956] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 106.430566][ T5331] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 106.432178][ T9956] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 106.440225][ T9956] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 106.442596][ T9956] UDF-fs: Scanning with blocksize 2048 failed [ 106.444717][ T9956] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 106.448387][ T9956] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 106.451802][ T9956] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 106.454191][ T9956] UDF-fs: Scanning with blocksize 4096 failed [ 106.456117][ T9956] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 106.667348][ T6134] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 106.698407][ T9982] overlayfs: missing 'lowerdir' [ 106.741447][ T6003] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 106.816921][ T6134] usb 9-1: Using ep0 maxpacket: 32 [ 106.820602][ T6134] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 106.824026][ T6134] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 106.827719][ T6134] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 106.830981][ T6134] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 106.834913][ T6134] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 106.839697][ T6134] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.844943][ T6134] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 106.848694][ T6134] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.856040][ T6134] usb 9-1: config 0 descriptor?? [ 106.886848][ T6003] usb 11-1: Using ep0 maxpacket: 8 [ 106.890623][ T6003] usb 11-1: config 0 interface 0 has no altsetting 0 [ 106.893188][ T6003] usb 11-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 106.896975][ T6003] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.900962][ T6003] usb 11-1: config 0 descriptor?? [ 106.941873][ T9996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9996 comm=syz.1.1126 [ 107.016482][T10005] bond0: (slave veth0_virt_wifi): Releasing backup interface [ 107.059804][ T6134] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 107.064256][ T6134] usb 9-1: USB disconnect, device number 16 [ 107.065045][T10005] bond1: (slave geneve2): Releasing active interface [ 107.068230][ T6134] usblp0: removed [ 107.109878][ T9010] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.112757][ T9010] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.115614][ T9010] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.118583][ T9010] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.124622][T10007] __nla_validate_parse: 4 callbacks suppressed [ 107.124633][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1130'. [ 107.139841][T10007] team0: Port device team_slave_0 removed [ 107.309455][ T6003] usb 11-1: string descriptor 0 read error: -71 [ 107.313385][ T6003] usbhid 11-1:0.0: can't add hid device: -71 [ 107.315359][ T6003] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 107.318399][ T6003] usb 11-1: USB disconnect, device number 6 [ 107.556872][ T4341] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 107.706905][ T4341] usb 9-1: Using ep0 maxpacket: 32 [ 107.710076][ T4341] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 107.713341][ T4341] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 107.716826][ T4341] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 107.720390][ T4341] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.724148][ T4341] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.727991][ T4341] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 107.733073][ T4341] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 107.736552][ T4341] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.740960][ T4341] usb 9-1: config 0 descriptor?? [ 108.032456][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1138'. [ 108.034397][T10035] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 108.044372][T10035] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.059824][T10035] veth3: entered promiscuous mode [ 108.063218][T10035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10035 comm=syz.1.1139 [ 108.070624][T10035] vlan2: entered allmulticast mode [ 108.072266][T10035] bond3: entered allmulticast mode [ 108.105155][T10040] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1141'. [ 108.123291][T10043] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1143'. [ 108.143218][T10049] MINIX-fs: blocksize too small for device [ 108.144130][T10051] dummy0: entered allmulticast mode [ 108.148342][ T4341] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 108.190690][ T5331] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 108.361278][ T9954] Option ''MO' to dns_resolver key: bad/missing value [ 109.200145][T10109] overlayfs: failed to resolve './file0': -2 [ 109.297708][T10129] syzkaller1: entered promiscuous mode [ 109.299513][T10129] syzkaller1: entered allmulticast mode [ 109.470745][T10152] random: crng reseeded on system resumption [ 109.476148][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1182'. [ 109.483203][T10142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.616990][T10142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.674461][T10161] bio_check_eod: 5 callbacks suppressed [ 109.674471][T10161] syz.6.1186: attempt to access beyond end of device [ 109.674471][T10161] nbd6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 109.683296][T10161] syz.6.1186: attempt to access beyond end of device [ 109.683296][T10161] nbd6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 109.688181][T10161] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 109.691253][T10161] syz.6.1186: attempt to access beyond end of device [ 109.691253][T10161] nbd6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 109.695946][T10161] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 109.699163][T10161] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 109.701561][T10161] UDF-fs: Scanning with blocksize 512 failed [ 109.703716][T10161] syz.6.1186: attempt to access beyond end of device [ 109.703716][T10161] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 109.708780][T10161] syz.6.1186: attempt to access beyond end of device [ 109.708780][T10161] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 109.713094][T10161] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 109.718180][T10161] syz.6.1186: attempt to access beyond end of device [ 109.718180][T10161] nbd6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 109.722644][T10161] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 109.725561][T10161] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 109.728053][T10161] UDF-fs: Scanning with blocksize 1024 failed [ 109.730251][T10161] syz.6.1186: attempt to access beyond end of device [ 109.730251][T10161] nbd6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 109.734339][T10161] syz.6.1186: attempt to access beyond end of device [ 109.734339][T10161] nbd6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 109.738686][T10161] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 109.739287][T10163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1187'. [ 109.741650][T10161] syz.6.1186: attempt to access beyond end of device [ 109.741650][T10161] nbd6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 109.748750][T10161] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 109.751772][T10161] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 109.754318][T10161] UDF-fs: Scanning with blocksize 2048 failed [ 109.756456][T10161] syz.6.1186: attempt to access beyond end of device [ 109.756456][T10161] nbd6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 109.760674][T10161] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 109.761436][T10142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.763778][T10161] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 109.770438][T10161] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 109.773624][T10161] UDF-fs: Scanning with blocksize 4096 failed [ 109.775649][T10161] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 109.790702][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1189'. [ 109.821674][T10142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.884070][T10170] input: syz1 as /devices/virtual/input/input17 [ 109.936538][ T6630] IPVS: starting estimator thread 0... [ 109.992583][ T9010] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.997386][ T9010] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.001680][ T9005] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.006851][ T9005] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.026838][T10178] IPVS: using max 55 ests per chain, 132000 per kthread [ 110.132156][ T40] kauditd_printk_skb: 378 callbacks suppressed [ 110.132208][ T40] audit: type=1400 audit(1755598867.317:3871): avc: denied { create } for pid=10190 comm="syz.6.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.140391][ T40] audit: type=1400 audit(1755598867.317:3872): avc: denied { read } for pid=10190 comm="syz.6.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.169749][T10196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.185667][ T40] audit: type=1400 audit(1755598867.367:3873): avc: denied { ioctl } for pid=10190 comm="syz.6.1196" path="socket:[41993]" dev="sockfs" ino=41993 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.191035][ T5331] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 110.195674][ T40] audit: type=1400 audit(1755598867.377:3874): avc: denied { write } for pid=10190 comm="syz.6.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.199871][T10200] tmpfs: Group quota inode hardlimit too large. [ 110.205733][ T40] audit: type=1400 audit(1755598867.387:3875): avc: denied { create } for pid=10199 comm="syz.0.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.213971][ T40] audit: type=1400 audit(1755598867.387:3876): avc: denied { bind } for pid=10199 comm="syz.0.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.220160][ T40] audit: type=1400 audit(1755598867.387:3877): avc: denied { setopt } for pid=10199 comm="syz.0.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.226447][ T40] audit: type=1400 audit(1755598867.387:3878): avc: denied { write } for pid=10199 comm="syz.0.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.233815][ T40] audit: type=1400 audit(1755598867.387:3879): avc: denied { read } for pid=10199 comm="syz.0.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.240697][ T40] audit: type=1400 audit(1755598867.387:3880): avc: denied { mounton } for pid=10199 comm="syz.0.1199" path="/302/file0" dev="tmpfs" ino=1603 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 110.255795][T10210] overlayfs: failed to resolve 'w5T)`)YFnA@T<3ڂ$rcnHwC" -8/': -2 [ 110.260383][T10210] 9pnet_virtio: no channels available for device syz [ 110.291202][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 110.574042][T10229] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1209'. [ 110.660562][T10233] /dev/nullb0: Can't open blockdev [ 110.685328][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'. [ 110.745462][T10236] loop6: detected capacity change from 0 to 6656 [ 110.751766][T10236] buffer_io_error: 18454 callbacks suppressed [ 110.751776][T10236] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.757945][T10236] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.760498][T10236] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.763137][T10236] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.765684][T10236] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.768448][T10236] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.771311][T10236] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.773938][T10236] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.776414][T10236] ldm_validate_partition_table(): Disk read failed. [ 110.778715][T10236] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.781213][T10236] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.783762][T10236] Dev loop6: unable to read RDB block 0 [ 110.785646][T10236] loop6: unable to read partition table [ 110.788119][T10236] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 111.198544][ T5331] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 111.234501][T10282] netlink: 'syz.6.1230': attribute type 14 has an invalid length. [ 111.238758][T10282] netlink: 'syz.6.1230': attribute type 14 has an invalid length. [ 111.252257][T10285] ufs: You didn't specify the type of your ufs filesystem [ 111.252257][T10285] [ 111.252257][T10285] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 111.252257][T10285] [ 111.252257][T10285] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 111.262353][T10285] ufs: ufstype=old is supported read-only [ 111.263241][T10277] cdrom: dropping to single frame dma [ 111.279950][T10288] No source specified [ 111.653977][T10323] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 112.016521][T10356] netlink: 'syz.1.1253': attribute type 3 has an invalid length. [ 112.019947][T10356] netlink: 'syz.1.1253': attribute type 1 has an invalid length. [ 112.051806][T10360] netlink: 'syz.0.1255': attribute type 1 has an invalid length. [ 112.350313][T10389] ptrace attach of "/syz-executor exec"[6124] was attempted by "/syz-executor exec"[10389] [ 112.465940][T10398] __nla_validate_parse: 7 callbacks suppressed [ 112.465950][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 112.496095][T10405] tmpfs: Cannot enable quota on remount [ 112.506011][T10407] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1269'. [ 112.513612][T10407] binder: 10406:10407 ioctl c0306201 200000000640 returned -22 [ 112.736896][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.888063][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.891508][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 47407, setting to 1024 [ 112.895086][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 112.899133][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.902076][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.906449][T10405] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 112.910203][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 113.112123][ T9] usb 5-1: USB disconnect, device number 10 [ 113.120539][T10427] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 113.305617][T10437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 113.371436][T10443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=10443 comm=syz.1.1280 [ 113.386582][T10446] netlink: 'syz.4.1281': attribute type 6 has an invalid length. [ 113.596238][T10462] netdevsim netdevsim6: Firmware load for '../file0/../file0/../file0' refused, path contains '..' component [ 113.601923][T10462] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1287'. [ 113.606407][T10462] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 113.654195][ T5331] Bluetooth: hci3: unexpected event for opcode 0x200c [ 113.736930][ T6630] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 113.840985][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1301'. [ 113.867709][T10523] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 113.883544][T10543] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 113.885581][T10543] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.888338][T10543] vhci_hcd vhci_hcd.0: Device attached [ 113.891546][T10543] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 113.893591][T10543] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.895932][T10543] vhci_hcd vhci_hcd.0: Device attached [ 113.895935][T10546] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(8) [ 113.898355][ T6630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.899722][T10546] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.903025][ T6630] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.905634][T10546] vhci_hcd vhci_hcd.0: Device attached [ 113.910404][T10520] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1302'. [ 113.912164][ T6630] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 113.913380][T10520] 0: renamed from hsr0 (while UP) [ 113.916083][ T6630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.922291][T10520] 0: entered allmulticast mode [ 113.923851][T10520] hsr_slave_0: entered allmulticast mode [ 113.925853][T10520] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 113.931988][ T6630] usb 6-1: config 0 descriptor?? [ 113.963677][T10546] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(11) [ 113.965776][T10546] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 113.968903][T10546] vhci_hcd vhci_hcd.0: Device attached [ 113.971593][T10559] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(13) [ 113.973701][T10559] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 113.976226][T10559] vhci_hcd vhci_hcd.0: Device attached [ 113.978320][T10548] vhci_hcd: connection closed [ 113.978433][T10544] vhci_hcd: connection closed [ 113.978481][ T9006] vhci_hcd: stop threads [ 113.978481][T10557] vhci_hcd: connection closed [ 113.978491][ T9006] vhci_hcd: release socket [ 113.978497][ T9006] vhci_hcd: disconnect device [ 113.978508][T10547] vhci_hcd: connection closed [ 113.978632][ T9006] vhci_hcd: stop threads [ 113.978638][ T9006] vhci_hcd: release socket [ 113.978642][ T9006] vhci_hcd: disconnect device [ 113.980137][ T9006] vhci_hcd: stop threads [ 113.988231][T10560] vhci_hcd: connection closed [ 113.989094][ T9006] vhci_hcd: release socket [ 113.998351][ T9006] vhci_hcd: disconnect device [ 113.999942][ T9006] vhci_hcd: stop threads [ 114.001396][ T9006] vhci_hcd: release socket [ 114.002884][ T9006] vhci_hcd: disconnect device [ 114.004504][ T9006] vhci_hcd: stop threads [ 114.005862][ T9006] vhci_hcd: release socket [ 114.007367][ T9006] vhci_hcd: disconnect device [ 114.058204][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1305'. [ 114.066826][ T9] vhci_hcd: vhci_device speed not set [ 114.093126][T10606] binder: binder_mmap: 10605 200000000000-200000400000 bad vm_flags failed -1 [ 114.141520][ T6630] usbhid 6-1:0.0: can't add hid device: -71 [ 114.143625][ T6630] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 114.147140][ T6630] usb 6-1: USB disconnect, device number 8 [ 114.320243][T10626] program syz.4.1309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.343172][T10630] mac80211_hwsim hwsim12 a: renamed from wlan1 (while UP) [ 114.389138][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1310'. [ 114.406114][T10634] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1312'. [ 114.520962][T10662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1315'. [ 114.566047][T10699] overlayfs: failed to resolve './bus': -2 [ 114.733626][ T5331] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 114.795443][T10737] binder: 10736:10737 ioctl 3b87 200000001380 returned -22 [ 114.850534][ T5331] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 114.850819][T10737] binder: 10736:10737 ioctl c0306201 200000000180 returned -14 [ 114.853651][ T5331] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 114.978093][T10756] gfs2: Unknown parameter '-hnecoveryy' [ 115.094336][ T5331] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 115.167366][ T40] kauditd_printk_skb: 444 callbacks suppressed [ 115.167378][ T40] audit: type=1400 audit(1755598872.357:4325): avc: denied { execute } for pid=10759 comm="syz.1.1334" path="/378/cpu.stat" dev="tmpfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.287509][ T40] audit: type=1400 audit(1755598872.477:4326): avc: denied { module_request } for pid=10768 comm="syz.1.1336" kmod=6E65746465762DA4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 115.299832][ T40] audit: type=1400 audit(1755598872.487:4327): avc: denied { sys_module } for pid=10768 comm="syz.1.1336" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 115.330442][ T40] audit: type=1400 audit(1755598872.517:4328): avc: denied { write } for pid=10775 comm="syz.1.1337" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 115.337815][ T40] audit: type=1400 audit(1755598872.517:4329): avc: denied { write } for pid=10775 comm="syz.1.1337" name="igmp" dev="proc" ino=4026533022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 115.344984][ T40] audit: type=1400 audit(1755598872.517:4330): avc: denied { create } for pid=10775 comm="syz.1.1337" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.351988][ T40] audit: type=1400 audit(1755598872.517:4331): avc: denied { write } for pid=10775 comm="syz.1.1337" name="file0" dev="tmpfs" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.359760][ T40] audit: type=1400 audit(1755598872.517:4332): avc: denied { open } for pid=10775 comm="syz.1.1337" path="/381/file0" dev="tmpfs" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.367198][ T40] audit: type=1400 audit(1755598872.517:4333): avc: denied { ioctl } for pid=10775 comm="syz.1.1337" path="/381/file0" dev="tmpfs" ino=2071 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 115.383871][ T40] audit: type=1400 audit(1755598872.567:4334): avc: denied { prog_load } for pid=10778 comm="syz.0.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 115.467129][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1341'. [ 115.493998][T10796] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 115.521690][T10802] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 115.523995][T10802] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 115.526187][T10802] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 115.529755][T10802] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 115.615507][T10823] netlink: 'syz.6.1350': attribute type 1 has an invalid length. [ 115.631613][T10823] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 115.635693][T10823] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 115.686503][T10867] gretap4: entered promiscuous mode [ 115.688814][T10870] tmpfs: Bad value for 'huge' [ 115.690048][T10867] bond1: (slave gretap4): making interface the new active one [ 115.693200][T10867] bond1: (slave gretap4): Enslaving as an active interface with an up link [ 115.706615][T10867] macvlan3: entered promiscuous mode [ 115.712074][T10867] macvlan3: entered allmulticast mode [ 115.714203][T10867] bond1: entered promiscuous mode [ 115.716114][T10867] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 115.738308][T10867] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap4 [ 115.767918][T10867] bond1: left promiscuous mode [ 115.786247][T10885] Invalid logical block size (2) [ 115.789759][T10888] Invalid logical block size (2) [ 115.811273][T10894] vivid-002: ================= START STATUS ================= [ 115.814183][T10894] vivid-002: Radio HW Seek Mode: Bounded [ 115.816141][T10894] vivid-002: Radio Programmable HW Seek: false [ 115.818721][T10894] vivid-002: RDS Rx I/O Mode: Block I/O [ 115.820851][T10894] vivid-002: Generate RBDS Instead of RDS: false [ 115.822976][T10894] vivid-002: RDS Reception: true [ 115.824954][T10894] vivid-002: RDS Program Type: 0 inactive [ 115.827867][T10894] vivid-002: RDS PS Name: inactive [ 115.829739][T10894] vivid-002: RDS Radio Text: inactive [ 115.831477][T10894] vivid-002: RDS Traffic Announcement: false inactive [ 115.833573][T10894] vivid-002: RDS Traffic Program: false inactive [ 115.835577][T10894] vivid-002: RDS Music: false inactive [ 115.837477][T10894] vivid-002: ================== END STATUS ================== [ 115.848864][ T5331] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 115.953719][T10947] netlink: 'syz.6.1367': attribute type 1 has an invalid length. [ 115.973161][T10947] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.983637][T10947] bond2: (slave ip6gretap1): making interface the new active one [ 115.987470][T10947] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 116.019167][ T5331] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 116.034619][T11002] kernel profiling enabled (shift: 63) [ 116.036446][T11002] profiling shift: 63 too large [ 116.049861][T11012] ptrace attach of "/syz-executor exec"[5977] was attempted by "/syz-executor exec"[11012] [ 116.407465][ C2] vcan0: j1939_tp_rxtimer: 0xffff888025389800: rx timeout, send abort [ 116.534309][T11075] overlay: filesystem on ./bus not supported as upperdir [ 116.713523][ T5331] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 116.814472][T11105] binder: 11104:11105 ioctl d000943e 200000002580 returned -22 [ 116.907478][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802538ac00: rx timeout, send abort [ 116.910263][ C2] vcan0: j1939_tp_rxtimer: 0xffff888025389800: abort rx timeout. Force session deactivation [ 117.055924][ T5331] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 117.076638][T11151] netlink: 'syz.6.1390': attribute type 29 has an invalid length. [ 117.079881][T11151] netlink: 'syz.6.1390': attribute type 29 has an invalid length. [ 117.083174][T11151] netlink: 'syz.6.1390': attribute type 29 has an invalid length. [ 117.130006][T11160] program syz.1.1389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.410245][ C2] vcan0: j1939_tp_rxtimer: 0xffff88802538ac00: abort rx timeout. Force session deactivation [ 117.416819][ T6134] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 117.458205][T11202] gretap2: entered promiscuous mode [ 117.566785][ T6134] usb 11-1: Using ep0 maxpacket: 8 [ 117.569935][ T6134] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 117.573192][ T6134] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.577425][ T6134] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.581355][ T6134] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.585292][ T6134] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.590993][ T6134] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.594537][ T6134] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.595945][T11227] MPI: mpi too large (16392 bits) [ 117.599882][T11227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.627350][ T5331] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 117.801422][ T6134] usb 11-1: usb_control_msg returned -32 [ 117.803309][ T6134] usbtmc 11-1:16.0: can't read capabilities [ 117.923305][T11279] __nla_validate_parse: 7 callbacks suppressed [ 117.923317][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 117.998419][T11298] TCP: TCP_TX_DELAY enabled [ 118.112891][T11323] xfrm0 speed is unknown, defaulting to 1000 [ 118.114879][T11323] xfrm0 speed is unknown, defaulting to 1000 [ 118.117267][T11323] xfrm0 speed is unknown, defaulting to 1000 [ 118.121621][T11323] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.125267][T11323] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 118.133178][T11323] xfrm0 speed is unknown, defaulting to 1000 [ 118.135528][T11323] xfrm0 speed is unknown, defaulting to 1000 [ 118.138468][T11323] xfrm0 speed is unknown, defaulting to 1000 [ 118.141102][T11323] xfrm0 speed is unknown, defaulting to 1000 [ 118.191490][T11352] FAULT_INJECTION: forcing a failure. [ 118.191490][T11352] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.195639][T11352] CPU: 1 UID: 0 PID: 11352 Comm: syz.4.1417 Not tainted syzkaller #0 PREEMPT(full) [ 118.195659][T11352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.195671][T11352] Call Trace: [ 118.195677][T11352] [ 118.195682][T11352] dump_stack_lvl+0x16c/0x1f0 [ 118.195727][T11352] should_fail_ex+0x512/0x640 [ 118.195752][T11352] _copy_from_user+0x2e/0xd0 [ 118.195766][T11352] get_user_ifreq+0xf1/0x250 [ 118.195780][T11352] sock_do_ioctl+0x16b/0x280 [ 118.195793][T11352] ? __pfx_sock_do_ioctl+0x10/0x10 [ 118.195806][T11352] ? preempt_count_add+0x76/0x150 [ 118.195818][T11352] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 118.195835][T11352] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 118.195853][T11352] sock_ioctl+0x227/0x6b0 [ 118.195867][T11352] ? __pfx_sock_ioctl+0x10/0x10 [ 118.195880][T11352] ? hook_file_ioctl_common+0x145/0x410 [ 118.195893][T11352] ? selinux_file_ioctl+0x180/0x270 [ 118.195907][T11352] ? selinux_file_ioctl+0xb4/0x270 [ 118.195922][T11352] ? __pfx_sock_ioctl+0x10/0x10 [ 118.195936][T11352] __x64_sys_ioctl+0x18e/0x210 [ 118.195952][T11352] do_syscall_64+0xcd/0x4c0 [ 118.195964][T11352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.195975][T11352] RIP: 0033:0x7f3667b8ebe9 [ 118.195984][T11352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.195994][T11352] RSP: 002b:00007f3668ae2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.196010][T11352] RAX: ffffffffffffffda RBX: 00007f3667db5fa0 RCX: 00007f3667b8ebe9 [ 118.196017][T11352] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000005 [ 118.196023][T11352] RBP: 00007f3668ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 118.196029][T11352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.196035][T11352] R13: 00007f3667db6038 R14: 00007f3667db5fa0 R15: 00007fff12628258 [ 118.196045][T11352] [ 118.262159][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.328480][T11369] fuse: Bad value for 'user_id' [ 118.330180][T11369] fuse: Bad value for 'user_id' [ 118.384030][T11382] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1422'. [ 118.384534][T11384] netlink: 'syz.4.1422': attribute type 10 has an invalid length. [ 118.397947][T11384] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 118.409308][T11388] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.490173][T11388] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.563492][T11409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.610362][T11388] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.690814][T11388] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.821613][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.827540][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.832176][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.839371][ T9010] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.842838][T11387] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.889828][T11387] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.906939][ T5331] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 118.909590][ T5331] Bluetooth: hci3: Injecting HCI hardware error event [ 118.911858][ T5331] Bluetooth: hci3: hardware error 0x00 [ 118.930251][T11387] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.988960][T11387] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.178916][T11445] FAULT_INJECTION: forcing a failure. [ 119.178916][T11445] name failslab, interval 1, probability 0, space 0, times 1 [ 119.184114][T11445] CPU: 3 UID: 0 PID: 11445 Comm: syz.1.1430 Not tainted syzkaller #0 PREEMPT(full) [ 119.184139][T11445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 119.184149][T11445] Call Trace: [ 119.184155][T11445] [ 119.184162][T11445] dump_stack_lvl+0x16c/0x1f0 [ 119.184184][T11445] should_fail_ex+0x512/0x640 [ 119.184205][T11445] should_failslab+0xc2/0x120 [ 119.184226][T11445] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 119.184244][T11445] ? __alloc_skb+0x2b2/0x380 [ 119.184262][T11445] __alloc_skb+0x2b2/0x380 [ 119.184277][T11445] ? __pfx___alloc_skb+0x10/0x10 [ 119.184294][T11445] ? if_nlmsg_size+0x475/0xaf0 [ 119.184312][T11445] rtmsg_ifinfo_build_skb+0x81/0x280 [ 119.184335][T11445] rtnetlink_event+0xf3/0x1f0 [ 119.184357][T11445] notifier_call_chain+0xb9/0x410 [ 119.184382][T11445] ? __pfx_rtnetlink_event+0x10/0x10 [ 119.184404][T11445] call_netdevice_notifiers_info+0xbe/0x140 [ 119.184427][T11445] netif_change_tx_queue_len+0x129/0x1e0 [ 119.184446][T11445] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 119.184464][T11445] ? full_name_hash+0xbc/0x110 [ 119.184488][T11445] dev_change_tx_queue_len+0xb2/0x260 [ 119.184510][T11445] dev_ifsioc+0x13f1/0x1f70 [ 119.184527][T11445] ? __pfx_dev_ifsioc+0x10/0x10 [ 119.184543][T11445] ? __pfx___mutex_lock+0x10/0x10 [ 119.184577][T11445] ? dev_load+0x8e/0x240 [ 119.184600][T11445] ? rcu_is_watching+0x12/0xc0 [ 119.184622][T11445] ? lock_release+0x201/0x2f0 [ 119.184649][T11445] dev_ioctl+0x223/0x10e0 [ 119.184665][T11445] sock_do_ioctl+0x19d/0x280 [ 119.184687][T11445] ? __pfx_sock_do_ioctl+0x10/0x10 [ 119.184707][T11445] ? preempt_count_add+0x76/0x150 [ 119.184727][T11445] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 119.184752][T11445] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 119.184779][T11445] sock_ioctl+0x227/0x6b0 [ 119.184802][T11445] ? __pfx_sock_ioctl+0x10/0x10 [ 119.184822][T11445] ? hook_file_ioctl_common+0x145/0x410 [ 119.184842][T11445] ? selinux_file_ioctl+0x180/0x270 [ 119.184864][T11445] ? selinux_file_ioctl+0xb4/0x270 [ 119.184888][T11445] ? __pfx_sock_ioctl+0x10/0x10 [ 119.184910][T11445] __x64_sys_ioctl+0x18e/0x210 [ 119.184934][T11445] do_syscall_64+0xcd/0x4c0 [ 119.184954][T11445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.184970][T11445] RIP: 0033:0x7f1b5618ebe9 [ 119.184984][T11445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.185001][T11445] RSP: 002b:00007f1b57084038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.185018][T11445] RAX: ffffffffffffffda RBX: 00007f1b563b5fa0 RCX: 00007f1b5618ebe9 [ 119.185030][T11445] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000005 [ 119.185040][T11445] RBP: 00007f1b57084090 R08: 0000000000000000 R09: 0000000000000000 [ 119.185050][T11445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.185060][T11445] R13: 00007f1b563b6038 R14: 00007f1b563b5fa0 R15: 00007ffce6e3c348 [ 119.185077][T11445] [ 119.370456][T11455] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 119.373735][T11455] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.377292][T11455] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 119.380428][T11455] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 119.426295][T11462] binder: 11461:11462 ioctl c0306201 2000000000c0 returned -14 [ 119.495081][T11478] openvswitch: netlink: Multiple metadata blocks provided [ 119.587897][T11480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1438'. [ 119.731748][T11488] xfrm0 speed is unknown, defaulting to 1000 [ 120.247256][ T61] usb 11-1: USB disconnect, device number 7 [ 120.259948][ T40] kauditd_printk_skb: 379 callbacks suppressed [ 120.259959][ T40] audit: type=1400 audit(1755598877.447:4714): avc: denied { read write } for pid=11524 comm="syz.6.1442" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.269515][ T40] audit: type=1400 audit(1755598877.447:4715): avc: denied { open } for pid=11524 comm="syz.6.1442" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.276638][ T40] audit: type=1400 audit(1755598877.447:4716): avc: denied { ioctl } for pid=11524 comm="syz.6.1442" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 120.296693][ T40] audit: type=1400 audit(1755598877.477:4717): avc: denied { prog_run } for pid=11524 comm="syz.6.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 120.358353][ T40] audit: type=1400 audit(1755598877.547:4718): avc: denied { read write } for pid=11538 comm="syz.6.1444" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.367469][ T40] audit: type=1400 audit(1755598877.547:4719): avc: denied { open } for pid=11538 comm="syz.6.1444" path="/dev/usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.372189][T11539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.374828][ T40] audit: type=1400 audit(1755598877.547:4720): avc: denied { ioctl } for pid=11538 comm="syz.6.1444" path="/dev/usbmon8" dev="devtmpfs" ino=762 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 120.377922][T11540] bond3: option mode: unable to set because the bond device is up [ 120.391750][ T40] audit: type=1400 audit(1755598877.577:4721): avc: denied { create } for pid=11538 comm="syz.6.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.398172][T11539] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 120.402698][ T40] audit: type=1400 audit(1755598877.577:4722): avc: denied { bind } for pid=11538 comm="syz.6.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.409215][ T40] audit: type=1400 audit(1755598877.577:4723): avc: denied { getopt } for pid=11538 comm="syz.6.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.419575][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1445'. [ 120.465888][T11589] netlink: 'syz.6.1448': attribute type 4 has an invalid length. [ 120.473321][T11589] netlink: 'syz.6.1448': attribute type 4 has an invalid length. [ 120.476916][ T1148] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 120.539297][T11597] 9pnet: Unknown protocol version 9p2000.u'tF K'z*$ԦՄ@Bi(+@e.t*cf)dd luGhEt [ 120.551982][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1448'. [ 120.587185][ T9005] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 120.634762][T11604] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1452'. [ 120.639516][T11604] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1452'. [ 120.782508][T11641] FAULT_INJECTION: forcing a failure. [ 120.782508][T11641] name failslab, interval 1, probability 0, space 0, times 0 [ 120.786810][T11641] CPU: 0 UID: 0 PID: 11641 Comm: syz.1.1464 Not tainted syzkaller #0 PREEMPT(full) [ 120.786839][T11641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 120.786847][T11641] Call Trace: [ 120.786851][T11641] [ 120.786855][T11641] dump_stack_lvl+0x16c/0x1f0 [ 120.786920][T11641] should_fail_ex+0x512/0x640 [ 120.786940][T11641] ? tun_device_event+0x181/0x1270 [ 120.786954][T11641] should_failslab+0xc2/0x120 [ 120.786968][T11641] __kmalloc_noprof+0xd2/0x510 [ 120.786980][T11641] tun_device_event+0x181/0x1270 [ 120.786992][T11641] ? macvlan_device_event+0x6ca/0x890 [ 120.787007][T11641] ? macvtap_device_event+0xcd/0x3e0 [ 120.787021][T11641] ? ib_netdevice_event+0xfc/0x330 [ 120.787035][T11641] ? __pfx_macvtap_device_event+0x10/0x10 [ 120.787050][T11641] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.787063][T11641] ? ipmr_device_event+0x1bc/0x230 [ 120.787073][T11641] ? team_port_get_rtnl+0x8b/0x130 [ 120.787086][T11641] notifier_call_chain+0xb9/0x410 [ 120.787103][T11641] ? __pfx_tun_device_event+0x10/0x10 [ 120.787117][T11641] call_netdevice_notifiers_info+0xbe/0x140 [ 120.787133][T11641] netif_change_tx_queue_len+0x129/0x1e0 [ 120.787145][T11641] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 120.787157][T11641] ? full_name_hash+0xbc/0x110 [ 120.787178][T11641] dev_change_tx_queue_len+0xb2/0x260 [ 120.787192][T11641] dev_ifsioc+0x13f1/0x1f70 [ 120.787203][T11641] ? __pfx_dev_ifsioc+0x10/0x10 [ 120.787212][T11641] ? __pfx___mutex_lock+0x10/0x10 [ 120.787230][T11641] ? dev_load+0x8e/0x240 [ 120.787245][T11641] ? rcu_is_watching+0x12/0xc0 [ 120.787258][T11641] ? lock_release+0x201/0x2f0 [ 120.787275][T11641] dev_ioctl+0x223/0x10e0 [ 120.787285][T11641] sock_do_ioctl+0x19d/0x280 [ 120.787298][T11641] ? __pfx_sock_do_ioctl+0x10/0x10 [ 120.787311][T11641] ? preempt_count_add+0x76/0x150 [ 120.787323][T11641] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 120.787339][T11641] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 120.787357][T11641] sock_ioctl+0x227/0x6b0 [ 120.787373][T11641] ? __pfx_sock_ioctl+0x10/0x10 [ 120.787386][T11641] ? hook_file_ioctl_common+0x145/0x410 [ 120.787399][T11641] ? selinux_file_ioctl+0x180/0x270 [ 120.787414][T11641] ? selinux_file_ioctl+0xb4/0x270 [ 120.787430][T11641] ? __pfx_sock_ioctl+0x10/0x10 [ 120.787444][T11641] __x64_sys_ioctl+0x18e/0x210 [ 120.787475][T11641] do_syscall_64+0xcd/0x4c0 [ 120.787488][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.787498][T11641] RIP: 0033:0x7f1b5618ebe9 [ 120.787507][T11641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.787518][T11641] RSP: 002b:00007f1b57084038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.787546][T11641] RAX: ffffffffffffffda RBX: 00007f1b563b5fa0 RCX: 00007f1b5618ebe9 [ 120.787556][T11641] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000005 [ 120.787562][T11641] RBP: 00007f1b57084090 R08: 0000000000000000 R09: 0000000000000000 [ 120.787569][T11641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.787575][T11641] R13: 00007f1b563b6038 R14: 00007f1b563b5fa0 R15: 00007ffce6e3c348 [ 120.787585][T11641] [ 120.787664][T11641] syzkaller0: refused to change device tx_queue_len [ 120.997513][ T5331] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 121.002378][T11692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1476'. [ 121.005291][T11692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1476'. [ 121.078827][T11705] FAULT_INJECTION: forcing a failure. [ 121.078827][T11705] name failslab, interval 1, probability 0, space 0, times 0 [ 121.082812][T11705] CPU: 3 UID: 0 PID: 11705 Comm: syz.4.1479 Not tainted syzkaller #0 PREEMPT(full) [ 121.082828][T11705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.082835][T11705] Call Trace: [ 121.082839][T11705] [ 121.082843][T11705] dump_stack_lvl+0x16c/0x1f0 [ 121.082858][T11705] should_fail_ex+0x512/0x640 [ 121.082892][T11705] ? tun_device_event+0x419/0x1270 [ 121.082906][T11705] should_failslab+0xc2/0x120 [ 121.082919][T11705] __kmalloc_noprof+0xd2/0x510 [ 121.082931][T11705] tun_device_event+0x419/0x1270 [ 121.082943][T11705] ? macvlan_device_event+0x6ca/0x890 [ 121.082957][T11705] ? macvtap_device_event+0xcd/0x3e0 [ 121.082972][T11705] ? ib_netdevice_event+0xfc/0x330 [ 121.082987][T11705] ? __pfx_macvtap_device_event+0x10/0x10 [ 121.083002][T11705] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.083014][T11705] ? ipmr_device_event+0x1bc/0x230 [ 121.083025][T11705] ? team_port_get_rtnl+0x8b/0x130 [ 121.083038][T11705] notifier_call_chain+0xb9/0x410 [ 121.083055][T11705] ? __pfx_tun_device_event+0x10/0x10 [ 121.083070][T11705] call_netdevice_notifiers_info+0xbe/0x140 [ 121.083085][T11705] netif_change_tx_queue_len+0x129/0x1e0 [ 121.083101][T11705] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 121.083113][T11705] ? full_name_hash+0xbc/0x110 [ 121.083128][T11705] dev_change_tx_queue_len+0xb2/0x260 [ 121.083142][T11705] dev_ifsioc+0x13f1/0x1f70 [ 121.083153][T11705] ? __pfx_dev_ifsioc+0x10/0x10 [ 121.083162][T11705] ? __pfx___mutex_lock+0x10/0x10 [ 121.083175][T11705] ? dev_load+0x8e/0x240 [ 121.083190][T11705] ? rcu_is_watching+0x12/0xc0 [ 121.083204][T11705] ? lock_release+0x201/0x2f0 [ 121.083222][T11705] dev_ioctl+0x223/0x10e0 [ 121.083231][T11705] sock_do_ioctl+0x19d/0x280 [ 121.083245][T11705] ? __pfx_sock_do_ioctl+0x10/0x10 [ 121.083258][T11705] ? preempt_count_add+0x76/0x150 [ 121.083270][T11705] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 121.083286][T11705] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 121.083304][T11705] sock_ioctl+0x227/0x6b0 [ 121.083319][T11705] ? __pfx_sock_ioctl+0x10/0x10 [ 121.083332][T11705] ? hook_file_ioctl_common+0x145/0x410 [ 121.083344][T11705] ? selinux_file_ioctl+0x180/0x270 [ 121.083359][T11705] ? selinux_file_ioctl+0xb4/0x270 [ 121.083373][T11705] ? __pfx_sock_ioctl+0x10/0x10 [ 121.083388][T11705] __x64_sys_ioctl+0x18e/0x210 [ 121.083404][T11705] do_syscall_64+0xcd/0x4c0 [ 121.083416][T11705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.083427][T11705] RIP: 0033:0x7f3667b8ebe9 [ 121.083436][T11705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.083447][T11705] RSP: 002b:00007f3668ae2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.083457][T11705] RAX: ffffffffffffffda RBX: 00007f3667db5fa0 RCX: 00007f3667b8ebe9 [ 121.083464][T11705] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000005 [ 121.083471][T11705] RBP: 00007f3668ae2090 R08: 0000000000000000 R09: 0000000000000000 [ 121.083477][T11705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.083483][T11705] R13: 00007f3667db6038 R14: 00007f3667db5fa0 R15: 00007fff12628258 [ 121.083493][T11705] [ 121.083505][T11705] syzkaller0: refused to change device tx_queue_len [ 121.276840][ T61] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 121.447212][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 121.450539][ T61] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 121.453171][ T61] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.456246][ T61] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.459407][ T61] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.462475][ T61] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.466702][ T61] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.469874][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.628225][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 121.676240][T11731] netlink: 'syz.4.1484': attribute type 2 has an invalid length. [ 121.676855][ T61] usb 6-1: usb_control_msg returned -32 [ 121.679586][T11731] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 121.683303][ T61] usbtmc 6-1:16.0: can't read capabilities [ 121.760184][T11753] FAULT_INJECTION: forcing a failure. [ 121.760184][T11753] name failslab, interval 1, probability 0, space 0, times 0 [ 121.764050][T11753] CPU: 1 UID: 0 PID: 11753 Comm: syz.6.1488 Not tainted syzkaller #0 PREEMPT(full) [ 121.764065][T11753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 121.764072][T11753] Call Trace: [ 121.764076][T11753] [ 121.764080][T11753] dump_stack_lvl+0x16c/0x1f0 [ 121.764098][T11753] should_fail_ex+0x512/0x640 [ 121.764112][T11753] should_failslab+0xc2/0x120 [ 121.764124][T11753] __kvmalloc_node_noprof+0x137/0x620 [ 121.764134][T11753] ? trace_kmalloc+0x2b/0xd0 [ 121.764147][T11753] ? __kmalloc_noprof+0x242/0x510 [ 121.764156][T11753] ? tun_device_event+0x4c3/0x1270 [ 121.764171][T11753] ? tun_device_event+0x4c3/0x1270 [ 121.764183][T11753] tun_device_event+0x4c3/0x1270 [ 121.764196][T11753] ? macvlan_device_event+0x6ca/0x890 [ 121.764210][T11753] ? macvtap_device_event+0xcd/0x3e0 [ 121.764224][T11753] ? ib_netdevice_event+0xfc/0x330 [ 121.764239][T11753] ? __pfx_macvtap_device_event+0x10/0x10 [ 121.764254][T11753] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 121.764266][T11753] ? ipmr_device_event+0x1bc/0x230 [ 121.764278][T11753] notifier_call_chain+0xb9/0x410 [ 121.764295][T11753] ? __pfx_tun_device_event+0x10/0x10 [ 121.764309][T11753] call_netdevice_notifiers_info+0xbe/0x140 [ 121.764324][T11753] netif_change_tx_queue_len+0x129/0x1e0 [ 121.764336][T11753] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 121.764348][T11753] ? full_name_hash+0xbc/0x110 [ 121.764363][T11753] dev_change_tx_queue_len+0xb2/0x260 [ 121.764377][T11753] dev_ifsioc+0x13f1/0x1f70 [ 121.764387][T11753] ? __pfx_dev_ifsioc+0x10/0x10 [ 121.764396][T11753] ? __pfx___mutex_lock+0x10/0x10 [ 121.764409][T11753] ? dev_load+0x8e/0x240 [ 121.764424][T11753] ? rcu_is_watching+0x12/0xc0 [ 121.764438][T11753] ? lock_release+0x201/0x2f0 [ 121.764456][T11753] dev_ioctl+0x223/0x10e0 [ 121.764465][T11753] sock_do_ioctl+0x19d/0x280 [ 121.764479][T11753] ? __pfx_sock_do_ioctl+0x10/0x10 [ 121.764491][T11753] ? preempt_count_add+0x76/0x150 [ 121.764503][T11753] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 121.764519][T11753] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 121.764537][T11753] sock_ioctl+0x227/0x6b0 [ 121.764551][T11753] ? __pfx_sock_ioctl+0x10/0x10 [ 121.764564][T11753] ? hook_file_ioctl_common+0x145/0x410 [ 121.764577][T11753] ? selinux_file_ioctl+0x180/0x270 [ 121.764591][T11753] ? selinux_file_ioctl+0xb4/0x270 [ 121.764606][T11753] ? __pfx_sock_ioctl+0x10/0x10 [ 121.764620][T11753] __x64_sys_ioctl+0x18e/0x210 [ 121.764637][T11753] do_syscall_64+0xcd/0x4c0 [ 121.764648][T11753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.764660][T11753] RIP: 0033:0x7f3203f8ebe9 [ 121.764668][T11753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.764679][T11753] RSP: 002b:00007f32021f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.764689][T11753] RAX: ffffffffffffffda RBX: 00007f32041b5fa0 RCX: 00007f3203f8ebe9 [ 121.764696][T11753] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000005 [ 121.764702][T11753] RBP: 00007f32021f6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.764709][T11753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.764715][T11753] R13: 00007f32041b6038 R14: 00007f32041b5fa0 R15: 00007ffd6f3930f8 [ 121.764725][T11753] [ 121.764738][T11753] syzkaller0: refused to change device tx_queue_len [ 121.902742][ T34] xfrm0 speed is unknown, defaulting to 1000 [ 121.943431][T11769] bond0: entered promiscuous mode [ 121.945449][T11769] bridge0: entered promiscuous mode [ 121.948130][T11769] bond0: entered allmulticast mode [ 121.949894][T11769] bridge0: entered allmulticast mode [ 122.035459][T11778] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 122.047135][ T34] usb 6-1: USB disconnect, device number 9 [ 122.064051][T11794] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 122.095946][T11798] binder: BINDER_SET_CONTEXT_MGR already set [ 122.098629][T11798] binder: 11797:11798 ioctl 4018620d 2000000000c0 returned -16 [ 122.101475][T11798] binder: BINDER_SET_CONTEXT_MGR already set [ 122.103378][T11798] binder: 11797:11798 ioctl 4018620d 2000000000c0 returned -16 [ 122.103542][T11799] geneve3: entered promiscuous mode [ 122.108405][T11799] geneve3: entered allmulticast mode [ 122.178760][T11815] netfs: Couldn't get user pages (rc=-14) [ 122.279962][T11821] sp0: Synchronizing with TNC [ 122.284177][T11825] gretap0: entered promiscuous mode [ 122.287244][T11825] batadv_slave_1: entered promiscuous mode [ 122.296275][T11832] libceph: resolve '4' (ret=-3): failed [ 122.323294][ T9016] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.330134][ T9013] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.337395][ T9013] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.340305][ T9013] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.396521][T11868] overlayfs: unescaped trailing colons in lowerdir mount option. [ 122.448100][T11878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.450957][T11878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.462948][T11885] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 122.462959][T11884] netlink: 'syz.1.1510': attribute type 1 has an invalid length. [ 122.472648][T11885] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.528283][T11925] bpf: Bad value for 'uid' [ 122.530469][T11925] overlay: Unknown parameter 'smackfsfloor' [ 122.551447][T11884] bond4: (slave wlan1): Enslaving as an active interface with a down link [ 122.558699][T11885] vlan2: entered allmulticast mode [ 122.561030][T11885] veth1: entered allmulticast mode [ 122.658211][T11949] (syz.6.1515,11949,2):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 122.798302][T11955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=184 sclass=netlink_route_socket pid=11955 comm=syz.6.1517 [ 122.836837][ T6104] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 122.966891][ T6104] usb 6-1: device descriptor read/64, error -71 [ 123.125485][T11998] CIFS mount error: No usable UNC path provided in device string! [ 123.125485][T11998] [ 123.129918][T11998] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 123.203096][T12008] SELinux: policydb version 711598852 does not match my version range 15-35 [ 123.206299][T12008] SELinux: failed to load policy [ 123.217224][ T6104] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 123.258252][T12015] loop6: detected capacity change from 0 to 524287999 [ 123.346792][ T6104] usb 6-1: device descriptor read/64, error -71 [ 123.360649][T11925] ceph: No mds server is up or the cluster is laggy [ 123.379079][T12032] __nla_validate_parse: 12 callbacks suppressed [ 123.379094][T12032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1534'. [ 123.461170][ T6104] usb usb6-port1: attempt power cycle [ 123.505829][T12060] netlink: 'syz.4.1541': attribute type 5 has an invalid length. [ 123.530452][T12067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1542'. [ 123.625129][T12142] /dev/nullb0: Can't open blockdev [ 123.784438][T12174] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=12174 comm=syz.4.1552 [ 123.806796][ T6104] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 123.813961][T12186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.821735][T12179] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1553'. [ 123.828200][ T6104] usb 6-1: device descriptor read/8, error -71 [ 124.049948][T12209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22640 sclass=netlink_route_socket pid=12209 comm=syz.4.1561 [ 124.066908][ T6104] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 124.087853][ T6104] usb 6-1: device descriptor read/8, error -71 [ 124.178554][T12216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'. [ 124.181508][T12216] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 124.197157][ T6104] usb usb6-port1: unable to enumerate USB device [ 124.598772][T12260] ------------[ cut here ]------------ [ 124.601291][T12260] WARNING: CPU: 0 PID: 12260 at arch/x86/kvm/x86.c:11551 kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 124.604601][T12260] Modules linked in: [ 124.606135][T12260] CPU: 0 UID: 0 PID: 12260 Comm: syz.6.1571 Not tainted syzkaller #0 PREEMPT(full) [ 124.611351][T12260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.614722][T12260] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 124.616955][T12260] Code: 0a 00 00 00 00 00 00 e8 55 6b be 1e 31 ff 89 c5 89 c6 e8 04 ea 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 b2 ee 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 a4 ee 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 124.624299][T12260] RSP: 0018:ffffc900057cfc30 EFLAGS: 00010293 [ 124.626648][T12260] RAX: 0000000000000000 RBX: ffff888054f1d280 RCX: ffffffff814191ff [ 124.629723][T12260] RDX: ffff888053668000 RSI: ffffffff8141a27e RDI: 0000000000000007 [ 124.633220][T12260] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 124.636383][T12260] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88805696f000 [ 124.639190][T12260] R13: ffff888054f1d358 R14: 0000000000000000 R15: ffff888054f1d5b4 [ 124.641730][T12260] FS: 00007f32021d56c0(0000) GS:ffff8880d66bc000(0000) knlGS:0000000000000000 [ 124.644565][T12260] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.646682][T12260] CR2: 000000005200000c CR3: 000000004c711000 CR4: 0000000000352ef0 [ 124.649297][T12260] DR0: 0000000000000000 DR1: 0000000000000008 DR2: 0000000000000000 [ 124.650598][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1571'. [ 124.650629][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1571'. [ 124.651790][T12260] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 124.651801][T12260] Call Trace: [ 124.651806][T12260] [ 124.651813][T12260] kvm_vcpu_ioctl+0x5eb/0x1690 [ 124.651833][T12260] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 124.666345][T12260] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.668893][T12260] ? do_vfs_ioctl+0x128/0x14f0 [ 124.670666][T12260] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 124.672353][T12260] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 124.674597][T12260] ? rcu_is_watching+0x12/0xc0 [ 124.676216][T12260] ? __fget_files+0x204/0x3c0 [ 124.677921][T12260] ? hook_file_ioctl_common+0x145/0x410 [ 124.679958][T12260] ? selinux_file_ioctl+0x180/0x270 [ 124.681772][T12260] ? selinux_file_ioctl+0xb4/0x270 [ 124.683581][T12260] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 124.685376][T12260] __x64_sys_ioctl+0x18e/0x210 [ 124.687117][T12260] do_syscall_64+0xcd/0x4c0 [ 124.688607][T12260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.690494][T12260] RIP: 0033:0x7f3203f8ebe9 [ 124.692091][T12260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.699719][T12260] RSP: 002b:00007f32021d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.703068][T12260] RAX: ffffffffffffffda RBX: 00007f32041b6090 RCX: 00007f3203f8ebe9 [ 124.706303][T12260] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 124.709691][T12260] RBP: 00007f3204011e19 R08: 0000000000000000 R09: 0000000000000000 [ 124.712392][T12260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.715021][T12260] R13: 00007f32041b6128 R14: 00007f32041b6090 R15: 00007ffd6f3930f8 [ 124.717721][T12260] [ 124.718764][T12260] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.721547][T12260] CPU: 0 UID: 0 PID: 12260 Comm: syz.6.1571 Not tainted syzkaller #0 PREEMPT(full) [ 124.724768][T12260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 124.728657][T12260] Call Trace: [ 124.729749][T12260] [ 124.730765][T12260] dump_stack_lvl+0x3d/0x1f0 [ 124.732313][T12260] vpanic+0x6e8/0x7a0 [ 124.733615][T12260] ? __pfx_vpanic+0x10/0x10 [ 124.735126][T12260] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 124.736979][T12260] panic+0xca/0xd0 [ 124.738199][T12260] ? __pfx_panic+0x10/0x10 [ 124.739751][T12260] ? check_panic_on_warn+0x1f/0xb0 [ 124.741526][T12260] check_panic_on_warn+0xab/0xb0 [ 124.743210][T12260] __warn+0xf6/0x3c0 [ 124.744496][T12260] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 124.746457][T12260] report_bug+0x3c3/0x580 [ 124.747922][T12260] ? kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 124.749908][T12260] handle_bug+0x184/0x210 [ 124.751323][T12260] exc_invalid_op+0x17/0x50 [ 124.752816][T12260] asm_exc_invalid_op+0x1a/0x20 [ 124.754396][T12260] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x14df/0x1980 [ 124.756454][T12260] Code: 0a 00 00 00 00 00 00 e8 55 6b be 1e 31 ff 89 c5 89 c6 e8 04 ea 79 00 85 ed 0f 8f d9 ef ff ff e9 25 f0 ff ff e8 b2 ee 79 00 90 <0f> 0b 90 e9 81 ef ff ff e8 a4 ee 79 00 90 0f 0b 90 e9 b8 ef ff ff [ 124.762768][T12260] RSP: 0018:ffffc900057cfc30 EFLAGS: 00010293 [ 124.765006][T12260] RAX: 0000000000000000 RBX: ffff888054f1d280 RCX: ffffffff814191ff [ 124.767752][T12260] RDX: ffff888053668000 RSI: ffffffff8141a27e RDI: 0000000000000007 [ 124.770442][T12260] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000 [ 124.773082][T12260] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88805696f000 [ 124.775608][T12260] R13: ffff888054f1d358 R14: 0000000000000000 R15: ffff888054f1d5b4 [ 124.778153][T12260] ? kvm_arch_vcpu_ioctl_run+0x45f/0x1980 [ 124.779944][T12260] ? kvm_arch_vcpu_ioctl_run+0x14de/0x1980 [ 124.781789][T12260] kvm_vcpu_ioctl+0x5eb/0x1690 [ 124.783335][T12260] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 124.784964][T12260] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 124.787061][T12260] ? do_vfs_ioctl+0x128/0x14f0 [ 124.788680][T12260] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 124.790293][T12260] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 124.792479][T12260] ? rcu_is_watching+0x12/0xc0 [ 124.793979][T12260] ? __fget_files+0x204/0x3c0 [ 124.795433][T12260] ? hook_file_ioctl_common+0x145/0x410 [ 124.797144][T12260] ? selinux_file_ioctl+0x180/0x270 [ 124.798893][T12260] ? selinux_file_ioctl+0xb4/0x270 [ 124.800559][T12260] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 124.802380][T12260] __x64_sys_ioctl+0x18e/0x210 [ 124.804113][T12260] do_syscall_64+0xcd/0x4c0 [ 124.805553][T12260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.807455][T12260] RIP: 0033:0x7f3203f8ebe9 [ 124.808873][T12260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.814801][T12260] RSP: 002b:00007f32021d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.817511][T12260] RAX: ffffffffffffffda RBX: 00007f32041b6090 RCX: 00007f3203f8ebe9 [ 124.820170][T12260] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 124.823107][T12260] RBP: 00007f3204011e19 R08: 0000000000000000 R09: 0000000000000000 [ 124.825717][T12260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.828529][T12260] R13: 00007f32041b6128 R14: 00007f32041b6090 R15: 00007ffd6f3930f8 [ 124.831041][T12260] [ 124.832759][T12260] Kernel Offset: disabled [ 124.834155][T12260] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:21:21 Registers: info registers vcpu 0 CPU#0 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85643805 RDI=ffffffff9b10e020 RBP=ffffffff9b10dfe0 RSP=ffffc900057cf5a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552030203a555043 R12=0000000000000000 R13=000000000000003a R14=ffffffff9b10dfe0 R15=ffffffff856437a0 RIP=ffffffff8564382f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f32021d56c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d66bc000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0050 ffff8880320db000 00000007 00008200 DPL=0 LDT TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005200000c CR3=000000004c711000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000008 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3204012ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3204012fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006f RBX=ffffc90006943818 RCX=ffffffff86b43929 RDX=1ffff110051ee493 RSI=ffffffff86b43936 RDI=ffff888028f724aa RBP=000000000000006f RSP=ffffc90003976ec8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=00000000ab100054 R13=dffffc0000000000 R14=ffff888029d38000 R15=ffff888028f72480 RIP=ffffffff86b439cb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f260d744300 ffffffff 00c00000 GS =0000 ffff8880d67bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd6d37b7dac CR3=00000000302af000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000008 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=7061f6af385ce479 927291944429419e 7061f6af385ce479 927291944429419e 7061f6af385ce479 927291944429419e 7061f6af385ce479 927291944429419e ZMM18=41eb08d7fba34806 82c0821153d30635 41eb08d7fba34806 82c0821153d30635 41eb08d7fba34806 82c0821153d30635 41eb08d7fba34806 82c0821153d30635 ZMM19=6b09000000000000 0000000000000004 6b09000000000000 0000000000000003 6b09000000000000 0000000000000002 6b09000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 02100013b0032810 001290031225dfdb fb0070bd26032b16 08158c0301000002 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0406158803000000 1408081580031580 0412800312800413 a003000800139003 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0fffffffffffff04 1380030108001080 04040273ee003276 4350495401ffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000009 0000000cffffffda 0000000003000000 000000160000000c ZMM25=90f3782c90f3782c 90f3782c90f3782c 90f3782c90f3782c 90f3782c90f3782c 90f3782c90f3782c 90f3782c90f3782c 90f3782c90f3782c 90f3782c90f3782c ZMM26=c84df602c84df602 c84df602c84df602 c84df602c84df602 c84df602c84df602 c84df602c84df602 c84df602c84df602 c84df602c84df602 c84df602c84df602 ZMM27=8e8732998e873299 8e8732998e873299 8e8732998e873299 8e8732998e873299 8e8732998e873299 8e8732998e873299 8e8732998e873299 8e8732998e873299 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=ae070000ae070000 ae070000ae070000 ae070000ae070000 ae070000ae070000 ae070000ae070000 ae070000ae070000 ae070000ae070000 ae070000ae070000 info registers vcpu 2 CPU#2 RAX=000000003dacaee5 RBX=000000003dacaee5 RCX=ffff888037dfc700 RDX=ffffffff81000130 RSI=0000000000000003 RDI=00000000c3c8f568 RBP=000000000000000f RSP=ffffc90003a7f4a8 R8 =0000000000000005 R9 =ffff88816d6aee50 R10=000000003411b4a0 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=000000000000000f R15=ffffc90003a7f500 RIP=ffffffff8516f10e RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fd6d44386c0 ffffffff 00c00000 GS =0000 ffff8880d68bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd6d37b20c0 CR3=0000000065bb9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000008 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000e002fefc Opmask02=00000000e0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7d2321c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7d2321c6 00007ffc7d2321cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d3612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d3612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d3612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d3612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d3612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d3612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d37874a8 00007fd6d37874a0 00007fd6d3787498 00007fd6d3787470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d42ed100 00007fd6d3787460 00007fd6d3787478 00007fd6d37874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d37874b8 00007fd6d37874b0 00007fd6d37874a8 00007fd6d37874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000cdd44 RBX=0000000000000003 RCX=ffffffff8b939c29 RDX=ffffed100d4e6656 RSI=ffffffff8c162800 RDI=ffffffff81913311 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90ab3f90 R15=0000000000000000 RIP=ffffffff8b93878f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d69bc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b31a23ffc CR3=0000000065bb9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000008 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=00000000e002fefc Opmask02=00000000e0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7d2321c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc7d2321c6 00007ffc7d2321cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d3612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d3612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d3612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d3612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d3612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d3612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d37874a8 00007fd6d37874a0 00007fd6d3787498 00007fd6d3787470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d42ed100 00007fd6d3787460 00007fd6d3787478 00007fd6d37874c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd6d37874b8 00007fd6d37874b0 00007fd6d37874a8 00007fd6d37874a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000